Labels

• area(agents)

  Codex, Claude Code, agent wrappers, prompts, or agent tooling.
• area(automation)

  Use for scheduled jobs, sync jobs, or workflow-driven operational behavior; not for bot origin.
• area(backup)

  Use for backup pipelines, schedules, retention, restore flows, or archive integrity.
• area(browsers)

  Browser modules, policies, profiles, extensions, or default-browser integrations.
• area(ci)

  GitHub Actions, checks, or CI/CD execution logic.
• area(cloudflare)

  Cloudflare services, APIs, deployments, or R2/Workers integration.
• area(docs)

  Repository documentation is a significant affected surface.
• area(duplicati)

  Use for the Duplicati service module, manifest, restore tooling, or R2 archive operations.
• area(flake)

  Flake topology, inputs, outputs, lockfile management, or Nix CLI integration.
• area(git)

  Repository sync, Git workflows, credentials, branches, or policy.
• area(hardware)

  Hardware enablement, drivers, firmware, power, or device behavior.
• area(home-manager)

  Home Manager modules, activation, or user-environment config.
• area(hooks)

  Pre-commit, pre-push, and other repository hook logic.
• area(mcp)

  Model Context Protocol servers, catalog entries, or transport integration.
• area(module-system)

  Import-tree behavior, evaluation order, or module composition mechanics.
• area(networking)

  Networking services, DNS, VPN, SSH transport, or connectivity.
• area(nixos)

  NixOS modules, host config, services, or system-level behavior.
• area(packages)

  Package definitions, overrides, overlays, or package-source selection.
• area(scripts)

  Operational scripts and command-line automation helpers.
• area(sops)

  sops-nix secrets, encrypted files, key material, or secret rendering.
• area(storage)

  Disks, filesystems, backups, mounts, or data placement.
• focus(data-integrity)

  Sync correctness, conflict safety, durability, or integrity guarantees.
• focus(hardening)

  Proactive attack-surface reduction or tighter defaults.
• focus(security)

  Concrete security risk, secret exposure, auth boundary, or vulnerability.
• focus(validation)

  Build checks, assertions, verification flows, or validation failures.
• host(system76)

  Specific to the System76 host or its runtime contract.
• host(tpnix)

  Specific to the tpnix host or its runtime contract.
• input(burpsuite-pro-flake)

  Flake input _VX3r/burpsuite-pro-flake.
• input(claude-desktop-linux-flake)

  Flake input k3d3/claude-desktop-linux-flake.
• input(cloudflare-go)

  Flake input cloudflare/cloudflare-go.