Even if it's open sourced, how do you know the machine actually runs the same code as you see on Github (or wherever the repo is hosted)? Verifying that requir

Even if it's open sourced, how do you know the machine actually runs the same code as you see on Github (or wherever the repo is hosted)? Verifying that requires more expertise than verifying the physical ballots themselves.