Function validate_policy_enforcement_report 

pub fn validate_policy_enforcement_report(
    capabilities: &CommandExecutorCapabilities,
    report: &PolicyEnforcementReport,
    mode: PolicyCapabilityMode,
) -> Result<(), CommandError>

Validates that an executor’s post-run report matches requested policy and declared capabilities.

Errors

Returns CommandError::UnsupportedPolicy when the report downgrades or contradicts required enforcement.