Canister integrity verification on chain is missing

[PaulLiu]

@jzxchiang

But more generally, when you say that developers have this freedom, are you referring to their choice to set the blackhole canister as one of their canister’s controllers?

Yes.

@jzxchiang

I think there one day may need to be some open internet service that sits between clients and dapps

I believe that is one of the things SNS is meant to do. Open Governance canister for SNS | Design proposal

Correction: I meant not exactly the same “check hash before calling canister”, but more generally to ensure code update goes through security reviews, etc.