Deployed bytecode reproducibility

Evidence summary #

Orca publishes build instructions and uses Anchor framework with pinned versions. Anchor programs are deterministically compilable via anchor build from source + Anchor.toml. Specific bytecode reproducibility verification (anchor verify against deployed program) not performed in this session. Pipeline-unimplemented for Solana.

Sources #

Methodology #

Determine whether anyone can independently reproduce the deployed bytecode from the repo and declared build toolchain.

See the full factor methodology and distribution across all protocols →