Abstract: A method for computer program source level trust assurance in an Internet of Things (IoT) device includes receiving a request to install a computer program in an IoT device and storing, in temporary memory, a file containing a binary form of the computer program and an authenticity fingerprint incorporated as part of the binary form of the computer program. The method additionally includes extracting the authenticity fingerprint from the binary form of the computer program, retrieving a different fingerprint from remote storage and comparing the different fingerprint to the extracted fingerprint. Finally, the method includes installing the computer program into the IoT device in response to the comparison indicating that the extracted fingerprint is identical to the different fingerprint, but otherwise rejecting the request to install the computer program.