GitHub Copilot app adds local sandboxing for agent sessions
GitHub’s Copilot app now supports per-project local sandboxing (public preview): filesystem allow/deny lists, outbound/local network rules, and optional Git/GitHub CLI credentials. It’s off by default; turn it on in project settings or with /sandbox on, and sessions fail closed if the OS can’t enforce the policy.
