these 3 derivations will be built:
  /nix/store/1svxvlf4z4zsx4y69wycylmn0zx0ayax-integration-proton-authcmd.drv
  /nix/store/fiabf62iw0sd301njy7sc733gpsf1qhn-python3-3.14.6-env.drv
  /nix/store/ck06miqnc4ph6wbqlwvk90bkrvc32dfc-spaces-integration-proton-tls.drv
building '/nix/store/1svxvlf4z4zsx4y69wycylmn0zx0ayax-integration-proton-authcmd.drv'
building '/nix/store/fiabf62iw0sd301njy7sc733gpsf1qhn-python3-3.14.6-env.drv'
python3-3.14.6-env> structuredAttrs is enabled
python3-3.14.6-env> created 234 symlinks in user environment
building '/nix/store/ck06miqnc4ph6wbqlwvk90bkrvc32dfc-spaces-integration-proton-tls.drv'
spaces-integration-proton-tls> PASS: serving cert carries Basic Constraints CA:TRUE (mimics Proton Bridge)
spaces-integration-proton-tls> === generate himalaya.toml + msmtprc via integration_proton._build_config ===
spaces-integration-proton-tls> GENERATED himalaya.toml + msmtprc
spaces-integration-proton-tls> === generated config: integration pins backend.encryption.cert + tls_trust_file ===
spaces-integration-proton-tls> PASS: generated himalaya config pins backend.encryption.cert at the Bridge cert
spaces-integration-proton-tls> PASS: generated msmtprc carries tls_trust_file at the Bridge cert
spaces-integration-proton-tls> === IMAP positive: himalaya trusts the CA:TRUE cert via the integration's pin ===
spaces-integration-proton-tls> PASS: himalaya completed TLS against the CA:TRUE cert (integration pin works)
spaces-integration-proton-tls> PASS: no CaUsedAsEndEntity / cert error from himalaya when pinned
spaces-integration-proton-tls> === IMAP negative: strip the integration's pin -> default verifier rejects CA:TRUE ===
spaces-integration-proton-tls> PASS: without the pin himalaya rejects the CA:TRUE cert (the hazard is real)
spaces-integration-proton-tls> === SMTP positive: msmtp trusts the CA:TRUE cert via the integration's tls_trust_file ===
spaces-integration-proton-tls> PASS: msmtp trusted the CA:TRUE cert via tls_trust_file (no cert error)
spaces-integration-proton-tls> === SMTP negative: point trust_file at an unrelated cert -> msmtp must reject ===
spaces-integration-proton-tls> PASS: msmtp rejected the mismatched cert (trust_file is enforced)
spaces-integration-proton-tls> 
spaces-integration-proton-tls> RESULT: ALL-PASS