There is some documentation about the cross-distro effort to produce reproducible package builds here: https://reproducible-builds.org/docs/sharing-certificati

There is some documentation about the cross-distro effort to produce reproducible package builds here: https://reproducible-builds.org/docs/sharing-certifications/ https://reproducible-builds.org/docs/sharing-certifications/ and this is a good explanation about Mozilla's plan for logging Binary Transparency results: https://wiki.mozilla.org/Security/Binary_Transparency https://wiki.mozilla.org/Security/Binary_Transparency