Package containing the source tree that a [base] package set was built from
Add SVN rev of source tree to pkg metadata (or equivalent, plus indicate if the tree has been monified similarly to uname(1))
RDBMS-backed web application to collect file checksums from every official package and allow users to verify files on-line.
Using pkgdb as an IDS?