Reproducible builds (e.g. via Nix / Bazel)