7 ms·
These are the solutions to the three components: > - is this actually the binary that comes from that code? Reproducible Builds that are also Bootstrappable B
by pabs3 1y ago
These are the solutions to the three components:
> - is this actually the binary that comes from that code?
Reproducible Builds that are also Bootstrappable Builds, starting from a minimal auditable machine code seed.
https://reproducible-builds.org/ https://reproducible-builds.org/
https://bootstrappable.org/ https://bootstrappable.org/
https://lwn.net/Articles/983340/ https://lwn.net/Articles/983340/
https://stagex.tools/ https://stagex.tools/
> - is that code trustworthy?
Socially distributed code auditing:
https://github.com/crev-dev/ https://github.com/crev-dev/
> - is this binary trustworthy?
The other two combined should provide this.