Rust’s borrow checker and type system rule out memory errors and a lot of API misuse. They do not prove that Nix snippets we emit are safe, that database invariants hold under randomised workloads, or that a path validator rejects every traversal att...

After years running Proxmox in production, every automation attempt hit the same walls: an API bolted onto a web UI, mutable Debian hosts, Perl internals. So I built kcore — a modern, API-first hypervisor on NixOS. I've been running Proxmox for year...