This is where reproducible builds [0] come in. We can trust our binaries much more if the same build inputs yield the same build output. Building on that, cou

This is where reproducible builds [0] come in. We can trust our binaries much more if the same build inputs yield the same build output. Building on that, could we find a fixed point where the OS builds the exact same bootstrap binaries that were used to bootstrap the OS to begin with? [1] That would give us even more confidence that the binaries we're using are as they should be. Interesting place for experimentation. [0] https://reproducible.debian.net/reproducible.html https://reproducible.debian.net/reproducible.html [1] https://gnu.org/software/guix/manual/html_node/Bootstrapping.html#Building-the-Bootstrap-Binaries https://gnu.org/software/guix/manual/html_node/Bootstrapping...