chore: purge nix per estate-wide deprecation directive 2026-06-01 (#189)

hyperpolymath · claude · web-flow · commit 872041c730be · 2026-06-01T22:04:19.000+01:00
## Summary Owner directive 2026-06-01: "nix is now entirely deprecated and we use guix for everything." This PR completes that estate-wide hardening for echidna opportunistically. No `flake.nix`/`flake.lock` files were present in this repo (the earlier 2026-05-18 ruling already removed them), but stale doc, dependabot, workflow, and manifest references remained. ### Dependabot - `.github/dependabot.yml` + `echidna-playground/.github/dependabot.yml`: removed `package-ecosystem: nix` entries ### Workflows - `.github/workflows/live-provers.yml`: removed `Nix flake (fallback)` header line; documented deprecation in its place ### Manifest - `manifests/live-provers.scm`: hardened policy preamble + reworded the Lean 4 install hint to point at the Wave-3 sealed container instead of `flake.nix or upstream installer` ### Docs (root + echidna-playground subtree) Reworded every "Guix primary, Nix fallback" / "flake.nix mirror" / "Tier-2 ... Nix" mention to record the 2026-06-01 hardening (nix entirely removed; do NOT add flake.nix/flake.lock back). Files touched: - `.claude/CLAUDE.md`, `RSR_COMPLIANCE.adoc` - `docs/handover/STATE.md`, `docs/handover/PRODUCTION-WIRING-PLAN.md`, `docs/handover/L3-LIVE-PROVER-CI-PROMPT.md`, `docs/handover/TODO.md`, `docs/handover/llm-warmup-dev.md` - `docs/wiki/Home.md`, `docs/wiki/Getting-Started.md` - `echidna-playground/RSR_OUTLINE.adoc`, `echidna-playground/.claude/CLAUDE.md` ### Out of scope (intentionally not touched) - Historical session-log entries (`PRODUCTION-WIRING-PLAN.md:171` "2026-04-19 — Kickoff ... Nix fallback ...") - `NIX_ONLY` availability labels in `manifests/live-provers.scm` — they mean "absent from Guix upstream", not "provisioned via Nix"; the policy preamble now spells that out - `.github/workflows/governance.yml:6` historical wrapper-replaced-workflows comment listing `guix-nix-policy.yml` - False positives (`Unix-domain socket`, `UNIX_EPOCH`, `apt mirror flake red-checks`) `.guix-channel` + `guix.scm` already present at the repo root, so no follow-up issue needed. ### Overlap with open PRs The only file overlap with currently-open PRs is `docs/wiki/Home.md` — PR #182 touches the file but leaves the specific line I edit unchanged, so the diffs auto-merge regardless of landing order. ## Test plan - [x] `grep -rln -i 'nix\|flake'` returns only deprecation-policy language, historical session-log entries, the unrelated false positives listed above, and the wrapper-replaced workflow-name comments - [x] GPG-signed with `4A03639C1EB1F86C7F0C97A91835A14A2867091E` - [ ] Auto-merge `--auto --squash --delete-branch` (set on this PR) 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
diff --git a/.claude/CLAUDE.md b/.claude/CLAUDE.md
@@ -134,13 +134,13 @@ package definitions (not metadata files) and must NOT be deleted.
 
 ### Package Management
 
-- **Primary**: Guix (`guix.scm`, `manifests/*.scm`)
+- **Sole primary**: Guix (`guix.scm`, `manifests/*.scm`)
 - **Escape hatch**: a sealed container (`.containerization/Containerfile.wave3`)
-  for the not-in-Guix / non-free tail. **NO Nix mirror** — estate ruling
-  2026-05-18 (Guix primary + sealed-container escape). `flake.nix` is
-  deprecated and removed; a `flake.nix` that only mirrors the Guix manifest is
-  drift, not a fallback. A second packager is permitted only where it is the
-  sole source of a specific named dependency, documented as such.
+  for the not-in-Guix / non-free tail. **NO Nix anywhere** — estate ruling
+  2026-05-18 (Guix primary + sealed-container escape), hardened 2026-06-01
+  (nix deprecated estate-wide; do NOT add `flake.nix`/`flake.lock` back).
+  A second packager is permitted only where it is the sole source of a
+  specific named dependency, documented as such.
 - **JS deps**: Deno (deno.json imports)
 
 ### Security Requirements
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
@@ -16,10 +16,6 @@ updates:
       actions:
         patterns:
           - "*"
-  - package-ecosystem: "nix"
-    directory: "/"
-    schedule:
-      interval: "weekly"
   - package-ecosystem: "npm"
     directory: "/"
     schedule:
diff --git a/.github/workflows/live-provers.yml b/.github/workflows/live-provers.yml
@@ -12,8 +12,10 @@
 #
 # Reproducibility paths (both tried; at least one must succeed):
 #   1. Guix manifest (PRIMARY, per project CLAUDE.md): manifests/live-provers.scm
-#   2. Nix flake (fallback):                            nix develop .#live-provers
-#   3. apt-get (expedient bootstrap for T1 only):       jobs below
+#   2. apt-get (expedient bootstrap for T1 only):       jobs below
+#
+# (Nix flake removed 2026-06-01 per estate-wide nix-deprecation directive;
+# Guix is the sole reproducible-build primary.)
 
 name: Live Provers
 
diff --git a/RSR_COMPLIANCE.adoc b/RSR_COMPLIANCE.adoc
@@ -32,14 +32,14 @@ the contractiles and the machine-readable policies above.
 | RSR-H10 | Prohibited: Python outside `salt/`; TypeScript/JS (use AffineScript); `Dockerfile` (use `Containerfile`); CUE (use Nickel) | `RSR_OUTLINE.adoc`
 | RSR-H11 | Canonical dirs: `config/`, `docs/`, `docs/generated/`, `docs/man/`, `src/`, `tests/` | `RSR_OUTLINE.adoc`
 | RSR-H12 | `just validate-rsr` passes on every PR                          | `MAINTENANCE-CHECKLIST.adoc:69`
-| RSR-H13 | Guix is primary package manager; sealed-container escape only; no Nix fallback (estate ruling 2026-05-18) | `.claude/CLAUDE.md`
+| RSR-H13 | Guix is the sole package manager; sealed-container escape only; nix deprecated estate-wide 2026-06-01 | `.claude/CLAUDE.md`
 | RSR-H14 | Justfile is the primary build system (no Make, etc.)            | `MUST.contractile:42`
 | RSR-H15 | Podman, not Docker, for containers                              | `MUST.contractile:44`
 |===
 
 == Soft conventions (SOFT; aspirational)
 
-* Language tiers: Tier-1 = Rust, Elixir, Zig, Ada, Haskell, ReScript/AffineScript; Tier-2 = Nickel, Racket, Guile, Nix.
+* Language tiers: Tier-1 = Rust, Elixir, Zig, Ada, Haskell, ReScript/AffineScript; Tier-2 = Nickel, Racket, Guile. (Nix removed from Tier-2 on 2026-06-01 per estate-wide deprecation.)
 * Coverage above 80 %.
 * Performance benchmarks show no regression PR-over-PR.
 * Generated docs in `docs/generated/`; man pages in `docs/man/`.
diff --git a/docs/handover/L3-LIVE-PROVER-CI-PROMPT.md b/docs/handover/L3-LIVE-PROVER-CI-PROMPT.md
@@ -2,7 +2,7 @@
 
 **Context**: Echidna (`/var/mnt/eclipse/repos/verification-ecosystem/echidna/`) has 48 trait-wired
 prover backends, but CI only tests them with `MockProver`. Mission: make every provisionable
-backend run against a canonical micro-goal on a predictable cadence. Guix primary, Nix fallback.
+backend run against a canonical micro-goal on a predictable cadence. Guix sole primary (nix deprecated estate-wide 2026-06-01).
 
 **Master plan**: `~/Desktop/ECHIDNA-PRODUCTION-WIRING-PLAN.md`
 **Order**: L3 (this) → L1 (Cap'n Proto) → L2 (Chapel max).
@@ -13,7 +13,7 @@ backend run against a canonical micro-goal on a predictable cadence. Guix primar
 
 Wave-1 (Tier-1, every PR — 9 backends) DONE in kickoff session, commit `b022bf4`:
 - `manifests/live-provers.scm` — Guix manifest with Tier-1 + Tier-2 provers
-- `flake.nix` — expanded with matching `liveProverDeps`
+- ~`flake.nix` — expanded with matching `liveProverDeps`~ (removed 2026-06-01 per estate-wide nix-deprecation)
 - `.github/workflows/live-provers.yml` — tiered workflow (Tier-1 PR, Tier-2 nightly, etc.)
 - `tests/live_prover_suite.rs` — Rust test harness with Tier-1 version-check tests
 
diff --git a/docs/handover/PRODUCTION-WIRING-PLAN.md b/docs/handover/PRODUCTION-WIRING-PLAN.md
@@ -15,7 +15,7 @@ subprocess CI across ~38/48 backends, Cap'n Proto IPC, Chapel as first-class exe
 |---|---|---|
 | D1 | **Serialization = Cap'n Proto** | Chosen over Bebop3 for dependability+maturity (Cloudflare Workers use at scale), zero-copy reads, strongest schema-evolution story. Tradeoff: heavier codegen. Shim Julia/Chapel via C-ABI (fits existing Idris2-ABI + Zig-FFI policy). |
 | D2 | **Chapel = first-class, maximal** | Existing POC (`chapel_poc/parallel_proof_search.chpl`, 420 LoC) promoted to `src/chapel/`. Expand into portfolio dispatch, speculative tactic search, corpus-parallel ops, mutation-testing parallelism, multi-locale distributed, numeric hot paths. |
-| D3 | **Guix primary, Nix fallback** | Per project `CLAUDE.md` package-management policy. `guix.scm` / `manifests/live-provers.scm` authoritative; `flake.nix` mirrors. |
+| D3 | **Guix sole primary** | Per project `CLAUDE.md` package-management policy. `guix.scm` / `manifests/live-provers.scm` authoritative. (Nix fallback removed 2026-06-01 per estate-wide nix-deprecation directive — originally D3 said "Nix fallback"; that path is now closed.) |
 | D4 | **Execution order = L3 → L1 → L2** | Live-prover CI first: highest-leverage gap, surfaces real bugs mocks hide, no protocol break. Cap'n Proto next, since Chapel wiring (L2) will consume those schemas. |
 | D5 | **Live-prover CI cadence = tiered** | Tier-1 every PR, Tier-2 nightly, Tier-3 weekly, Tier-4 "best-effort / allow-fail" quarterly. |
 | D6 | **No JSON emit** | Per memory rule `feedback_no_json_emit_a2ml`. Cap'n Proto replaces the current HTTP-JSON Rust↔Julia channel. Tool config stays Nickel/A2ML. |
@@ -30,11 +30,12 @@ subprocess CI across ~38/48 backends, Cap'n Proto IPC, Chapel as first-class exe
 
 **Artefacts**:
 - `manifests/live-provers.scm` — Guix manifest listing all provisionable prover binaries
-- `flake.nix` — Nix fallback, mirror of Guix set
 - `.github/workflows/live-provers.yml` — tiered CI workflow (PR/nightly/weekly/quarterly)
 - `tests/live_prover_suite.rs` — Rust test harness with canonical goals per backend
 - `tests/live_goals/` — micro-goal fixtures (one per backend, per category)
 
+(Originally also planned `flake.nix` as a Nix-fallback mirror of the Guix set; removed 2026-06-01 per estate-wide nix-deprecation directive.)
+
 **Tier assignment** (per `/var/mnt/eclipse/repos/verification-ecosystem/echidna/src/rust/provers/` audit):
 
 | Tier | Cadence | Backends |
diff --git a/docs/handover/STATE.md b/docs/handover/STATE.md
@@ -16,17 +16,18 @@ IPC end-to-end, Chapel as first-class parallel execution layer." Three
 phases, deliberately sequenced **L3 → L1 → L2**: live-prover CI first
 because it surfaces real bugs mocks hide, Cap'n Proto next so Chapel
 can consume its schemas, Chapel last because its sub-waves are the
-largest piece. Guix is the authoritative package manager throughout
-with Nix as fallback. GitHub is the single source of truth; no other
-forges pushed directly.
+largest piece. Guix is the sole authoritative package manager
+throughout (nix fallback removed 2026-06-01 per estate-wide
+nix-deprecation directive). GitHub is the single source of truth; no
+other forges pushed directly.
 
 ## Decisions locked
 
 | # | Decision | Rationale |
 |---|----------|-----------|
 | D1 | **Serialization = Cap'n Proto** | Chosen over Bebop3 for dependability + maturity (Cloudflare Workers use at scale), zero-copy reads, strong schema-evolution. Tradeoff: heavier codegen; shim Julia/Chapel via C-ABI (fits existing Idris2-ABI + Zig-FFI). |
 | D2 | **Chapel = first-class, maximal** | 420-LoC POC promoted to `src/chapel/` across 7 sub-waves — portfolio dispatch, speculative tactic search, corpus-parallel ops, mutation-testing parallelism, multi-locale distributed, numeric hot paths. |
-| D3 | **Guix primary, Nix fallback** | Per project CLAUDE.md. `guix.scm` / `manifests/live-provers.scm` authoritative; `flake.nix` mirrors. |
+| D3 | **Guix sole primary** | Per project CLAUDE.md. `guix.scm` / `manifests/live-provers.scm` authoritative. (Originally "Nix fallback"; that path closed 2026-06-01 per estate-wide nix-deprecation directive.) |
 | D4 | **Execution order = L3 → L1 → L2** | Live-prover CI first: highest-leverage gap, surfaces real bugs mocks hide. Cap'n Proto next, since Chapel consumes those schemas. |
 | D5 | **Live-prover CI cadence tiered** | T1 every PR, T2 nightly, T3 weekly, T4 quarterly allow-fail. |
 | D6 | **No JSON emit on hot path** | Per `feedback_no_json_emit_a2ml`. Cap'n Proto replaces HTTP-JSON Rust↔Julia. Tool config stays Nickel/A2ML. |
diff --git a/docs/handover/TODO.md b/docs/handover/TODO.md
@@ -52,7 +52,7 @@ core. **Consolidated 2026-05-18** into a single multi-target
 primary path (only SCIP/OR-Tools/Metamath are in Guix; 5 need bespoke package
 defs; Imandra is non-free) — per the 2026-05-18 estate ruling, the sealed
 container *is* the escape hatch for the not-in-Guix / non-free tail (Guix
-primary, no Nix mirror; `flake.nix` deprecated). Imandra target remains
+primary, no Nix mirror; `flake.nix` deprecated and removed estate-wide 2026-06-01). Imandra target remains
 licence-gated. Table below kept for the per-backend install strategy of record.
 
 Handover hints live in `.machine_readable/6a2/STATE.a2ml [wave-3-handover-hints]`.
diff --git a/docs/handover/llm-warmup-dev.md b/docs/handover/llm-warmup-dev.md
@@ -176,9 +176,11 @@ All in `.machine_readable/`:
 ## Packaging
 
 - `guix.scm` — Guix package definition (uses cargo-build-system)
-- `flake.nix` — Nix flake (with rust-overlay)
 - `Containerfile` — Podman container
 
+(Nix flake removed 2026-06-01 per estate-wide nix-deprecation directive;
+Guix is the sole packaging primary.)
+
 ## Test Structure
 
 - 232 unit tests (`cargo test --lib`)
diff --git a/docs/wiki/Getting-Started.md b/docs/wiki/Getting-Started.md
@@ -16,7 +16,7 @@ This page is a short orientation; defer to those for current details.
 - **Guix** (primary package manager; sealed-container escape hatch at `.containerization/Containerfile.wave3`)
 - **Podman** (containers — RSR-H15; **do not** use Docker)
 
-> Note: Nix as a fallback was deprecated in the 2026-05-18 estate ruling. Use Guix or the sealed container only.
+> Note: Nix as a fallback was deprecated in the 2026-05-18 estate ruling and fully removed estate-wide on 2026-06-01. Use Guix or the sealed container only.
 
 ## Quick setup
 
diff --git a/docs/wiki/Home.md b/docs/wiki/Home.md
@@ -36,5 +36,5 @@ When the wiki and the repo disagree, **the repo wins**:
 - **128 backends, 12 core** — 89 external prover bindings + 39 TypeChecker disciplines via TypedWasm Sigma.
 - **11-step trust pipeline** — integrity → portfolio → certificates → axioms → confidence → mutation → pareto → statistics → emission (see Architecture page).
 - **Polyglot stack** — Rust core, Julia ML sidecar, Idris2/Agda formal proofs, Zig FFI, Chapel parallel, AffineScript/Deno UI (migrating from ReScript).
-- **Guix-primary package management** — sealed-container escape hatch for the non-free tail. Nix fallback was deprecated in 2026-05-18 estate ruling.
+- **Guix-only package management** — sealed-container escape hatch for the non-free tail. (Nix fallback was deprecated in the 2026-05-18 estate ruling and fully removed estate-wide on 2026-06-01.)
 - **Justfile, not Make. Podman, not Docker.**
diff --git a/echidna-playground/.claude/CLAUDE.md b/echidna-playground/.claude/CLAUDE.md
@@ -56,8 +56,8 @@ Both are FOSS with independent governance (no Big Tech).
 
 ### Package Management
 
-- **Primary**: Guix (guix.scm)
-- **Fallback**: Nix (flake.nix)
+- **Sole primary**: Guix (guix.scm) — nix is deprecated estate-wide
+  2026-06-01; do NOT add flake.nix/flake.lock back
 - **JS deps**: Deno (deno.json imports)
 
 ### Security Requirements
diff --git a/echidna-playground/.github/dependabot.yml b/echidna-playground/.github/dependabot.yml
@@ -43,9 +43,3 @@ updates:
     directory: "/"
     schedule:
       interval: "weekly"
-
-  # Nix flakes
-  - package-ecosystem: "nix"
-    directory: "/"
-    schedule:
-      interval: "weekly"
diff --git a/echidna-playground/RSR_OUTLINE.adoc b/echidna-playground/RSR_OUTLINE.adoc
@@ -147,8 +147,8 @@ project/
 === Language Tiers
 
 * **Tier 1** (Gold): Rust, Elixir, Zig, Ada, Haskell, ReScript
-* **Tier 2** (Silver): Nickel, Racket, Guile Scheme, Nix
-* **Infrastructure**: Guix channels, derivations
+* **Tier 2** (Silver): Nickel, Racket, Guile Scheme
+* **Infrastructure**: Guix channels, derivations (nix deprecated estate-wide 2026-06-01)
 
 === Required Files
 
@@ -161,7 +161,7 @@ project/
 * `.well-known/security.txt`
 * `.well-known/ai.txt`
 * `.well-known/humans.txt`
-* `guix.scm` OR `flake.nix`
+* `guix.scm` (nix deprecated estate-wide 2026-06-01; `flake.nix` no longer an acceptable substitute)
 
 === Prohibited
 
diff --git a/manifests/live-provers.scm b/manifests/live-provers.scm
@@ -14,20 +14,21 @@
 ;;   T3 — container / special env                 — run weekly
 ;;   T4 — niche / best-effort                     — run quarterly, allow-fail
 ;;
-;; Policy (estate ruling 2026-05-18 — Guix primary + sealed-container escape):
+;; Policy (estate ruling 2026-05-18 + estate-wide nix-deprecation 2026-06-01):
 ;;   Guix is the PRIMARY (and only) package-management path declared here.
-;;   There is NO Nix mirror — flake.nix is DEPRECATED and removed. The single
-;;   universal escape hatch for the not-in-Guix / non-free tail is a SEALED
-;;   CONTAINER (.containerization/Containerfile.wave3), not a Nix twin.
+;;   There is NO Nix mirror anywhere — flake.nix was DEPRECATED on 2026-05-18,
+;;   removed from this repo, and on 2026-06-01 nix was deprecated estate-wide.
+;;   The single universal escape hatch for the not-in-Guix / non-free tail is a
+;;   SEALED CONTAINER (.containerization/Containerfile.wave3), not a Nix twin.
 ;;
 ;; Availability note:
 ;;   Guix package availability drifts. The comment beside each line records the
 ;;   Guix module the package lives in at audit time. Anything previously marked
 ;;   NIX_ONLY or CONTAINER_ONLY is *not* in Guix upstream and is provisioned via
 ;;   the Wave-3 sealed container (Containerfile.wave3 --target <prover>). The
 ;;   "NIX_ONLY" label is retained below only as a historical availability fact
-;;   (the package is absent from Guix) — it no longer implies a Nix provisioning
-;;   path; the provisioning path is the container.
+;;   (the package is absent from Guix) — it does NOT imply a Nix provisioning
+;;   path is permitted; the provisioning path is the container.
 
 (specifications->manifest
  '(;; ----------------------------------------------------------------------
@@ -54,7 +55,9 @@
    "idris2"          ; (gnu packages idris) — dependent-type proof assistant
    "isabelle"        ; (gnu packages isabelle) — HOL proof assistant
    "why3"            ; (gnu packages ocaml) — auto-active verifier
-   ;; Lean 4 — NIX_ONLY: not in Guix; install via flake.nix or upstream installer.
+   ;; Lean 4 — NIX_ONLY: not in Guix; install via the Wave-3 sealed container
+   ;; (the upstream installer ships pre-built binaries; the historical "flake.nix"
+   ;; path was closed 2026-06-01 per estate-wide nix-deprecation).
    ;; Dafny — NIX_ONLY: dotnet toolchain dependency makes Guix packaging tricky.
    ;; F* — BUILD_FROM_SOURCE (no Guix package): manual Wave-2 Containerfile path.
    ;; HOL Light — CONTAINER_ONLY: obscure build requirements.
