You can validate the code running on the client (well, not on iOS, but that's true for all iOS apps unless you've jailbroken your phone).
If Signal works well, you shouldn't need to validate what code is running on the server in the first place.
If Signal works well, you shouldn't need to validate what code is running on the server in the first place.
on the signal.org website, there is a direct download link right below the google play button.
it's still just a binary, but you can control updates. incidentally i just did an update this way.