OK, I'll give you that. In an enterprise environment, a company can choose to trust specific vendors' binaries, and this often happens. However, I don't think

OK, I'll give you that. In an enterprise environment, a company can choose to trust specific vendors' binaries, and this often happens. However, I don't think this has much bearing on the original pain point. I'm familiar with these sorts of production environments. Running a local store of gems is standard practice already. There is little marginal cost to doing this.