permissions: remove core legacy policy round trips

codex-rs/protocol/src/approvals.rs

@@ -4,7 +4,6 @@ use crate::models::PermissionProfile;
 use crate::parse_command::ParsedCommand;
 use crate::protocol::FileChange;
 use crate::protocol::ReviewDecision;
-use crate::protocol::SandboxPolicy;
 use crate::request_permissions::RequestPermissionProfile;
 use codex_utils_absolute_path::AbsolutePathBuf;
 use schemars::JsonSchema;
@@ -16,13 +15,9 @@ use std::path::PathBuf;
 use ts_rs::TS;
 
 /// Fully resolved permissions for rerunning an intercepted child process.
-///
-/// `permission_profile` is the canonical permission model. `sandbox_policy`
-/// remains as the legacy adapter for sandbox backends that still require it.
 #[derive(Debug, Clone, PartialEq, Eq)]
 pub struct ResolvedPermissionProfile {
     pub permission_profile: PermissionProfile,
-    pub sandbox_policy: SandboxPolicy,
 }
 
 #[allow(clippy::large_enum_variant)]