thing calm-arch-updates does keep track of file name and hash across arch updates so you can figure out what changed. yikes uhh, it takes a while, so sudo might expire and it sits there overnight waiting for your password instead of updating codename bugfree-shame (lol)