This looks great, do I understand correctly that the full isolation option allows the binary to be fully self-contained and does not require any connectivity for the app to run?

That would solve a big problem in air-gapped environments :-)