grok-build full-auto

Full auto: nothing is asked, nothing is sandboxed, and every capability this build names is explicit. ui.permission_mode is always-approve, ui.yolo is set -- the product's own separate switch -- and sandbox.profile is off with sandbox.auto_allow_bash set. The feature and subsystem tables also enable background-agent coordination, codebase indexing, media tools, MCP watchers, the dashboard and goals. Monitor, background tasks and /loop are runtime mechanisms rather than invented setup keys. What is claimed about defaults, and what is not. subagents.enabled restates the documented default and is kept so the posture does not depend on that default remaining stable. For the other feature keys, this repository proves that the current binary accepts them, not what an omitted key defaults to. Telemetry and feedback remain untouched because they send data outward rather than grant a tool. This is a setup posture, not an execution permission profile. Exact versioned evidence lives in references/grok-baseline.json so prose here cannot silently become stale.