pub const POLICY_FILE_ENV: &str = "ASSAY_POLICY_FILE";
Path to a policy file applied to every VM this process creates. Follows the same env-driven pattern as the other sandbox knobs.