Comment by brandonpayton

The build isolation approach sounds interesting, but I'm not sure I understand.

Do you mean isolating build scripts by using a VFS mapped to the real FS and masking away everything the build script should not have access to?

> The some points of trouble I ran into were dead symlinks left behind on the FS pointing to real files

Symlinks make this space trickier for sure.

> escape codes interacting with the terminal (e.g. escape codes reading from the clipboard).

Woah. TIL this was possible.