reproducible builds

The backdoor lives in the compiler, not the source

A Thompson-style compiler backdoor passes source audits, signatures, and reproducible builds because the validators are built by the same toolchain.