Conversation

@murks

Of course I'm not suggesting that it'll ever be zero.

Clearly those are connected, but separate issues. However, without reproducible and verified builds, you don't even know if the source code you're reading is actually the source code used to generate the build you're running.

It's an important step in the right direction.