contentHash

SHA-256 of the source JAR's bytes, or null for classpath-loaded bundles (which have no backing JAR file). Lets a caller detect that a JAR at a previously-loaded path has been rebuilt — same sourceJar, different content — which is the signal a bundle library uses to decide a reload is warranted rather than a no-op.