Well take a look at the original grant devgrants/open-grants/open-proposal-nix-ipfs.md at 5fcf2ddcb294b911feb216d9b01d990af1654a56 · ipfs/devgrants · GitHub. The grant recipient writes the initial proposal with this sort of thing.
Yup! See distributed builds require a trusted remote user · Issue #2789 · NixOS/nix · GitHub and the PRs I’ve linked to it (which will show up at the bottom). If we merge all of them then it’s fixed.
(Well, we also need to modify the build hook protocol so floating CA derivations can actually be remotely built, but that’s a separate issue.)