@bored-art-40741, @happy-kitchen-89482 : it looks like we're mostly able to get away with murder when the workdir is located outside the buildroot, due to the fact that source_roots and sources_relative_to_buildroot don't actually check that they're located under the buildroot. so at least that point i was making above about addresses was invalid