this derivation will be built:
  /nix/store/2rikia1irlv2xrx9i8fhf7c0w6afasmy-treefmt-check.drv
error: Cannot build '/nix/store/2rikia1irlv2xrx9i8fhf7c0w6afasmy-treefmt-check.drv'.
       Reason: builder failed with exit code 1.
       Output paths:
         /nix/store/4wp88a99kapl19xkacwy0p2q5fbyxpr0-treefmt-check
       Last 25 log lines:
       > -            lib.hasInfix "SIMPLEX_WS_URL=ws://127.0.0.1:${toString (hlib.simplexPortFor "alice")}"
       > -              (svc "hermes-agent-alice").preStart;
       > +          aliceUsesIt = lib.hasInfix "hermes-simplex-start" (svc "hermes-simplex-alice")
       > +          .serviceConfig.ExecStart;
       > +          bobAgentDialsPublic = lib.hasInfix "SIMPLEX_WS_URL=ws://127.0.0.1:${toString (hlib.simplexPortFor "bob")}" (svc "hermes-agent-bob")
       > +          .preStart;
       > +          aliceAgentDialsPublic = lib.hasInfix "SIMPLEX_WS_URL=ws://127.0.0.1:${toString (hlib.simplexPortFor "alice")}" (svc "hermes-agent-alice")
       > +          .preStart;
       >            addressDialsPublic = (svc "hermes-simplex-address-bob").environment.SIMPLEX_WS_URL;
       >            distinct = hlib.simplexPortFor "alice" != hlib.simplexPortFor "bob";
       >            quiet = failedAssertions twoNative;
       > @@ -1756,8 +1762,11 @@ in
       >        expr = {
       >          nativeRefusesVm = lib.any (lib.hasInfix "hermes-native-guard-bob") nativeAgent.serviceConfig.ExecStartPre;
       >          dashboardToo = lib.any (lib.hasInfix "hermes-native-guard-bob") nativeDashboard.serviceConfig.ExecStartPre;
       > -        vmRefusesNative = lib.any (lib.hasInfix "hermes-vm-guard-alice") nativeSys.systemd.services."microvm-virtiofsd@hermes-alice".serviceConfig.ExecStartPre;
       > -        afterFirewall = lib.elem "hermes-firewall.service" nativeDashboard.after
       > +        vmRefusesNative =
       > +          lib.any (lib.hasInfix "hermes-vm-guard-alice")
       > +            nativeSys.systemd.services."microvm-virtiofsd@hermes-alice".serviceConfig.ExecStartPre;
       > +        afterFirewall =
       > +          lib.elem "hermes-firewall.service" nativeDashboard.after
       >            && lib.elem "hermes-firewall.service" nativeSys.systemd.services."hermes-simplex-bob".after;
       >        };
       >        expected = {
       For full logs, run:
         nix log /nix/store/2rikia1irlv2xrx9i8fhf7c0w6afasmy-treefmt-check.drv