This is a surprisingly baroque solution for attesting to a computation being done as specified. Imagine how much simpler it would be if GitHub (or Google or Git

This is a surprisingly baroque solution for attesting to a computation being done as specified. Imagine how much simpler it would be if GitHub (or Google or Gitlab or, better yet, multiple vendors) actually supported this style of attestation natively. I would love for app store vendors to put their money where their mouth is: allow reproducibly-build open source (or source-available) apps to be verified by the store and to have a clear badge in the store that indicates that you’re getting the app you think you are.