Claude7/6/2026, 4:40:38 PM

Under YOLO every approval auto-returns true, so the no-backend unsandboxed
fallback would silently run a sandbox.network=false command with outbound
network access. Treat an explicit network ban as a floor: require an
enforcing backend for it under YOLO and fail closed when none is available,
instead of prompting (YOLO never prompts) or silently widening the ban.

Addresses Codex review on PR #202.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01DoiK2RdQDZCh1hMHpqHsQ9

Parent120c81c