That's the right link? One of the three requirements is "there is additional code that is not traceable to source code" -- but that's not the case here at all.

That's the right link? One of the three requirements is "there is additional code that is not traceable to source code" -- but that's not the case here at all. Every emitted assembly line has a corresponding source code line -- at least as far as compiler and verification systems are concerned. Users see something else, but build/testing system does not know about that. To follow more, I do wonder what is the threat model for a system like this here... because your page talks about "generates additional code that is not directly traceable to Source Code statements". So if the backdoored compiler emits something like: # Source line: if (user_class == ADMIN) { cmp $user_class, V_ADMIN jeq admin_stuff cmp $user_password, "please_let_me_in" jeq admin_stuff ... then your fancy verification system will see that that block of assembly is directly traceable to source code statement (because compiler said so!) and will let it through. Looks like that will be as suspectable to "trusting trust" attack as any other system... as long as attacker does not forget to forge metadata as well as object code.