Debian reproducible builds create a notion of equality at the binary level (IIUC), before that, you cannot know what is inside the compiled binary. Maybe that&#x27;s useless with a system of carefully signed packages .. that&#x27;s above my level.