Emily

In this case the “upstream” is Nixpkgs passing paths like `/run/current-system/sw/bin/helper-tool` or `/run/current-system/share/applications` to build systems so that they can find the correct packages at runtime on NixOS – in...

Perhaps the original URL could be retried in case the locked post‐redirects URL fails? That could avoid the need for configuration while still allowing easy pinning in most cases. Since...

Thank you for your work on this, and I do think we should have this feature, but unfortunately patches are quite fragile and compose badly, so I’m not too comfortable...

Yeah it's probably the allocator. I had great plans to make the hardened profile more secure and more usable a few years ago but it fell by the wayside, sorry....