Expand description
Rollback pipeline: nix-env –rollback -> discover target -> fire -> poll.
FOOTGUN: bypasses nixos-rebuild --rollback because nixos-rebuild-ng
evaluates <nixpkgs/nixos> even on rollback, which fails in the agent’s
NIX_PATH-less sandbox.