Lean-sudo: drop-in replacement with formally verified policy, env, and auth | Hacker News Reader