No approval required for any tool execution in docker sandboxes

Describe the bug

In docker sandboxes, CLI does not ask me approval for any tool executions:

• create, edit or delete a file
• call curl GET or POST by bash
• create instant python script and run it
• call dotnet command for compiling

Even though /yolo show says Tool, path, and URL requests require individual approval., I have never asked approval for tool executions.

If I ran CLI on Windows outside of docker sandboxes, approvals requested correctly. CLI seems to be affected by the environment but it is not described in reference document. IMO, yolo off should work regardless of the environment.

Affected version

1.0.83

Steps to reproduce the behavior

1. Install docker sandboxes (winget Docker.sbx) and launch copilot (sbx run copilot)
2. /yolo off and confirm by /yolo show
3. Ask to run any of operations above like "I want to check yolo off behavior. Try to create and delete a file, generate and run python script, and access external URL."

Expected behavior

CLI asks me approval for the tool executions.

Additional context

Environment

• GitHub Copilot CLI in Docker Sandboxes v0.39.0 on Windows 11
• permissions-config.json not exists
• permissions.disableBypassPermissionsMode is disable in settings.json

Related link
https://docs.github.com/en/copilot/reference/copilot-cli-reference/cli-command-reference#restricting-the---allow-all-options

Riprodurre con Docker Sandboxes v0.39.0 su Windows 11 usando sbx run copilot; confrontare /yolo off e /yolo show con la CLI eseguita direttamente. Quindi tracciare la gestione delle autorizzazioni insieme a permissions-config.json e settings.json, e confermare il fix quando ogni operazione elencata richiede l'approvazione nel sandbox.