//:cas

Ten native Nix NARs sit edge-on in one isometric file index. The eight used by ICBM A rise first, then the eight used by ICBM B; six rise in both passes.

10 NARs16 refs06 shared01 copy each

//:root

/closure.pb02 / 06

nix closure

The root path closes over every immutable NAR needed at boot. References form a graph, so shared nodes are linked once instead of copied into each image.

paths: 08
shared: 06
identity: SHA-256

root path → references → content-addressed NARs

closure record // protobufroot_path: "/nix/store/0a9f-icbm-root"
references: "/nix/store/2e44-glibc"
references: "/nix/store/51af-linux"
references: "/nix/store/7c0d-cloud-hv"

The shared ICBM root-layer NAR opened as a selectable image map. It connects its initrd, immutable Nix closure, mount topology, warm machine state, sparse memory extents, and qualification evidence.

/0a9f shared rootselect an image region

root nar / object 02/closure.pb08 paths / nix closure

//:workload

WorkloadBundlejellyfin-microvmatlas.icbm.guest/clone-v1x86_64-linux

declared graph05 store roots

qualified rootrestored / unchanged

/nix/storecaptured virtiofs · ro/2e44zq

systemdalready running

warm stateno rebuild / no reboot

01link 02 units
02daemon-reload
03start icbm-jellyfin.target

The exact external workload composition: a metadata-only WorkloadBundle root, four differential Nix closure paths, one dependency already resident in the warm root, projection through the captured read-only Nix store, and systemd activation without rebuilding or rebooting the image.

04 closure paths01 base hit02 unitsno reboot