Function validate_command_capabilities 

pub fn validate_command_capabilities(
    capabilities: &CommandExecutorCapabilities,
    request: &CommandRequest,
    policy: &ExecutionPolicy,
    mode: PolicyCapabilityMode,
) -> Result<(), CommandError>

Validates that executor capabilities can satisfy a command policy before execution starts.

Errors

Returns CommandError::UnsupportedPolicy when required sandbox or network enforcement is missing and advisory mode is not enabled.