Better yet, enact a policy that before a release goes online, all foreign offices have to audit every change, compile and verify the binary matches, then sign t

Better yet, enact a policy that before a release goes online, all foreign offices have to audit every change, compile and verify the binary matches, then sign the binary. If a release goes online that isn't signed by all locations, it's obvious something's wrong.