Pin Nix flake inputs for reproducible packaging #153

Merged

lost-rob0t merged 2 commits from fix/flake-lock-reproducibility into main

2026-08-21 22:06:57 +00:00

lost-rob0t commented

2026-08-21 22:03:46 +00:00

(Migrated from github.com)

Follow-up to #145.

The runtime was already packaged as a flake, but the merged packaging PR explicitly called out a lockfile as required final reproducibility evidence and main did not contain one.

This patch:

adds flake.lock for the existing nixpkgs and flake-utils inputs;
keeps the existing package/app/devShell/check output contract unchanged;
makes the Nix workflow pass --no-update-lock-file to evaluation/build/dev-shell calls so CI proves the committed lock is complete instead of silently repairing it.

No runtime or Prolog behavior changes.

Follow-up to #145. The runtime was already packaged as a flake, but the merged packaging PR explicitly called out a lockfile as required final reproducibility evidence and `main` did not contain one. This patch: - adds `flake.lock` for the existing `nixpkgs` and `flake-utils` inputs; - keeps the existing package/app/devShell/check output contract unchanged; - makes the Nix workflow pass `--no-update-lock-file` to evaluation/build/dev-shell calls so CI proves the committed lock is complete instead of silently repairing it. No runtime or Prolog behavior changes.