johnl-oai c4ea7294b9 Prepare managed policy validation for Windows sandbox provisioning (#42344) ...

## What changed

- Add a Windows sandbox service validator that loads managed configuration while impersonating the provisioning client.
- Reject elevated sandbox or network settings that conflict with managed requirements, including local binding and HTTP or SOCKS proxy-port restrictions.
- Add a one-shot cloud configuration loader that bypasses the disk cache so policy checks use a fresh backend response without modifying cached configuration.
- Keep the provisioning integration disabled until authenticated transport can supply the policy inputs.

## Testing

- Cover elevated sandbox restrictions, disabled networking, local binding, proxy-port classification, malformed policy, impersonation failure, and cache bypass behavior.

GitOrigin-RevId: b76aa8959c515c6507c2eaf61af768efa1305253

2026-09-02 20:07:11 +00:00

..

src

Prepare managed policy validation for Windows sandbox provisioning (#42344)

2026-09-02 20:07:11 +00:00

BUILD.bazel

Move cloud requirements crate to cloud config (#24621)

2026-06-01 16:43:52 -07:00

Cargo.toml

Route backend requests through the HTTP client factory (#34490)

2026-07-21 08:28:51 +00:00