> you'd need to convince a signing authority to sign the code. Not necessarily. You can also self-sign or just announce the hash, let the public inspect and te

> you'd need to convince a signing authority to sign the code. Not necessarily. You can also self-sign or just announce the hash, let the public inspect and test your good driver for a year, and then ship the bad driver to people who only check the hash