I think singularity did at least a piece of what you're describing, signing the ...

monocasa on July 24, 2019 | parent | context | favorite | on: Extending the Linux Kernel with Built-In Kernel He...

I think singularity did at least a piece of what you're describing, signing the bartok compiler output after install time and post verification so that it could be saved to disk and retrieved later without the compilation and verification steps.