fix: Remove violation mode

sandbox/profiles/README.md

@@ -39,8 +39,6 @@ See the [Policy Schema Documentation](../policy.go) for details on the YAML stru
 - `${CWD}`: Current working directory
 - `${TMPDIR}`: Temporary directory
 
-### Violation Modes
+## Policy Enforcement
 
-- `block`: Block execution on policy violation (recommended)
-- `warn`: Log warning but allow execution
-- `allow`: Allow all operations (disables sandbox)
+All policy violations will block execution. This provides defense-in-depth protection against malicious install scripts and supply chain attacks.

sandbox/profiles/npm-restrictive.yml

@@ -6,8 +6,6 @@ package_managers:
   - yarn
   - bun
 
-violation_mode: block
-
 filesystem:
   allow_read:
     - ${CWD}/**

sandbox/profiles/pypi-restrictive.yml

@@ -6,8 +6,6 @@ package_managers:
   - poetry
   - uv
 
-violation_mode: block
-
 filesystem:
   allow_read:
     - ${CWD}/**