[shiju-nv]

Summary

The OpenShell supervisor currently creates a new listening socket and uses one static executable identity when an isolation backend supplies ProxyListenerConfig. This change lets the trusted supervisor setup for an isolation backend supply an already-bound listener and resolve each connection's executable identity, using the supervisor's existing network policy enforcement and provider credential handling.

Related Issue

Closes #4804

Changes

• Extend ProxyListenerConfig supplied through BuiltBackend.proxy_listener so the supervisor can serve an already-bound listener while the isolation backend's launcher retains its reservation through sandbox cleanup.
• Use ProxyPeerIdentityResolver from trusted backend setup to resolve and validate each authenticated workload connection, keeping blocking lookups out of the supervisor's accept loop.
• Deny and audit missing, failed or unusable identity evidence without a static fallback, including requests to local proxy routes.
• Pass ProxyListenerConfig through supervisor startup and host proxy startup; preserve static executable identity behavior and reject direct-listener settings with isolation-boundary network mediation.
• Document ownership, attribution and failure behavior in the network crate README.

Release Notes

Testing

• Checks appropriate to the affected code and behavior pass
• Unit tests added/updated (if applicable)
• E2E tests added/updated (if applicable)

Checklist

• Follows Conventional Commits
• Commits are signed off (DCO)
• Architecture docs updated (if applicable)

[copy-pr-bot]

This pull request requires additional validation before any workflows can run on NVIDIA's runners.

Pull request vetters can view their responsibilities here.

Contributors can view more details about this message here.

[github-actions]

Label test:e2e applied for e83defd. Open the existing run and click Re-run all jobs to execute with the label set. The run will execute the standard E2E suite after building the required gateway, sandbox, and supervisor images once. The matching required CI gate status on this PR will flip green automatically once the run finishes.