Mike Perry has just posted the second half of his reproducible builds effort: "Deterministic Builds Part Two: Technical Details - This is the second post in a two-part series on the build security improvements in the Tor Browser Bundle 3.0 release cycle." https://blog.torproject.org/blog/deterministic-builds-part-two-technical-details