2026-07-24The compiler you didn't buildNixOS chases reproducibility and then downloads a prebuilt compiler on trust. On the trusting-trust hole, the single cache key, and the workflow that now keeps …#nix #security #supply-chain #systems