One thought I had about it is to treat all files owned by a project as living in a single key space defined by their path relative to either the build root or the root of the sandbox they live in. Then producing output files from sandboxing just becomes extracting into the buildroot probably under the workdir. I think there’s some problems with that and I’d need to think some more about it.