diff --git a/deploy.sh b/deploy.sh
index 25450ef..ab24f8f 100755
--- a/deploy.sh
+++ b/deploy.sh
@@ -87,4 +87,7 @@ fi &&
 
 esptool.py --chip esp32-c3 elf2image target/riscv32imc-esp-espidf/$MODE/$BIN &&
 esptool.py --chip esp32c3 -b 460800 --before=default_reset --after=hard_reset write_flash --flash_mode dio --flash_freq 40m --flash_size 4MB 0x50000 target/riscv32imc-esp-espidf/$MODE/$BIN.bin &&
+cd .. &&
+shasum --algorithm 256 --check manifest.txt &&
+cd sphinx-key &&
 cargo espflash monitor --port $PORT
diff --git a/factory/sdkconfig.defaults b/factory/sdkconfig.defaults
index 604fef2..1600d48 100644
--- a/factory/sdkconfig.defaults
+++ b/factory/sdkconfig.defaults
@@ -11,3 +11,7 @@ CONFIG_FATFS_LFN_STACK=y
 # Workaround for https://github.com/espressif/esp-idf/issues/7631
 #CONFIG_MBEDTLS_CERTIFICATE_BUNDLE=n
 #CONFIG_MBEDTLS_CERTIFICATE_BUNDLE_DEFAULT_FULL=n
+
+CONFIG_APP_REPRODUCIBLE_BUILD=y
+CONFIG_APP_EXCLUDE_PROJECT_NAME_VAR=y
+CONFIG_APP_EXCLUDE_PROJECT_VER_VAR=y
diff --git a/manifest.txt b/manifest.txt
new file mode 100644
index 0000000..cbb8539
--- /dev/null
+++ b/manifest.txt
@@ -0,0 +1,2 @@
+8bf13571f68fda5983c84e2fcea123354cf59c9c239a8ecbc9dbac86e8849c24  factory/target/riscv32imc-esp-espidf/release/sphinx-key-factory
+419e103ae95303384dd8fd14ee8b0844aad4688e8d7ab5b810b68b2558672e62  sphinx-key/target/riscv32imc-esp-espidf/release/sphinx-key.bin
diff --git a/sphinx-key/sdkconfig.defaults b/sphinx-key/sdkconfig.defaults
index 994e7a2..1668f3e 100644
--- a/sphinx-key/sdkconfig.defaults
+++ b/sphinx-key/sdkconfig.defaults
@@ -12,3 +12,7 @@ CONFIG_FATFS_LFN_STACK=y
 CONFIG_MBEDTLS_CERTIFICATE_BUNDLE=y
 CONFIG_MBEDTLS_CERTIFICATE_BUNDLE_DEFAULT_CMN=y
 #CONFIG_MBEDTLS_CERTIFICATE_BUNDLE_DEFAULT_FULL=n
+
+CONFIG_APP_REPRODUCIBLE_BUILD=y
+CONFIG_APP_EXCLUDE_PROJECT_NAME_VAR=y
+CONFIG_APP_EXCLUDE_PROJECT_VER_VAR=y