having said that, it's mainly impractical for people to evaluate a SaaS software's code just before applying it. But there are actually solutions to this. At Edgeless programs, By way of example, we make sure that our software builds are reproducible, and we publish the hashes of our software on the general public transparency-log on the sigstore v