So reproducible build means that given the same input (ie same hash of dependencies), you get the same output. The description of the build inputs has referenc

So reproducible build means that given the same input (ie same hash of dependencies), you get the same output. The description of the build inputs has references to the definitions of other packages which have references to the exact version of the source code or commit hash or whatever (and hopefully has a hash of whatever is supposed to be downloaded). Therefore to get a full description one must expand all the other definitions. I don’t know how to do this in guix/nix but I suppose one might say “this package definition with this commit of this repo of package definitions. Pinning to a specific version seems to be a different issue and I don’t really know anything about that