@misc{cs2-10-1,
  title = {{Definitions: When is a build reproducible?}},
  author = {{Reproducible Builds project}},
  year = {2026},
  url = {https://reproducible-builds.org/docs/definition/},
  howpublished = {Reproducible Builds documentation}
}

@article{cs2-10-2,
  title = {{Reflections on Trusting Trust}},
  author = {Thompson, Ken},
  year = {1984},
  url = {https://www.cs.cmu.edu/~rdriley/487/papers/Thompson\_1984\_ReflectionsonTrustingTrust.pdf},
  journal = {Communications of the ACM}
}

@techreport{cs2-10-3,
  title = {{Fully Countering Trusting Trust through Diverse Double-Compiling}},
  author = {Wheeler, David A.},
  year = {2009},
  url = {https://dwheeler.com/trusting-trust/dissertation/html/wheeler-trusting-trust-ddc.html},
  institution = {George Mason University dissertation}
}

@misc{cs2-10-4,
  title = {{SLSA v1.2 Build: Provenance}},
  author = {{SLSA}},
  year = {2026},
  url = {https://slsa.dev/spec/v1.2/build-provenance},
  howpublished = {SLSA specification}
}

@inproceedings{cs2-10-5,
  title = {{in-toto: Providing farm-to-table guarantees for bits and bytes}},
  author = {Torres-Arias, Santiago and Afzali, Hammad and Kuppusamy, Trishank Karthik and Curtmola, Reza and Cappos, Justin},
  year = {2019},
  url = {https://www.usenix.org/conference/usenixsecurity19/presentation/torres-arias},
  booktitle = {USENIX Security}
}

@misc{cs2-10-6,
  title = {{SOURCE\_DATE\_EPOCH}},
  author = {{Reproducible Builds project}},
  year = {2026},
  url = {https://reproducible-builds.org/docs/source-date-epoch/},
  howpublished = {Reproducible Builds documentation}
}