LILA: Decentralized Build Reproducibility Monitoring for the Functional Package Management Model

Ensuring the integrity of software build artifacts is an increasingly important concern for modern software engineering, driven by increasingly sophisticated attacks on build systems, distribution channels, and development infrastructures. Reproducible builds—where binaries built independently from the same source code can be verified to be bit-for-bit identical to the distributed artifacts—provide a principled foundation for transparency and trust in software distribution.