That is a pretty big deal. This means everyone building NixOS will get the exact same binary, meaning you can now trust any source for it because you can verif

That is a pretty big deal. This means everyone building NixOS will get the exact same binary, meaning you can now trust any source for it because you can verify the hash. It’s a huge win compared to the current default distribution model of “just trust these 30 american entities that the software does what they say it does”. Big congratulations to the team.