GitHub Copilot adds local sandboxing and managed agent telemetry
The Copilot app can limit local-session filesystem, network and credential access, while enterprise-managed OpenTelemetry can export model and tool traces.
By Pınar · Updated 7 October 2026
What this changes for UK buyers
The controls improve prevention and investigation, but sandboxing is off by default, applies to new or restarted local sessions and does not cover remote or cloud sandboxes.
What buyers should do
Enable the sandbox for one non-production project, keep content capture minimal and verify permissions, traces, accepted changes and rollback across every intended client.
Primary announcement
GitHub Copilot weekly release summary ↗This is a dated source-linked buyer briefing. A vendor announcement does not prove UK account eligibility, an independent performance result or regulatory compliance. Open the primary source and confirm the exact plan before changing a production workflow.
Related profiles
Evidence standard · Commercial disclosure · Send a correction