@littlesnitch I don't want/need an AI assistant.

How about improved support for binaries that change frequently? Or even just allowlisting everything in a given folder structure? (talking about /nix/store/* here)