fix(permissions): validate network access flow

crates/application/tests/structured_launch_d3.rs

@@ -531,6 +531,7 @@ impl AgentSessionFactory for FakeFactory {
         _requester: Option<&str>,
         _env: &[(String, String)],
         _sandbox: Option<&domain::sandbox::SandboxPlan>,
+        _structured_policy: Option<&domain::ports::StructuredProviderLaunchPolicy>,
     ) -> Result<Arc<dyn AgentSession>, AgentSessionError> {
         self.starts
             .lock()
@@ -1158,7 +1159,16 @@ async fn swap_structured_live_session_shuts_down_then_relaunches() {
         let cwd = ProjectPath::new(ROOT).unwrap();
         let session = f
             .factory
-            .start(&profile, &ctx, &cwd, &SessionPlan::None, None, &[], None)
+            .start(
+                &profile,
+                &ctx,
+                &cwd,
+                &SessionPlan::None,
+                None,
+                &[],
+                None,
+                None,
+            )
             .await
             .expect("seed structured session");
         f.structured