Maybe runs processes under the control of ptrace. When it intercepts a system call that is about to make changes to the file system, it logs that call, ignores the system call and indicates success to the calling process.

After execution, maybe produces a report of all attempted changes to the filesystem, and offers to re-run the process (without filtering this time).