try
Inspect a command's effects before modifying your live system
...The project is careful not to position itself as a full security sandbox, since trusted commands can still make network calls and the tool is presented as a prototype rather than a complete isolation boundary. It supports multiple Linux distributions and can fall back to mergerfs or unionfs in environments where overlayfs on nested mounts does not work as expected. In practice,