fix(isolation-session): refuse network policy the backend cannot enforce; require the unrestricted-network acknowledgment - #682

Merged

adpa-ms merged 8 commits into

feature/isolation-session-internalfrom

user/adibpa/copilot-iso-network-policy

Jul 28, 2026

Commits on Jul 27, 2026

Refuse dishonest network policy on the IsolationSession backend

adpa-ms
and
Copilot
committed
SDK: require the unrestricted-network acknowledgment at iso provision

adpa-ms
and
Copilot
committed
docs: IsolationSession network policy is honesty-gated, not rejected

adpa-ms
and
Copilot
committed
test: expand IsolationSession network coverage + fix E2E probe

adpa-ms
and
Copilot
committed
fix: add canonical network ack to iso TTY resize smoke config
adpa-ms
committed
docs: align state-aware design + GA networking docs with iso network policy
adpa-ms
committed
docs: address PR review -- stale validator comment, fragile test counts, policy.ui gap
adpa-ms
committed
refactor: move network_specified onto ContainerPolicy
adpa-ms
committed