Local Patch Verification Does Not Guarantee Shipped Binary Integrity

Analysis shows that local patch verification (e.g., CodeMender) does not ensure the shipped binary is patched. Android Binary Transparency logs production binaries but misses handoff. Highlights need for provenance spanning build to distribution.