compass db commands run outside the sandbox

Claude may use dangerouslyDisableSandbox: true when running compass db sql or compass db recreate (formerly the ores.sql scripts).

Why: The sandbox blocks outbound connections to localhost:5432 (PostgreSQL). Any SQL script that calls psql will fail inside the sandbox. The user explicitly authorised running these scripts outside the sandbox.

How to apply: Set dangerouslyDisableSandbox: true on the Bash tool call whenever invoking compass db commands. This is a standing authorisation — no need to confirm each time. Remember also: never prefix PGPASSWORD on the command line; the script sources .env itself.