Capture the maintainer-side plan to automate advancing Nomarchy's own flake.lock (the single-input delivery channel): a bot drives `main` behind `nix flake check` + the runNixOSTest suite, and a human still promotes `main -> v1` behind the on-hardware QA gate that can't be CI'd. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>