Reading through the thread, it seems to me that the "git submodules" suggestion from David sounds like a "risk".
I would like to mention that it is not: it can be seamlessly added, used for a while, and removed later without any consequences. Creating this "hat repo" would have exactly the same consequences as creating a CSV file in which we would write which commits of apps/ go with which commits of nuttx/: you can create a file, use it, and remove it, and that cannot have any negative impact. But it can help. Let's go one step further: not everybody has to adhere to the hat repo. One could still use both repos like they always did. But other would still benefit from it. Best, Jonas Vautherin