diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index e97b72a..5c50422 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -81,12 +81,13 @@ jobs:
             Prebuilt Linux binaries. No `tor` package required.
 
             ```bash
-            # x86_64
-            curl -fL -o onionwire \
-              https://github.com/sirius0xdev/onionwire/releases/download/${{ github.ref_name }}/onionwire-x86_64-unknown-linux-gnu
-            chmod +x onionwire
-            ./onionwire --version
-            ./onionwire
+            # x86_64 — keep the asset filename so sha256sum -c matches
+            curl -fL -O https://github.com/sirius0xdev/onionwire/releases/download/${{ github.ref_name }}/onionwire-x86_64-unknown-linux-gnu
+            curl -fL -O https://github.com/sirius0xdev/onionwire/releases/download/${{ github.ref_name }}/onionwire-x86_64-unknown-linux-gnu.sha256
+            sha256sum -c onionwire-x86_64-unknown-linux-gnu.sha256
+            chmod +x onionwire-x86_64-unknown-linux-gnu
+            ./onionwire-x86_64-unknown-linux-gnu --version
+            ./onionwire-x86_64-unknown-linux-gnu
             ```
 
             See the README install guide for aarch64, checksums, and building from source.
diff --git a/README.md b/README.md
index f5c97c5..938ff58 100644
--- a/README.md
+++ b/README.md
@@ -26,39 +26,35 @@ CI builds stripped Linux binaries on every `v*.*.*` tag and attaches them to [Gi
 **x86_64 (most PCs / VMs):**
 
 ```bash
-curl -fL -o onionwire \
-  https://github.com/sirius0xdev/onionwire/releases/latest/download/onionwire-x86_64-unknown-linux-gnu
-curl -fL -o onionwire.sha256 \
-  https://github.com/sirius0xdev/onionwire/releases/latest/download/onionwire-x86_64-unknown-linux-gnu.sha256
-sha256sum -c onionwire.sha256
-chmod +x onionwire
-./onionwire --version
+curl -fL -O https://github.com/sirius0xdev/onionwire/releases/latest/download/onionwire-x86_64-unknown-linux-gnu
+curl -fL -O https://github.com/sirius0xdev/onionwire/releases/latest/download/onionwire-x86_64-unknown-linux-gnu.sha256
+sha256sum -c onionwire-x86_64-unknown-linux-gnu.sha256
+chmod +x onionwire-x86_64-unknown-linux-gnu
+./onionwire-x86_64-unknown-linux-gnu --version
 ```
 
 **aarch64 (Raspberry Pi, ARM servers):**
 
 ```bash
-curl -fL -o onionwire \
-  https://github.com/sirius0xdev/onionwire/releases/latest/download/onionwire-aarch64-unknown-linux-gnu
-curl -fL -o onionwire.sha256 \
-  https://github.com/sirius0xdev/onionwire/releases/latest/download/onionwire-aarch64-unknown-linux-gnu.sha256
-sha256sum -c onionwire.sha256
-chmod +x onionwire
-./onionwire --version
+curl -fL -O https://github.com/sirius0xdev/onionwire/releases/latest/download/onionwire-aarch64-unknown-linux-gnu
+curl -fL -O https://github.com/sirius0xdev/onionwire/releases/latest/download/onionwire-aarch64-unknown-linux-gnu.sha256
+sha256sum -c onionwire-aarch64-unknown-linux-gnu.sha256
+chmod +x onionwire-aarch64-unknown-linux-gnu
+./onionwire-aarch64-unknown-linux-gnu --version
 ```
 
-Install onto `PATH` if you want `onionwire` as a command:
+Install onto `PATH` if you want `onionwire` as a command (keep the asset filename until after `sha256sum -c`):
 
 ```bash
 mkdir -p ~/.local/bin
-mv onionwire ~/.local/bin/
+install -m 755 onionwire-x86_64-unknown-linux-gnu ~/.local/bin/onionwire
 # ensure ~/.local/bin is on PATH, then:
 onionwire
 ```
 
 The binary is dynamically linked against glibc (Ubuntu 24.04 builders). If `./onionwire` dies with `GLIBC_… not found`, use Option B on that machine.
 
-Checksum files are `sha256sum` format (`<hash>  onionwire-<target>`). Run `sha256sum -c` from the same directory as the binary, or edit the filename in the `.sha256` file to match.
+Checksum files are `sha256sum` format (`<hash>  onionwire-<target>`). Download both files with `curl -O` so the names match, then `sha256sum -c`.
 
 ### Option B — build from source