Just the good parts of reproducible builds: the security and assurance of signed and provable inputs, without the misery of constantly repairing your build system.