davad

I think they did say that in the older thread. But for proper security, you shouldn’t have to trust them. You should have build tools that will re-fetch everything to create an identical build. That gives a clear chain of custody, which proves that morning has been tampered with.

It sounds like most, if not all, come from upstream projects.

That’s not exactly how it works. There are “territorial waters” which are entirely under the control of the state. And there is the “exclusive economic zone” (EEZ) outside of that, where the state has rights to resources. But the surface is “international waters”. This incident happened in the EEZ.

https://en.m.wikipedia.org/wiki/Exclusive_economic_zone