Business-class Nix for critical infrastructure, complete with a flake stability guarantee