diff --git a/src/spark_cli/cli.py b/src/spark_cli/cli.py
index 03fd6494..2d505684 100644
--- a/src/spark_cli/cli.py
+++ b/src/spark_cli/cli.py
@@ -10822,6 +10822,7 @@ def cmd_sandbox(args: argparse.Namespace) -> int:
     "external_publish",
     "git_history_mutation",
     "identity_access_mutation",
+    "high_cost_execution",
     "network_exfiltration",
     "remote_code_execution",
     "container_privilege_escalation",