He can publish some code, but no one can verify that the public code is exactly the same as in production!

Not trust and sell your data. Use Nostr!