Obviously not? But there are trustworthy people working with and integrating that code, there's a good chance they'll notice a hinky commit, and they're very c

Obviously not? But there are trustworthy people working with and integrating that code, there's a good chance they'll notice a hinky commit, and they're very close to having completely reproducible builds—which means that there can be verification that the shipped binary matches the inspected source. https://gregoryszorc.com/blog/2018/06/20/deterministic-firefox-builds/ https://gregoryszorc.com/blog/2018/06/20/deterministic-firef...