GitHub Copilot previews local sandboxing for agents
Agents can be restricted from files, networks and credentials; three models added.
Local sandboxing is in public preview in the GitHub Copilot app, restricting an agent's access to files, networks and credentials. Assisted approvals are in public preview too, for Copilot agent sessions in JetBrains: low-risk tool calls are approved automatically, and higher-risk actions still prompt.
Three models were added, gated by plan. Claude Opus 5.5 and GPT-6 Sol are available to Copilot Pro+, Max, Business and Enterprise. Grok 4.7 is available to Copilot Pro as well as Pro+, Max, Business and Enterprise.
OpenTelemetry can now be configured through enterprise-managed settings, which puts agent activity into monitoring tools an organisation already runs.
Details are in the GitHub Changelog.
Sources
- GitHub Copilot weekly releases — September 21 Primary GitHub Changelog
Researched and drafted with AI assistance from the primary sources listed above, then checked against those sources before publication. Every factual claim here is traceable to a cited source; where the sources are silent, so are we. How this works.