...it is not possible to be confident that the source code examined by HCSEC is precisely that used to build the binaries running in the UK networks.
-- https://assets.publishing.service.gov.uk/government/uploads/...