fix: Remove violation mode

config/cobra.go

@@ -23,8 +23,6 @@ func ApplyCobraFlags(cmd *cobra.Command) {
 		globalConfig.Config.ExperimentalProxyMode, "Use experimental proxy-based interception (EXPERIMENTAL)")
 	cmd.PersistentFlags().BoolVar(&globalConfig.Config.Sandbox.Enabled, "sandbox",
 		globalConfig.Config.Sandbox.Enabled, "Enable sandbox mode to isolate package manager processes (EXPERIMENTAL)")
-	cmd.PersistentFlags().StringVar(&globalConfig.Config.Sandbox.ViolationMode, "sandbox-violation-mode",
-		globalConfig.Config.Sandbox.ViolationMode, "How to handle sandbox policy violations: block, warn, or allow")
 	cmd.PersistentFlags().StringVar(&globalConfig.SandboxProfileOverride, "sandbox-profile",
 		globalConfig.SandboxProfileOverride, "Override sandbox policy profile (built-in name or path to custom YAML)")
 }

config/config.go

@@ -70,9 +70,6 @@ type SandboxConfig struct {
 	// Enabled enables sandbox mode (opt-in by default for backward compatibility).
 	Enabled bool `mapstructure:"enabled"`
 
-	// ViolationMode defines how policy violations are handled (block, warn, or allow).
-	ViolationMode string `mapstructure:"violation_mode"`
-
 	// Policies maps package manager names to their sandbox policy references.
 	// Key is package manager name (e.g., "npm", "pip"), value is policy reference.
 	Policies map[string]SandboxPolicyRef `mapstructure:"policies"`

config/config.template.yml

@@ -52,6 +52,8 @@ trusted_packages:
 # filesystem, network, and process execution access. This provides defense-in-depth
 # protection against malicious install scripts and supply chain attacks.
 #
+# Policy violations will block execution (this is the only supported behavior).
+#
 # Currently supported platforms:
 # - macOS (using Seatbelt sandbox-exec)
 # - Linux (coming soon: Bubblewrap or seccomp-bpf)
@@ -60,12 +62,6 @@ sandbox:
   # Enable sandbox mode (opt-in, default: false for backward compatibility)
   enabled: false
 
-  # How to handle policy violations: block | warn | allow
-  # - block: Prevent execution on policy violation (recommended)
-  # - warn: Log warning but allow execution
-  # - allow: Allow all operations (disables sandbox)
-  violation_mode: block
-
   # Per-package-manager sandbox policies
   # Each package manager can have its own policy to account for unique security characteristics
   policies: