“Anyway, what exactly do they require of you for source-to-object correspondence?” In my case this is not really clear. You have quite a bit of leeway but you

“Anyway, what exactly do they require of you for source-to-object correspondence?” In my case this is not really clear. You have quite a bit of leeway but you never know when you will get rejected. We had things that are approved a few years ago being rejected now because some rules have been tightened. With reproducible builds you could save a lot of time validating build chains. It would be a huge timesaver and probably also allow us to be more creative with the build chain because if the binary is the same you know it worked.