This is marketed as a defensive tool, but how do you prove that you check against "your" source code?