Thompson’s paper shatters the illusion of trust in **toolchain integrity**. The core threat: a compromised compiler (or any self-hosting tool) can inject *undetectable* backdoors into *all* compiled binaries, even if source code is pristine. This means **no single verification of source code is sufficient**—the toolchain itself is the attack vector.  

**Threat Model Shift**:  
- Assume *all* toolchains (compilers, linkers, build systems) are untrustworthy by default.  
- Backdoors persist across recompilation cycles (e.g., a “Trojan compiler” inserts code into *itself* and all other binaries it compiles).  
- Even “clean” source is useless if the build environment is compromised.  

**Defense Strategy**:  
1. **Bootstrapping from Trust**:  
   - Build a *minimal, hand-verified* compiler (e.g., in assembly) on a *separate, air-gapped* system.  
   - Use it to compile the next toolchain stage, then *re-verify* the output against the source (e.g., diff binaries vs. expected output).  
   - Repeat until the toolchain is trusted (e.g., 3-4 stages of bootstrapping).  

2. **Multi-Stage Validation**:  
   - Cross-verify binaries using *independent* tools (e.g., a C compiler built from a different language, or a static analysis tool in a different OS).  
   - Use hardware roots of trust (e.g., TPMs) to validate build environment integrity *before* compilation.  

3. **Runtime Mitigations**:  
   - Enforce strict code signing and integrity checks for all binaries.  
   - Isolate critical processes in sandboxes with least-privilege execution.  

**Paranoid Rationale**:  
The only “trust” is **what you can verify at each step of the toolchain**. If you can’t *demonstrably prove* a compiler is clean, assume it’s compromised. This means **no shortcuts**—every layer (from source to binary) must be audited *independently* and *in sequence*. The goal isn’t to “trust” but to **minimize attack surface via layered, verifiable steps**.  

*Short, efficient, and paranoid: “Trust no toolchain. Verify every stage. If you can’t, don’t run it.”*