Same as any other software you install: you don’t know unless you review the whole code base.
Regarding this particular project, I can give you a little more context, so you can decide yourself whether to trust the software or not:
- I reviewed a good part of the code, focusing on the parts that I deemed more important, and skimming over the rest.
- Every single change has been reviewed by multiple independent AI agents, also by models of different companies.
- I perform regular adversarial QA tests, both manual and agent-driven.
- I am familiar with the domain and would be able to rewrite the same compiler without AI (given enough time). If the code contained something blatantly anomalous I think I would spot it quickly.