A single-host NixOS flake. One machine. One user. One mind.

Fifteen years of Arch+bspwm, distilled into a declarative expression that rebuilds itself byte-for-byte from this repo. The root filesystem is wiped on every boot; what survives is what is written down.

   cpu    Ryzen 9 7900X            12C / 24T   5.6 GHz   170 W
   gpu    RTX 5070 Ti  Windforce   16 GB GDDR7  Blackwell
   ram    32 GB DDR5-6000 CL30     Kingston Fury  EXPO v1.1
   mobo   B650M AORUS ELITE AX     mATX  PCIe 5.0
   nvme   Kingston NV3 2 TB        PCIe 4.0
   aio    MSI MAG Coreliquid A13   360 mm  ARGB
   psu    Toughpower GF A3 850 W   ATX 3.0  12V-2x6
   case   Lian Li A3-mATX          26.3 L

Hyprland · Wayland · NVIDIA 570 (open) · zen kernel · Btrfs · systemd-boot · home-manager · sops-nix · impermanence · Ollama · Tailscale · Prometheus + Grafana

flowchart LR
    A["boot"] --> B["initrd: delete root-active"]
    B --> C["snapshot root-blank → root-active"]
    C --> D["mount as /"]
    D --> E["mount /nix + /persistent"]
    E --> F["ready"]

    style A fill:#1a1a1a,stroke:#58E1FF,color:#fff
    style B fill:#1a1a1a,stroke:#FF6B6B,color:#fff
    style C fill:#1a1a1a,stroke:#FF6B6B,color:#fff
    style D fill:#1a1a1a,stroke:#58E1FF,color:#fff
    style E fill:#1a1a1a,stroke:#76B900,color:#fff
    style F fill:#1a1a1a,stroke:#76B900,color:#fff

Survives reboot — /nix, /persistent, /home/m (bind-mounted). Everything else is ash.

mandragora-switch "feat(scope): description"

Stages, rebuilds, commits, pushes. Rolls back on failure. flock + working-tree stability window protect against concurrent agents.

flake.nix the root hosts/mandragora-desktop/ composition modules/{core,desktop,user,audits}/ 37 modules, one concern each pkgs/ in-tree derivations — rtk, gpu-lock, sddm-mandragora, du-exporter, … snippets/ non-Nix code (shell, lua, css, python) referenced via readFile secrets/ sops-nix vaults, age-encrypted docs/ the long form

AGENTS.md · the charter — load first for any AI session docs/index.md · doc router docs/architecture.md · composition, modules, audits docs/hardware.md · build, peripherals, NVIDIA tuning docs/workflow.md · edit → rebuild → verify → commit docs/persistence.md · what survives reboot docs/secrets.md · sops-nix + age docs/gpu.md · cooperative GPU contract docs/worktrees.md · parallel-agent isolation install/INSTALL.md · fresh-install runbook