Function validate_native_exec_host_configuration 

pub fn validate_native_exec_host_configuration(
    config: &Config,
) -> Result<(), NativeExecCutError>

Check the actual host Config before granting native InitialImage or exec authority.

host_input_log and fatal_core_capture belong to the continuing host GlobalState. This policy preserves them without copying them to the guest. Their presence does not establish that the caller retained that owner; the launcher must keep it alive through exec and the final physical drain. Neither this check nor a Config digest establishes runtime admission.