Thank you for saying this, David. I wanted to say it but I had already lost patience with the discussion. BTW, speaking of the source-code archival problem and also your work on the Karger–Thompson attack, have you been following the work on Mescc?
I've been semi-following the bootstrappable builds stuff in general - that work is already listed on my page https://dwheeler.com/trusting-trust
Mescc is obviously an example. Years ago Bellard demonstrated a bootstrap using tcc to compile the Linux kernel (which was pretty amazing).
I think the approaches could work together well. Bootstrappable builds reduce the size of the binary you have to trust, and DDC can act as a check on a binary.
