Assemblies that are marked reproducible should not be eligible for Hash detection in poisoning because they should always have an identical hash if we're building the same version.