CI / flake (push) Skipped
CI / flake (pull_request) Successful in 4m10s
The sudo-rs section claimed the whole fleet runs the stock "wheel, with a password" policy, which is no longer true for the WSL host. Explain why the NixOS-WSL default does not survive the sudo-rs swap, and mark the difference in the per-host table.