Having it be a shell function would work. It could create a copy-on-write file system or override the syscalls for file system access.