Build in public without renting the truth

How open GitHub releases and a vault-native site keep Distribution honest — forks welcome, lock-in optional.