Trusting builds with Bazel remote execution / hacker news