We should offer an installation based on Diverse Double-Compiling[0], in which everything is compiled from scratch in a manner which is verifiable by the user. <http://www.dwheeler.com/trusting-trust/>
i don't see anything actionable here