From 16ca8086bdaf3b213a165db2be978b853fc2f2c2 Mon Sep 17 00:00:00 2001
From: hyperpolymath <6759885+hyperpolymath@users.noreply.github.com>
Date: Tue, 19 May 2026 22:39:55 +0100
Subject: [PATCH] docs(flake): annotate KEEP+DEP rationale per standards#102
 rule 3
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Per the campaign gate, this flake is LOAD-BEARING — sole source of
postgresql and the Rust dev-tool surface (cargo-edit/audit/outdated/
tarpaulin/deny/watch/deb/generate-rpm, jq, sqlx-cli) not in the
guix.scm manifest (pkg-config/rust/rust-cargo/sqlite/openssl +
pinned crates) nor in the sealed Containerfile (rust:1.83 + pkg-config/
libsqlite3-dev/sqlite-libs/ca-certificates).

Refs standards#101 standards#102.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
---
 flake.nix | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/flake.nix b/flake.nix
index d156916..d74d59a 100644
--- a/flake.nix
+++ b/flake.nix
@@ -1,5 +1,16 @@
 # SPDX-License-Identifier: PMPL-1.0
 # SPDX-FileCopyrightText: 2025 hyperpolymath
+#
+# Retained per standards#102 rule 3 (KEEP+DEP). guix.scm mirrors the
+# core runtime/build set (pkg-config, rust, rust-cargo, sqlite, openssl
+# + 23 pinned cargo crates); the sealed Containerfile (rust:1.83) adds
+# pkg-config + libsqlite3-dev + sqlite-libs + ca-certificates. This
+# flake's devShell is the SOLE source of `postgresql` and the entire
+# Rust dev-tool surface: cargo-edit, cargo-audit, cargo-outdated,
+# cargo-tarpaulin, cargo-deny, cargo-watch, cargo-deb,
+# cargo-generate-rpm, jq, sqlx-cli — none of which are in guix.scm
+# or the sealed container. Remove only after those reach Guix or the
+# sealed container.
 {
   description = "ECHIDNABOT - Proof-aware CI bot for theorem verification";