Dylan Hurd de6e72addd Add opt-in Unicode canonical matching to exec policy rules (#59535) ...

## What changed

- Support `canonical_matching=True` in `prefix_rule` and `canonical_matching = true` in managed TOML prefix rules. Apply Unicode canonical caseless matching to every prefix token, including alternatives, while keeping exact matching as the default.
- Match case and canonically equivalent Unicode spellings, such as `bash` and `bAſh`, without resolving executables on the filesystem.
- Preserve managed restrictions when checking absolute-path rule amendments, and enforce applicable `host_executable` path allowlists during basename fallback.

## Testing

Add coverage for case folding, Unicode normalization, token alternatives, exact-match defaults, and host executable allowlists. Extend managed-policy and shell-execution tests to cover canonical matching.

GitOrigin-RevId: c2f79069dc38d55c77028c457b22beb468d5c571

2026-11-05 00:55:46 +00:00

..

examples

Add remote thread config loader protos (#18892)

2026-04-23 10:06:05 -07:00

scripts

Add remote thread config loader protos (#18892)

2026-04-23 10:06:05 -07:00

src

Add opt-in Unicode canonical matching to exec policy rules (#59535)

2026-11-05 00:55:46 +00:00

BUILD.bazel

Embed defaults in the packaged config layer (#38179)

2026-08-12 12:15:47 +00:00

Cargo.toml

Support managed OpenTelemetry configuration requirements (#57649)

2026-10-28 05:11:45 +00:00

defaults.toml

Make environment context date and timezone configurable (#52164)

2026-10-08 16:27:10 +00:00