But git is not truly distributed. Each 'node' in the network does not automatically gets access to new trusted nodes (remotes). Management of the distributed nature is still manual, meaning that your CI/CD system cannot suddenly pull changes from your local developer machine, instead of GitHub/GitLab/Gerrit/...
In an ideal world, each commit is cryptographically signed and automatically distributed to a large number of nodes. Only correctly signed commits would be picked up by CI/CD and the build artifacts would use the digital signature of the code to further deploy the resources in a trustworthy manner.
