A declarative, hermetic harness for Nix-defined agents.