Piqued Reproducible Build — Reproducible-build verifier: rebuild a signed firmware/image manifest from source in a sandbox and emit a diff report (nix-build --check + diffoscope; SBOM emission). Used by users, auditors, and transparency-conscious third parties to confirm published builds byte-for-byte.