deterministic doesnt really mean trust per se to me.
it means reliable.
if you dont know what you're getting every time its hard to be any reliable.
of course, if you're reliable, its more trustable.
if you dont know what you're getting every time its hard to be any reliable.
of course, if you're reliable, its more trustable.
- make the build system reproducable, so that every build is exactly the same binary, no matter who runs it. that's "easy". But you don't know why you get that exact binary
- make the build system verifiable, or the resulting binary verifiable so that you know exactly why you get that binary. This is hard.
The first one is repeatable, reliable.
The second one is trustworthy, verifiable.