refactor(vm): use sandbox backend protocol

Signed-off-by: Drew Newberry <anewberry@nvidia.com>

Author: drew

Cargo.lock

@@ -22,6 +22,7 @@ required-features = ["compute-driver"]
 [dependencies]
 openshell-core = { path = "../openshell-core", default-features = false }
 openshell-isolation-interface = { path = "../openshell-isolation-interface" }
+openshell-sandbox-backend = { path = "../openshell-sandbox-backend" }
 openshell-otel = { path = "../openshell-otel", optional = true }
 openshell-policy = { path = "../openshell-policy", optional = true }
 openshell-driver-podman = { path = "../openshell-driver-podman", optional = true }

crates/openshell-driver-vm/Cargo.toml

@@ -59,7 +59,7 @@ use openshell_core::proto::compute::v1::{
 use openshell_core::proto_struct::{
     deserialize_optional_non_empty_string_list, struct_to_json_value,
 };
-use openshell_isolation_interface::boundary_protocol::{
+use openshell_sandbox_backend::boundary_protocol::{
     BoundaryConfig, BoundaryListener, BoundaryTopology, GatewayVerificationKey,
     SandboxTlsClientConfig, SandboxTlsMaterial, SandboxTlsServerConfig, SandboxTransport,
     generate_sandbox_tls_material,

crates/openshell-driver-vm/src/driver.rs

@@ -8,13 +8,13 @@
 //! VM claims; `openshell-isolation-interface` and `openshell-sandbox` provide
 //! the common control and boundary behavior.
 
-use openshell_isolation_interface::boundary_protocol::{
-    BoundaryConfig, BoundaryListener, BoundaryTopology, GatewayVerificationKey,
-    SandboxTlsClientConfig, SandboxTlsServerConfig, SandboxTransport,
-};
 use openshell_isolation_interface::contract::{
     BackendError, DriverFenceEvidence, ResolvedWorkloadIdentity,
 };
+use openshell_sandbox_backend::boundary_protocol::{
+    BoundaryConfig, BoundaryListener, BoundaryTopology, GatewayVerificationKey,
+    SandboxTlsClientConfig, SandboxTlsServerConfig, SandboxTransport,
+};
 use std::collections::{BTreeMap, HashMap};
 
 /// Driver-owned inputs that bind one VM generation to one supervisor boundary.
@@ -97,7 +97,7 @@ impl VmBoundarySpec {
 #[cfg(test)]
 mod tests {
     use super::*;
-    use openshell_isolation_interface::boundary_protocol::{
+    use openshell_sandbox_backend::boundary_protocol::{
         SandboxTlsClientConfig, SandboxTlsServerConfig, SandboxTransport,
         generate_sandbox_tls_material,
     };