anchor.diff:  
     # The key with google storage bucket write permission,
     # deployed to ci via nixops `deployment.keys."service-account.json"`.
  -  serviceAccountKey =
  -    builtins.readFile ("/var/lib/hercules-ci-agent/secrets/service-account.json");
  +  serviceAccountKey = builtins.readFile
  +    ("/var/lib/hercules-ci-agent/secrets/service-account.json");
   
     # Push a split output derivation containing "out" and "hash" outputs.
     pushObject =
  
positive.code:         contentType = "application/x-gtar";
        };
  
        # Replace top-level pill attributes with push to google storage variants.
      } // lib.optionalAttrs (system == "x86_64-linux") {
        ivory = pushPill "ivory" dynamicPackages.ivory;
        brass = pushPill "brass" dynamicPackages.brass;
  
negative.code:       # Note that .checks are the actual _execution_ of the tests.
        hs = localLib.collectHaskellComponents haskellPackages;
  
        # Push the tarball to the google storage bucket for the current platform.
        release = pushObject {
          name = tarball.name;
          drv = tarball;
  