Prisma 5.22.0 engine checksum download blocked by Cloudflare 1010

[cpc330702515-design]

We are preparing the standard Linux build dependencies for Prisma 5.22.0, engine commit 605197351a3c8bdd595af2d2a9bc3025bca48ea2, target debian-openssl-3.0.x.

One HTTPS GET of the official checksum URL returned HTTP 403:

https://binaries.prisma.sh/all_commits/605197351a3c8bdd595af2d2a9bc3025bca48ea2/debian-openssl-3.0.x/schema-engine.gz.sha256

• Request start: 2026-09-15T06:49:15.967319+00:00
• Response Date: Tue, 15 Sep 2026 06:49:28 GMT
• CF-Ray: a3b5b10ed947df9a-SJC
• Server: cloudflare
• Content-Type: text/plain; charset=UTF-8
• Content-Length: 17
• Exact body: error code: 1010 followed by a newline
• Body SHA-256: 2938e9f1284180959e33ab1718d0793a72ff6e4cdb8108c34dcd14e69446de5c
• Client: Python standard-library urllib HTTPS GET; no custom authentication or browser emulation; redirects disabled.

We stopped after this single checksum request. No engine binaries were downloaded or executed. Could you inspect this Ray ID and confirm the supported official access method for the pinned engine checksums and archives? Please advise whether a CDN rule is unexpectedly blocking this legitimate dependency request. We will retain checksum verification and will not route around access controls.

Cloudflare's documentation associates error 1010 with the site's browser/client-signature access rule and directs visitors to the site owner. The exact rule for this request requires your server-side logs:
https://developers.cloudflare.com/support/troubleshooting/http-status-codes/cloudflare-1xxx-errors/error-1010/

[danissinadSe]

We also observed the same HTTP 403 / error 1010 response for the Windows query-engine checksum of this exact Prisma 5.22.0 engine commit:

https://binaries.prisma.sh/all_commits/605197351a3c8bdd595af2d2a9bc3025bca48ea2/windows/query_engine.dll.node.sha256

This was one request on 15 September 2026. Response Content-Type was text/plain; charset=UTF-8 and body was error code: 1010 followed by a newline. No authentic checksum/archive was acquired. This evidence is separate from the Linux request already reported above; we do not attribute its Ray ID to the Windows request.

Please include Windows query_engine.dll.node.gz and schema-engine.exe.gz, with their compressed and expanded SHA256 checksums, when confirming a supported publisher access/delivery route for this engine commit. We retain integrity verification and have not retried using proxy, client-identity or mirror changes.