Function evaluate_proactive 

pub fn evaluate_proactive(
    account: &AccountState,
    resource_type: &str,
    resource_id: &str,
    configuration: &str,
) -> Vec<EvaluationResult>

Proactively evaluate a single supplied resource configuration against the account’s AWS-managed rules, without recording it into history. Used by StartResourceEvaluation so a proactive/detective evaluation reports the real compliance of the supplied config rather than a canned COMPLIANT.

configuration is the resource configuration document (the same shape the recorder stores). Returns one [EvaluationResult] per managed rule that applies to the resource’s type. An empty result means no managed rule applied — the caller reports INSUFFICIENT_DATA, never a fabricated pass.