Unless you provide source code that builds reproducibly, and a detached signature that your hardware checks.