...but then still, you don't know that the source matches the executable