[rolandog]

Guix does provide a guix challenge command to verify that the binaries correspond to the source code [0].

[0] https://guix.gnu.org/manual/en/html_node/Invoking-guix-chall...