GitHub makes local sandboxing for GitHub Copilot generally available
Overview
GitHub says local sandboxing for GitHub Copilot is now generally available in GitHub Copilot CLI, the GitHub Copilot app, and VS Code sessions using Agent Host.
Copilot-initiated tools and commands run with restricted access to the filesystem, network, and credentials, under policies that developers or their organizations set. GitHub says the feature is included with GitHub Copilot at no additional cost.
Enterprise administrators can use managed settings to require sandboxing and enforce policies developers cannot weaken. A later changelog entry says they can also set forceRemoteSettingsRefresh to true so supported clients fetch current policy at startup instead of using a cached one, and clients that cannot confirm current policy fail closed. The sandbox managed settings key can require a minimum client version, so users on older Copilot clients must update before they can resume using Copilot.
Separately, GitHub posted on X that Copilot will soon route tasks automatically to a local model when that is most suitable, to help users save on AI credits, as part of Project HydraFusion. The post gives no release date for the routing feature.
Written by AI from the articles below · updated Oct 13, 1:15 PM ET
Check the sources:
Developments
3 developments
- Oct 13, 11:20 AM ET · 1 articleGitHub adds forced settings refresh and minimum client version enforcement for Copilot enterprise managed settingsGitHub Copilot Changelog: GitHub Copilot adds forced settings refresh and minimum client versions for enterprises
- Oct 7, 2:12 PM ET · 2 articlesGitHub bringing local models and sandboxed tools to GitHub CopilotGitHub: GitHub Copilot adds local models and sandboxed tools for developer control
- Oct 7, 11:46 AM ET · 2 articlesLocal sandboxing for GitHub Copilot now generally availableGitHub Copilot Changelog: GitHub Copilot local sandboxing is now generally available
Article timeline
The articles in this story. Times are ET.
- GitHub Copilot ChangelogOfficialGitHub Copilot adds forced settings refresh and minimum client versions for enterprises
AIGitHub lets enterprise administrators set forceRemoteSettingsRefresh to true so supported GitHub Copilot clients fetch current managed settings at startup instead of using a cached policy. Clients that cannot confirm current policy fail closed. The sandbox managed settings key can also require a minimum client version, forcing users on older Copilot clients to update before they can resume using Copilot.
- GitHub Copilot ChangelogOfficialGitHub Copilot adds Claude Haiku 5.5, local sandboxing, and a separate-account option.
AIGitHub makes Claude Haiku 5.5 available to Copilot Pro, Pro+, Max, Business, and Enterprise users. Local sandboxing, which limits agents' access to files, networks, and credentials, is now generally available in Copilot CLI, the Copilot app, and VS Code sessions using Agent Host, at no extra cost. The Copilot app now lets users sign in with separate GitHub accounts for their Copilot license and their repositories.
GitHub@githubOfficialGitHub Copilot local sandboxing becomes generally availableAILocal sandboxing for GitHub Copilot is now generally available. It lets Copilot run commands in an isolated environment with controlled access to files, networks, system capabilities, and credentials. Enterprise teams can also centrally manage policies, and the feature is available in GitHub Copilot CLI, the GitHub Copilot app, and @code.
GitHub@githubOfficialGitHub Copilot adds local models and sandboxed tools for developer controlAIGitHub is bringing local models and sandboxed tools to GitHub Copilot, giving developers more choice and control over their workflows. The post links to a page with further details, but it does not specify particular models, features, or availability.
GitHub@githubOfficialGitHub Copilot to route tasks to local models automaticallyAIGitHub announced that Copilot will soon automatically route tasks to a local model when it is most suitable. The feature is part of Project HydraFusion and is intended to help users save on AI credits.

- GitHub Copilot ChangelogOfficialGitHub Copilot local sandboxing is now generally available
AIGitHub says local sandboxing for GitHub Copilot is now generally available in GitHub Copilot CLI, the GitHub Copilot app, and VS Code sessions using Agent Host. Copilot-initiated tools and commands run with restricted access to the filesystem, network, and credentials, under policies set by developers or their organizations. The feature is included with GitHub Copilot at no additional cost.
Heat trend
Not enough continuous observations to show a trend yet.