Under the hood
A cached org managed-policy snapshot is written into the eval sandbox so children inherit the remote-managed tier.
A new bf() helper writes a cached organization managed-policy snapshot into the eval sandbox's config directory so that eval subprocesses inherit the remote-managed policy tier. If no cached policy exists yet, it warns instead, and the child sandbox runs without the remote-managed tier.