Drop permission policy changes from context fragment PR

Co-authored-by: Codex <noreply@openai.com>

codex-rs/core/src/tools/handlers/mod.rs

@@ -214,13 +214,12 @@ pub(super) async fn apply_granted_turn_permissions(
         _ => false,
     };
 
-    let sandbox_permissions = if effective_permissions.is_some()
-        && !sandbox_permissions.requires_additional_permissions()
-    {
-        SandboxPermissions::WithAdditionalPermissions
-    } else {
-        sandbox_permissions
-    };
+    let sandbox_permissions =
+        if effective_permissions.is_some() && !sandbox_permissions.uses_additional_permissions() {
+            SandboxPermissions::WithAdditionalPermissions
+        } else {
+            sandbox_permissions
+        };
 
     EffectiveAdditionalPermissions {
         sandbox_permissions,

codex-rs/core/src/tools/handlers/shell.rs

@@ -381,7 +381,7 @@ impl ShellHandler {
         // continue through the normal exec approval flow for the command.
         if effective_additional_permissions
             .sandbox_permissions
-            .requires_escalated_permissions()
+            .requests_sandbox_override()
             && !effective_additional_permissions.permissions_preapproved
             && !matches!(
                 turn.approval_policy.value(),

codex-rs/core/src/tools/handlers/unified_exec.rs

@@ -187,7 +187,7 @@ impl ToolHandler for UnifiedExecHandler {
                 // continue through the normal exec approval flow for the command.
                 if effective_additional_permissions
                     .sandbox_permissions
-                    .requires_escalated_permissions()
+                    .requests_sandbox_override()
                     && !effective_additional_permissions.permissions_preapproved
                     && !matches!(
                         context.turn.approval_policy.value(),