fix(permissions): validate network access flow

crates/infrastructure/tests/orchestrator_watcher.rs

@@ -483,6 +483,7 @@ impl AgentSessionFactory for BlockingReplyFactory {
         _requester: Option<&str>,
         _env: &[(String, String)],
         _sandbox: Option<&domain::sandbox::SandboxPlan>,
+        _structured_policy: Option<&domain::ports::StructuredProviderLaunchPolicy>,
     ) -> Result<Arc<dyn AgentSession>, AgentSessionError> {
         Ok(Arc::new(BlockingReplySession {
             id: SessionId::from_uuid(Uuid::new_v4()),