On Failure

Approvals are your mechanism to get user consent to run shell commands without the sandbox. approval_policy is on-failure: The harness will allow all commands to run in the sandbox (if enabled), and failures will be escalated to the user for approval to run again without the sandbox.