Yes. It was part of why certain assurance activities were in TCSEC at B3/A1 levels. It's why they had to model every behavior, every information flow, allow ind

Yes. It was part of why certain assurance activities were in TCSEC at B3/A1 levels. It's why they had to model every behavior, every information flow, allow independent replication, and allow building from source locally. Leaves little room to hide backdoors. https://en.m.wikipedia.org/wiki/Trusted_Computer_System_Evaluation_Criteria https://en.m.wikipedia.org/wiki/Trusted_Computer_System_Eval... DO-178C also traces code to requirements to spot dead code or back doors.