anchor.diff:    , withLibseccomp ? lib.any (lib.meta.platformMatch stdenv.hostPlatform) libseccomp.meta.platforms, libseccomp
     , withAWS ? !enableStatic && (stdenv.isLinux || stdenv.isDarwin), aws-sdk-cpp
     , enableStatic ? stdenv.hostPlatform.isStatic
  -  , name, suffix ? "", src, patches ? []
  -
  +  , name, suffix ? "", src
  +  , patches ? [ ]
     }:
     let
        sh = busybox-sandbox-shell;
  
positive.code: { lib, fetchurl, fetchpatch, fetchFromGitHub, callPackage
  , storeDir ? "/nix/store"
  , stateDir ? "/nix/var"
  , confDir ? "/etc"
  
negative.code:       sha256 = "a8a85e55de43d017abbf13036edfb58674ca136691582f17080c1cd12787b7ab";
      };
  
      patches = [(
        fetchpatch {
          url = "https://github.com/NixOS/nix/pull/4316.patch";
          sha256 = "0bqlm4n9sac9prgr9xlfng92arisp1hiqvc9pfh4fibsppkgdfc5";
        }
      )];
  
      inherit storeDir stateDir confDir boehmgc;
    });
  
  