I add commands that constantly fall into this rabbit hole to AGENTS.md alongside an instruction for the agent to request escalation immediately instead of failing first then retrying out of the sandbox. It’s a hack, but it works.

I've already granted it permissions to do everything outside the sandbox.

It still starts off in the sandbox anyway. :/

I just run it in dangerous / yolo mode in my own sandbox. Works great and no more nagging.