Queued tasks were stuck in a permission-denied loop because claude -p
runs in default permission mode and refuses every Bash/Edit/Write tool
call. They were marked done with the LLM s I-need-permission text,
which the next day s reflection then reported as unsolved, ad infinitum.
Set IS_SANDBOX=1 (required to bypass the root guard on -dangerously-
skip-permissions) and pass the flag itself, so dispatched tasks can
actually do filesystem and shell work.
