First of all kudos to the OpenMSX developers, replaying files from other machines works perfect (technically) - when done right - and allows very easy reproduction and diagnostic of freezes and other weird bugs.
Now about the "when done right" thing:
The OMR-file (replay-file) stores SHA1-checksums of ROMs that were inserted in the session, but it seems that these checksum are not tested when loading the replay. It loads any ROM on the listed path any starts the replay (of the recorded input).
Having the checksum in the file, I would expect to see an error or at least a warning when attempting to load a ROM file that differs from the one that was used when recording. Possibly provide an override switch in the "reverse loadreplay" command line like "-ignore_checksum" to force running the replay at own risk, rather than vice-versa.
I'm planning to use this feature to replay bug reports from recorded sessions from beta testers. Having such a warning before the playback would definitely help to recognize such inconsistencies, rather than wondering why different things are happening in the replay vs on the reporter's machine, just to find out that a different version of the ROM file was used. Of course, I could check the SHA1 checksum of the ROM with that in the file manually as well, but then, so could the Emulator ;-P
Can someone from the OpenMSX team confirm whether this was intentionally designed that way or if this is a bug (or just never was a use case).