https://ic.rocks/principal/rdmx6-jaaaa-aaaaa-aaadq-cai already shows the “module hash”. Can we take this a step further and link to the source that’s running there? Maybe with a nice visual distinction between “assumed source” and “verified source”?
Verifying the that a certain commit is indeed the source for a canister is a rather manual process, and different for different canisters (see my post Verifying the code of the Internet Identity service (a walk-through)), but maybe we can collaborate somehow on collecting this data, verified by people outside of DFINITY?
Such checkmark (or rather, the lack of it) would also incentivize more canister developers (including the NNS developers…) to share the necessary information to make the code verifyable.