This reminds me of the Reproducible Builds project:

https://reproducible-builds.org/

Part of that is that each builder signs statements about what inputs they used and build results they got and then you trust the ones that agree.