approval_policy = "never" sandbox_mode = "danger-full-access" [sandbox_workspace_write] network_access = true