[m_sahaf]

This approach is probably an overkill, but this project called Cothority[0] can be used to verify binaries by semi-independent authorities to be released. One of the applications referenced in their dotSecurity talk[1] was this usecase.

[0] https://github.com/dedis/cothority

[1] https://www.youtube.com/watch?v=YostyJRwqVU