No approval required for any tool execution in docker sandboxes

Describe the bug

In docker sandboxes, CLI does not ask me approval for any tool executions:

• create, edit or delete a file
• call curl GET or POST by bash
• create instant python script and run it
• call dotnet command for compiling

Even though /yolo show says Tool, path, and URL requests require individual approval., I have never asked approval for tool executions.

If I ran CLI on Windows outside of docker sandboxes, approvals requested correctly. CLI seems to be affected by the environment but it is not described in reference document. IMO, yolo off should work regardless of the environment.

Affected version

1.0.83

Steps to reproduce the behavior

1. Install docker sandboxes (winget Docker.sbx) and launch copilot (sbx run copilot)
2. /yolo off and confirm by /yolo show
3. Ask to run any of operations above like "I want to check yolo off behavior. Try to create and delete a file, generate and run python script, and access external URL."

Expected behavior

CLI asks me approval for the tool executions.

Additional context

Environment

• GitHub Copilot CLI in Docker Sandboxes v0.39.0 on Windows 11
• permissions-config.json not exists
• permissions.disableBypassPermissionsMode is disable in settings.json

Related link
https://docs.github.com/en/copilot/reference/copilot-cli-reference/cli-command-reference#restricting-the---allow-all-options

Reproducir con Docker Sandboxes v0.39.0 en Windows 11 usando sbx run copilot; comparar /yolo off y /yolo show con la CLI ejecutándose directamente. Después, rastrear el manejo de permisos junto con permissions-config.json y settings.json, y confirmar el fix cuando cada operación indicada solicite aprobación en el sandbox.