manually maintaining it error-prone (eg. https://github.com/tach-org/tach/pull/883#discussion_r2602299354)