John Ericson .ical Session 09-0611:3525minDerivationBuilder, extracting Nix's sandboxing logic for library useJohn EricsonAula (4.101)