[tumberger]

Summary

• add sandy run --policy-file PATH using the same bounded SandboxPolicy JSON accepted by the Rust API
• treat the document as complete caller policy and disable automatic integration discovery for that invocation
• resolve relative paths against one trusted working-directory snapshot and protect the policy source
• expose every fixed launcher contribution in dry-run schema version 7
• reject policy shapes the CLI cannot enforce, including disabled target execution

Stack

1. refactor(policy): separate launcher and subprocess capabilities #50 — separate launcher and subprocess capabilities
2. This PR — complete CLI policy files
3. simplify built-in agent defaults

Verification

• strict parsing, source-bound, conflict, redaction, and dry-run tests
• sacrificial macOS and Linux policy-file coverage included in the following stack layer
• make check

Draft until the complete stack is reviewed together.