Auditing Firewall Product Source Code See the end of the digest for information on subscribing to the Firewalls or Firewalls-Digest mailing lists and on how to retrieve back issues. If you really can audit source code to guarantee integrity, you're probably not far away from either writing it os speccing it out, to have it written for you. UK has had a practice where source code may become an issue of placing the customer copy of source code in escrow at either a bank or an agreed institution.
Customer can review and sue supplier based on that code.
Checksum takes care of latter. Practice has been adopted in South Africa for different reasons. Compressed back issues are available for anonymous FTP from FTP.GreatCircle.