Edit: false. Same commit with same build environment produces same rom. Unfortunately, the build system changed within 30 days (packages installed by apt on top of debian-11 docker, where two builds made on top of the same docker-11+same packages applied the same day produces the same rom, with hashes being different then the past) .
Conclusion: again, we need a reproducible toolstack, a docker image that would be pinned in the same commit as Heads and used under CircleCI.
This means we have other problems that would not be resolved by having a reproduced environment; eg: build time of some module being injected in the rom.
Diffoscope between two clean builds on the same environment are needed.
Insights given while rebuilding a same commit over CircleCI since cache expired (latest commit being 30 days ago): #1224