[cduzz]

Wouldn't you want to have certificates and other crypto data as an input to a reproducible build harness?

  # build initial images
  # add semi-static inputs (mostly static config data, crypto data, signed inputs)
  # add final watermarks

So each step can be verified

[bluGill]

That final watermark is not verifiable and so you can inject something else.