Enterprise policy to allow yolo in CLI sandbox

Describe the feature or problem you'd like to solve

There should be a separate policy scope for cli sandboxes for yolo mode and other permission related enterprise policies

Proposed solution

Enterprise policies allow restrictive access for setting like yolo mode, and other folder/tool settings. These are generally used because of trust within an enterprise environment, where broad tool access could cause damage. The point of sandbox mode is to create a 'safe place' for developers to work agentically. Currently, when yolo mode is disabled by enterprise policy, it applies to both standard and sandbox mode. Ideally, enterprise policies should have a separate sandbox hierarchy where any policy which could make sense to configure more permissively would allow a separate setting.

Example prompts or workflows

No response

Additional context

No response

Aucun fichier, test ou point d’entrée n’est nommé. Commencez par suivre la gestion existante des politiques d’entreprise pour yolo mode et le sandbox de la CLI, puis identifiez les paramètres liés aux permissions qui nécessitent une portée de sandbox distincte. C’est terminé lorsque le mode sandbox peut utiliser sa propre hiérarchie de politiques sans modifier les restrictions du mode standard.