The bureau’s policies restore the no-action letter and sandbox designation, but feature some tweaks aimed at correcting past “shortcomings.” ...