Look into mobilecoin / reproducible builds

[sbellem]

See https://github.com/mobilecoinfoundation/mobilecoin/blob/master/consensus/service/BUILD.md#build.

• Build the consensus enclave.
• Try to understand what's the role of the signed enclave, used to build.
• How can one re-build the downloaded signed enclave, to convince oneself that it was built from a specific version of source code?
• etc

[sbellem]

Question about reproducible builds has been asked at mobilecoinfoundation/mobilecoin#853.

[sbellem]

See whether the approach used in https://github.com/signalapp/contactdiscoveryservice is also used in MobileCoin.

They use https://wiki.debian.org/ReproducibleBuilds. See https://github.com/signalapp/contactdiscoveryservice#building-reproducibly-with-docker.