NEWS BRIEF
What happened
GitHub has announced general availability of local sandboxing for Copilot. Its description covers policy-based limits on filesystem, network, and credential access for agent-initiated tools. It also describes enterprise-managed settings and notes that model execution and tool isolation are separate concerns.
What the announcement does not establish
The protections depend on the supported environment and configured policy. Sandboxing should be assessed alongside repository trust, approval requirements, and the permissions of any connected service.
Primary source: GitHub: original announcement (2026-10-07). Sources checked November 3, 2026.