The adapter builds the work dir with os.path.join, so the expected string is built the same way rather than hard-coded with "/" — otherwise the assertion fails on Windows, where the separator is a backslash. The security property (exactly one bind mount, and it is the work tree) is platform-neutral. Full suite: 537 tests, 0 failures, 3 skipped (docker/deploy_it integration).