Eat-and-run verification

Our proposed system consists of federated “rebuilders” that autonomously rebuild Debian packages and generate corresponding attestations using the in-toto metadata format (see rebuilder@NYU and rebuilder@University of Bergen for rebuilders in …