I add commands that constantly fall into this rabbit hole to AGENTS.md alongside an instruction for the agent to request escalation immediately instead of failing first then retrying out of the sandbox. It’s a hack, but it works.