@leftpaddotpy @raito @alanc @dalias Easiest way to do that is to check whether it actually *was* generated by autoconf, by re-running autoconf from the checked-in config files, and seeing if you get something identical to what's in the tarball (modulo embedded timestamps and the like). Which would mean that what you got corresponded to checked-in source... but, say, custom tests in that are obscure enough to provide an alternate route for trying to sneak something through.