feat(network): support prebound proxy listeners and per-connection identity

crates/openshell-supervisor-network/README.md

@@ -15,6 +15,13 @@ default features, so this instrumentation does not
 require the compute runtime or Unix-only sandbox library. It is a development
 dependency only.
 
+## Direct proxy support
+
+Isolation backends can reuse the supervisor's explicit proxy with a reserved
+listener and per-connection executable identity. This keeps network policy
+enforcement in the supervisor while the backend's launcher retains its socket
+reservation through sandbox cleanup. Attribution failures deny the request.
+
 ## Sandbox instance inputs
 
 `run_networking` takes a `SandboxInstanceNetwork` with the sandbox identity,

crates/openshell-supervisor-network/src/host.rs

@@ -222,8 +222,13 @@ pub async fn start_host_proxy(config: HostProxyConfig) -> Result<HostProxyHandle
         None,
         None,
         None,
-        Some(direct_listener_identity),
-        None,
+        Some(crate::run::ProxyListenerConfig {
+            bind_addr: config.bind_addr,
+            authorization: None,
+            binary_identity: direct_listener_identity,
+            listener: None,
+            identity_resolver: None,
+        }),
         None,
     )
     .await?;