[mbakke]

There have been discussions of an "N of P" distribution, i.e. if 80% of available peers (or substitute servers) advertise the same build result, then treat it as safe.

I expect that both will be implemented, and the choice left up to the user.

[thom]

Unless I'm massively underestimating the number of Guix users, that seems quite easy to exploit.