Your `flake.lock` will have the specific revision as well, even if you're using unstable or a release URL, so as long as this is getting checked into git then y

Your `flake.lock` will have the specific revision as well, even if you're using unstable or a release URL, so as long as this is getting checked into git then you have reproducibility that way as well.