Currently we depend on exact instructions for SGX and zkVMs to be able to verify proofs onchain.
At the moment we build a Docker and ask everyone to re-use the docker.
Ideally we have a way for people to independently build the code and confirm they built the exact same binary as the one we provided, for example using Nix.
I'm unsure if Docker allows reproducible builds easily nowadays but seems there is a 2023 talk about that:
Currently we depend on exact instructions for SGX and zkVMs to be able to verify proofs onchain.
At the moment we build a Docker and ask everyone to re-use the docker.
Ideally we have a way for people to independently build the code and confirm they built the exact same binary as the one we provided, for example using Nix.
I'm unsure if Docker allows reproducible builds easily nowadays but seems there is a 2023 talk about that: