Correct disableBypassPermissionsMode docs to reflect actual enforcement (#61925)

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Author: lecoursen

content/copilot/how-tos/administer-copilot/manage-for-enterprise/manage-agents/disable-automatic-commands.md

@@ -2,7 +2,7 @@
 title: Disabling automatic command approval in Copilot clients
 shortTitle: Disable automatic commands
 allowTitleToDifferFromFilename: true
-intro: 'Disable yolo mode to stop agents from running commands without approval.'
+intro: 'Disable YOLO mode to stop agents from running commands without approval.'
 permissions: Enterprise owners
 versions:
   feature: copilot
@@ -14,15 +14,18 @@ category:
 
 > [!NOTE] This feature is in {% data variables.release-phases.public_preview %} and subject to change.
 
-You can prevent users from using modes that enable automatic approval of agent commands in {% data variables.copilot.copilot_cli_short %} and {% data variables.product.prodname_vscode_shortname %}. The `disableBypassPermissionsMode` setting is defined in your enterprise's `{% data variables.copilot.managed_setting_file %}` file and applies to users on your enterprise's {% data variables.product.prodname_copilot_short %} plan.
+You can prevent users from enabling bypass mode (also known as "YOLO mode") in {% data variables.copilot.copilot_cli_short %} and {% data variables.product.prodname_vscode_shortname %}. Bypass mode lets an agent run commands, access files, and fetch URLs without asking for approval. By disabling it for your enterprise, you ensure that a person reviews each of these actions.
 
-This setting blocks users from using:
+## What disabling bypass mode prevents
 
-* The `--yolo` or `--allow-all` flag
-* The `/yolo` or `/allow-all` command
-* All runtime paths that enable combined bypass mode
+The `disableBypassPermissionsMode` setting is defined in your enterprise's `{% data variables.copilot.managed_setting_file %}` file and applies to users on your enterprise's {% data variables.product.prodname_copilot_short %} plan.
 
-This setting does **not** block individual flags such as `--allow-all-tools` or `--allow-all-paths`.
+When you set `disableBypassPermissionsMode` to `"disable"`, users cannot turn on YOLO mode in either client:
+
+* In {% data variables.copilot.copilot_cli_short %}, the `--yolo`, `--allow-all`, `--allow-all-tools`, `--allow-all-paths`, and `--allow-all-urls` command-line options and the `/yolo` and `/allow-all` slash commands are blocked.
+* In {% data variables.product.prodname_vscode_shortname %}, the global auto-approve setting (`chat.tools.global.autoApprove`), also known as "YOLO mode," is turned off and cannot be re-enabled.
+
+## Disabling bypass mode for your enterprise
 
 {% data reusables.copilot.create-managed-settings %}
 1. Add the following property.