The most important thing is what happens after vendors fail and disappear - the code and keys and reproducible build system must be released so people can fix t

The most important thing is what happens after vendors fail and disappear - the code and keys and reproducible build system must be released so people can fix their things. A standard and an org for keeping those things in escrow, please!