Third point could still use something similar to FHS while encoding hashes as file names e.g /api/$TRIPLET/bin/$hash-$name Fourth you could have each package h

Third point could still use something similar to FHS while encoding hashes as file names e.g /api/$TRIPLET/bin/$hash-$name Fourth you could have each package have it's own user/group