The reproducible builds project is doing great work, helping solve the problem of trusting compilers on other boxes: https://lists.debian.org/debian-devel-announce/2017/07/msg00004.html