RFC: FIPS mode

[alhirzel]

I am wondering if there are any efforts or ideas for bringing an easily-audited FIPS mode to Julia. This would likely involve enabling some of the USE_SYSTEM_LIB* family of build options. This could involve some slick audit assistance tool(s) that would focus attention on things like macros, eval calls, and code paths thru un-audited packages. This could involve tracking justifications for each instance (perhaps use a code hash to relate to explanation or justification artifacts). Perhaps a build-time option plus something like FIPSCompliance.jl could comprise this idea, or it could all just be relegated to the latter which would flag non-compliant build options.

Looking for ideas, experience, and the opinion of the primary Julia developers.

[oscardssmith]

#54903 seems related