I hope someone is security scanning all those NixOS provider modules.

I wonder if Claude could go from NixOS spec to actual config without the Nixos provider. The provider becomes a natural language description and some links to the docs/source code and then a verifier is all you need.