At the summit in Marrakesh I suggested to collect publications prominently on our webpage. Lukas Pühringer agrees and wrote me "And I think the 2019 in-toto usenix paper should be on that page. :) Section 6.1 outlines the rebuilder/apt/in-toto setup. Here's a link to the PDF: https://www.usenix.org/system/files/sec19-torres-arias.pdf " Ludovic Courtes wrote "You asked for research papers about reproducible builds. Here are two of them that touch reproducibility and reproducible builds, but at a somewhat higher level; I let you determine whether they’re appropriate: Reproducible and User-Controlled Software Environments in HPC with Guix (2015), <https://hal.inria.fr/hal-01161771/en> Functional Package Management with Guix (2013), <https://hal.inria.fr/hal-00824004/en> " and I indeed they should not be on the page, or maybe in a subsection 'related publications'? ;)