Build reproducibility - definitive guide available?

diff the package version list (manifest) and compare the vermagic...

anything else as mentioned above will either contain artifacts or symbols

if you want to get technical... match the host binaries to the buildbots...