Once you've bootstrapped a single platform a certain number of times with the exact same compiler output through a diverse-enough set of toolchains, you can sta

Once you've bootstrapped a single platform a certain number of times with the exact same compiler output through a diverse-enough set of toolchains, you can start to trust that the entire toolchain (including hardware) is secure and simply release hashes of those diversely-compiled binaries as trusted roots for faster rebuilds (ie: nightlies).