Concepts

• Reproducible build: same source/settings yield the deployed bytecode.
• Runtime code hash: binds a result to actual deployed code.
• Proxy separation: proxy and implementation are distinct subjects.
• Evidence bundle: compiler, optimizer, EVM, libraries, constructor/metadata context.
• Verification vs audit: correspondence is not a security judgment.