AAOS SDV in 2026: one permission class costs a mesh-wide VM update
Google's 24 August 2026 AAOS SDV post says adding a security-sensitive service means updating every VM in the mesh. The AOSP deployment page describes a default policy built to avoid that.