Creating a specification for reproducible repositories

[parente]

Maybe this is out of scope or has already been discussed, but would leveraging any of the work or thinking around Cloud Native Buildpacks apply here?

• https://blog.heroku.com/defence-against-the-docker-arts
• https://www.cncf.io/blog/2018/10/03/cncf-to-host-cloud-native-buildpacks-in-the-sandbox/