1/ Getting honggfuzz running inside a Nix development shell was its own adventure. Nix's hardening flags conflict with how honggfuzz instruments binaries, and glibc version mismatches between NixOS and honggfuzz added another layer.
3/ Small thing, but this is the kind of environment friction that slows down security work if you don't solve it early. Now any contributor on NixOS can run the fuzzer locally with one command.