Function validate_accepted_auth_config 

pub fn validate_accepted_auth_config(config: &Config) -> Result<()>

Prove that an authorization policy compiles, without a live auth layer in hand.

RpcInboundAuth::validate_refresh_from_config is the same test for a caller that owns the live layer. Surfaces that stage a configuration without one (the gateway’s Quickstart) use this so they can refuse an invalid policy before their first persistent write rather than after it. Pairing state does not affect whether the policy compiles.