No approval required for any tool execution in docker sandboxes

Describe the bug

In docker sandboxes, CLI does not ask me approval for any tool executions:

• create, edit or delete a file
• call curl GET or POST by bash
• create instant python script and run it
• call dotnet command for compiling

Even though /yolo show says Tool, path, and URL requests require individual approval., I have never asked approval for tool executions.

If I ran CLI on Windows outside of docker sandboxes, approvals requested correctly. CLI seems to be affected by the environment but it is not described in reference document. IMO, yolo off should work regardless of the environment.

Affected version

1.0.83

Steps to reproduce the behavior

1. Install docker sandboxes (winget Docker.sbx) and launch copilot (sbx run copilot)
2. /yolo off and confirm by /yolo show
3. Ask to run any of operations above like "I want to check yolo off behavior. Try to create and delete a file, generate and run python script, and access external URL."

Expected behavior

CLI asks me approval for the tool executions.

Additional context

Environment

• GitHub Copilot CLI in Docker Sandboxes v0.39.0 on Windows 11
• permissions-config.json not exists
• permissions.disableBypassPermissionsMode is disable in settings.json

Related link
https://docs.github.com/en/copilot/reference/copilot-cli-reference/cli-command-reference#restricting-the---allow-all-options

Windows 11 上で sbx run copilot を使用して Docker Sandboxes v0.39.0 で再現し、CLI を直接実行した場合と /yolo off および /yolo show を比較する。次に、permissions-config.json および settings.json と併せて権限処理を追跡し、一覧にある各操作が sandbox 内で承認を求める場合に fix を確認する。