Only the current working directory will be exposed/mounted to the runtime (we do this to facilitate the DX when running local files without requiring the user to add extra flags).

As a fun exercise, you can try reading process.cwd() from edge in --safe mode and without it.