Isolated reproducible builds, safe rollbacks and declarative machine config; 140,000+ Nixpkgs packages