sandbox_mode = "danger-full-access" approval_policy = "never"