[data-ottawa]

Dies the agent have access to is own nix config (and therefore install permissions), or do you have to provide it all the tools externally?

[wrxd]

It doesn’t even need access to nix config. It could use nix shell to grab the tools it needs.