This is wonderful - might even be exactly what one of my projects needs to use as a dependency.
In the README it mentions that it puts the dev environment in a filesystem jail, but how are you able to use your hosts bins without leaking access to the rest of the system? Or is that just an assumed liability?