Articles in “Trust architecture”

How do you know the running program matches the open source?

Open source makes code inspectable; remote attestation gives the client a way to verify what runs remotely.