Getting started

Three short guides to get the desktop running and to understand the Nix tooling that ships with it.

• Quick start — pull the image from GHCR and run it with Docker or Docker Compose.
• Nix workflow — the nix run .#* convenience targets for building, running, and demoing the various security postures.
• Building from source — build the image locally with Nix or the make wrappers, and understand the SBOM and CVE artefacts each build produces.