Whether this distinction matters entirely depends on what your end goal is for which you want reproducible builds. Besides, it's not a problem that Cargo alone

Whether this distinction matters entirely depends on what your end goal is for which you want reproducible builds. Besides, it's not a problem that Cargo alone can solve. At the end of the day it's picking up code from a git repo, and how you produced the code in that repo is not something it could control.