We just released StageX, a containerized software build root, 100% auditable and deterministic, bootstrapped from 256-bytes of assembly. Every package is built, attested, and signed by multiple independent builders, and of course everything is open source.