@@ -79,21 +79,24 @@ fails. A killed test process skips cleanup, so names are unique to the run.
 - `testkit::python_image()` for sandboxes that run `python3`, curl, git, or
   openssl: `OPENSHELL_TEST_PYTHON_IMAGE`, or `openshell/e2e-python:dev`
   (`e2e/python/Dockerfile.workload`). The tmachine installers load it into
-  every environment; `mise run e2e:workload:build` builds it locally.
+  every environment; `mise run e2e:workload:build` builds it locally. An
+  override image must run `python3` from one of `testkit::PYTHON_BINARIES`.
 - `cx.cli([...])` to run the installed CLI against the same gateway, with
   `success()`, `failure()`, and `json()` on the output. `cx.cli_handle()`
   returns that CLI for code that can't borrow `cx`, such as a cleanup hook.
 - `cx.on_cleanup(name, hook)` to remove something when the test ends.
 - `testkit::policy` for sandbox policies: `policy::base()` reads
   `testkit/src/base-policy.yaml`, which allows no network access, and
   `policy::allow(&mut policy, name, host, port, binaries)` adds an endpoint
-  that `policy::Endpoint` configures (`.rest(Access::Full)`,
-  `.credential_binding(provider)`, ...). Pass the result to
-  `cx.sandbox(..).policy(policy)`, or `policy::to_yaml` for the CLI.
+  (binaries apply to every endpoint under `name`) that `policy::Endpoint`
+  configures (`.rest(Access::Full)`, `.credential_binding(provider)`, ...).
+  Pass the result to `cx.sandbox(..).policy(policy)`, or `policy::to_yaml`
+  for the CLI.
   `testkit::PYTHON_BINARIES` names `python3` in `python_image()` images.
-- `testkit::install_provider(cx, name, profile, credentials)` to import a
-  provider profile, whose `id` must be `name`, and create a provider of it,
-  with cleanup for both.
+- `testkit::import_profile(cx, profile)` to import a provider profile and
+  return its `id`, and `testkit::create_provider(cx, name, type, credentials)`
+  to create a provider, each with cleanup. `testkit::install_provider(cx, name,
+  profile, credentials)` does both.
 - `testkit::YamlFile` for YAML a CLI command reads from a file.
 - `cx.client()` for SDK calls testkit does not wrap.
 - `error.grpc_code()` for the gRPC status code (`testkit::GrpcCode`) of a
 
@@ -26,8 +26,9 @@ libtest-mimic = "0.8"
 linkme = "0.3"
 quick-junit = "0.8"
 rand = "0.9"
-serde = "1"
+serde = { version = "1", features = ["derive"] }
 serde_json = "1"
+serde_yml = { package = "noyalib", version = "0.0.53", default-features = false, features = ["std", "compat-serde-yaml"] }
 tempfile = "3"
 tokio = { version = "1.43", features = ["macros", "process", "rt", "time"] }
 tonic = "0.14"
 
@@ -390,7 +390,8 @@ impl SandboxBuilder {
 /// as the SDK builds one from `spec` alone. The spec is destructured without
 /// `..`, so a field added to the SDK's spec fails to compile here instead of
 /// being dropped. [`SandboxBuilder::create`] rejects a GPU or service
-/// exposures before calling this.
+/// exposures before calling this. A policy field on the SDK's spec would
+/// replace this (#5410).
 fn policy_create_request(
     spec: SandboxSpec,
     policy: proto::SandboxPolicy,
 
@@ -9,7 +9,9 @@ const BASE_IMAGE_ENV: &str = "OPENSHELL_TEST_BASE_IMAGE";
 /// nvcr.io.
 const DEFAULT_BASE_IMAGE: &str = "nvcr.io/nvidia/base/ubuntu:24.04";
 
-/// Overrides [`DEFAULT_PYTHON_IMAGE`].
+/// Overrides [`DEFAULT_PYTHON_IMAGE`]. The image must run `python3` from one
+/// of [`PYTHON_BINARIES`]; otherwise policies that allow those paths don't
+/// match it, and its connections are denied.
 const PYTHON_IMAGE_ENV: &str = "OPENSHELL_TEST_PYTHON_IMAGE";
 /// The workload image for tests that run `python3`, curl, git or openssl in a
 /// sandbox, built from `e2e/python/Dockerfile.workload`. It isn't published:
@@ -19,7 +21,8 @@ const DEFAULT_PYTHON_IMAGE: &str = "openshell/e2e-python:dev";
 
 /// The paths `python3` runs from in [`python_image`] images, as network
 /// policy binaries: the system Python, the pullable uv image's Python, and the
-/// workload image's uv-installed Python behind its virtualenv.
+/// workload image's uv-installed Python behind its virtualenv. Add a path
+/// here for an image that installs Python elsewhere.
 pub const PYTHON_BINARIES: &[&str] = &[
     "/usr/bin/python*",
     "/usr/local/bin/python*",
 
@@ -53,7 +53,7 @@ pub use image::{PYTHON_BINARIES, base_image, python_image};
 pub use openshell_sdk as sdk;
 pub use poll::{Poll, poll_until};
 pub use program::main;
-pub use provider::install_provider;
+pub use provider::{create_provider, import_profile, install_provider};
 pub use ready::check as check_ready;
 pub use registry::Test;
 pub use run::{TestInfo, run};