Next gen: prove this binary in one click (independent rebuilds that must agree) issue #298
open andymccall opened this · 0 comments
andymccall
Andy's next-gen list (2026-10-24), fourth. A release's assets rebuilt from the tagged state by two independent runners (different hosts, ideally different owners); their receipts must match byte for byte, witnessed in the transparency log. The trust page and oh release trust then show reproducibility, and anyone can check that an apt package came from that exact commit: from the source and its signers to the build. Completes the sovereign + verifiable story for the enterprise pitch.
Andy's next-gen list (2026-10-24), fourth. A release's assets rebuilt from the tagged state by two independent runners (different hosts, ideally different owners); their receipts must match byte for byte, witnessed in the transparency log. The trust page and
oh release trustthen show reproducibility, and anyone can check that an apt package came from that exact commit: from the source and its signers to the build. Completes the sovereign + verifiable story for the enterprise pitch.