Maybe we should be, in response to knowing the viability and use of CI hacks? Ensure you have a reproducible build, then randomly build on a different machine

Maybe we should be, in response to knowing the viability and use of CI hacks? Ensure you have a reproducible build, then randomly build on a different machine and compare file signatures of the results. Do it every so often with a “clean room” machine. Probably no need to run parallel infra that’s just as likely to be hacked.