Gemini CLI YOLO mode, read from the source: why settings.json can't turn it on

gemini --approval-mode=yolo, Ctrl+Y, why YOLO can't be saved as a default, folder trust, headless ASK_USER→DENY, and the real sandbox.