Paths, timestamps and VCS state can leak into a binary and break this. Compare two builds’ hashes to find out.
Reproducible build
Building the same source twice gives byte-identical output, so a checksum can prove what was built.
Paths, timestamps and VCS state can leak into a binary and break this. Compare two builds’ hashes to find out.