This is a really neat idea. I'm not clear on how OSTree uses git, however. Are you updating cloned workareas from many upstream source repositories and then rebuilding into a new root filesystem or are you keeping a global "every file in the filesystem" image. That is, are you storing binaries in git?