The Nix sandbox is a hidden input
Summary
The article analyzes how Nix sandbox-paths act as hidden inputs that can break reproducibility. It demonstrates with examples how derivations can be identical while build outputs diverge due to environment sandboxes, discusses hermeticity, and the implications for trust and binary caches (Guix example).