diff --git a/docs/cli/settings.md b/docs/cli/settings.md
index bfccc8af65..3f935b6d8e 100644
--- a/docs/cli/settings.md
+++ b/docs/cli/settings.md
@@ -119,7 +119,6 @@ they appear in the UI.
 | ------------------------------------- | ----------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | ------- |
 | Disable YOLO Mode                     | `security.disableYoloMode`                      | Disable YOLO mode, even if enabled by a flag.                                                                                                                                                                                        | `false` |
 | Allow Permanent Tool Approval         | `security.enablePermanentToolApproval`          | Enable the "Allow for all future sessions" option in tool confirmation dialogs.                                                                                                                                                      | `false` |
-| Auto-add to Policy                    | `security.autoAddPolicy`                        | Automatically add "Proceed always" approvals to your persistent policy.                                                                                                                                                              | `true`  |
 | Blocks extensions from Git            | `security.blockGitExtensions`                   | Blocks installing and loading extensions from Git.                                                                                                                                                                                   | `false` |
 | Extension Source Regex Allowlist      | `security.allowedExtensions`                    | List of Regex patterns for allowed extensions. If nonempty, only extensions that match the patterns in this list are allowed. Overrides the blockGitExtensions setting.                                                              | `[]`    |
 | Folder Trust                          | `security.folderTrust.enabled`                  | Setting to track whether Folder trust is enabled.                                                                                                                                                                                    | `true`  |
diff --git a/docs/reference/configuration.md b/docs/reference/configuration.md
index c1c67803b0..ab5bd4ceb6 100644
--- a/docs/reference/configuration.md
+++ b/docs/reference/configuration.md
@@ -741,6 +741,12 @@ their corresponding top-level category object in your `settings.json` file.
   - **Default:** `undefined`
   - **Requires restart:** Yes
 
+- **`tools.sandboxFlags`** (string):
+  - **Description:** Additional flags to pass to the sandbox container engine
+    (Docker or Podman). Environment variables can be used and will be expanded.
+  - **Default:** `""`
+  - **Requires restart:** Yes
+
 - **`tools.shell.enableInteractiveShell`** (boolean):
   - **Description:** Use node-pty for an interactive shell experience. Fallback
     to child_process still applies.
diff --git a/schemas/settings.schema.json b/schemas/settings.schema.json
index 426c52c88e..a25b0ad915 100644
--- a/schemas/settings.schema.json
+++ b/schemas/settings.schema.json
@@ -1432,13 +1432,6 @@
           "default": false,
           "type": "boolean"
         },
-        "autoAddPolicy": {
-          "title": "Auto-add to Policy",
-          "description": "Automatically add \"Proceed always\" approvals to your persistent policy.",
-          "markdownDescription": "Automatically add \"Proceed always\" approvals to your persistent policy.\n\n- Category: `Security`\n- Requires restart: `no`\n- Default: `true`",
-          "default": true,
-          "type": "boolean"
-        },
         "blockGitExtensions": {
           "title": "Blocks extensions from Git",
           "description": "Blocks installing and loading extensions from Git.",