Since the extensible sdk uses a locked-sigs.inc file, it is expected that tasks shouldn't run that aren't in that file. However, new task sstate can be generated for tasks that don't match a hash in locked-sigs.inc, and no warning or error will be shown. Here is a method to show this: 1. Extract sdk 2. Delete zlib from sstate-cache 3. Modify zlib:do_install 4. Remove tmp 5. bitbake core-image-minimal 6. It rebuilds with no error or warning
Fixed in oe-core 6b2b5ffdcb8bf885a1c756ea132e9d2c55e13dcd.