Deterministically build everything from source all the way down without any binaries except for a well documented machine-code seed. Socially audit the code at every layer of the process.

https://bootstrappable.org/ https://reproducible-builds.org/ https://github.com/crev-dev/