I hope someone is security scanning all those NixOS provider modules.

I wonder if Claude could go from NixOS spec to actual config without the Nixos provider. The provider becomes a natural language description and some links to the docs/source code and then a verifier is all you need.

How is that better than the nixos provider? The trouble is the links to the source code right?