AgentPod 075: Prototype Windows restricted token flow

[EfeDurmaz16]

Objective

Complete issue 75 from the AgentPod productization plan: Prototype Windows restricted token flow.

Why This Matters

AgentPod is the primary product surface. This work moves Agentbox from a collection of runtime/control features toward a credible governed execution product with honest provider boundaries.

Scope

• Epic: Epic 8: Windows Native Path
• Area: security/windows
• Priority: P1
• Expected PR boundary: gated token prototype

Out of scope: fake provider support, broad rewrites unrelated to this issue, or claims not backed by the verification gate.

Acceptance Criteria

• Behavior, documentation, or contract described by the issue exists.
• Tests, smoke checks, or docs validation cover the change where practical.
• Verification gate passes: denied privilege fixture cannot access protected operation.
• Provider/support level remains honest; descriptor-only and prototype surfaces are not presented as shipped.

Verification

denied privilege fixture cannot access protected operation.

Suggested PR Boundary

gated token prototype

Source

Derived from docs/agentpod-productization-100-issues.md at commit 33d44f8.