GitHub Copilot local sandboxing is now generally available
GitHub Copilot now offers local sandboxing in its CLI, app and supported VS Code sessions, with controls over agent access to files, networks and credentials.
Product
Microsoft Copilot and GitHub Copilot are AI-powered tools designed to assist users with tasks ranging from coding and system control to general productivity. Currently, Microsoft offers a unified Copilot app that integrates consumer and enterprise features, featuring Home, Code, and Autopilot tabs with secure access to Microsoft 365 cloud environments. The product ecosystem is evolving its pricing models, incorporating usage-based billing alongside traditional user subscriptions. In October 2026, GitHub made local sandboxing generally available in its CLI, app, and VS Code sessions using Agent Host, allowing organizations to restrict agent-run commands from accessing sensitive files, networks, and credentials. Simultaneously, Microsoft updated Copilot with Hybrid Intelligence, combining local and cloud AI models to grant the assistant access to local PC files and deeper control over the Windows operating system. A new search experience arriving in the fall of 2026 enables quick actions like toggling dark mode and sending text messages. However, the platform faces scrutiny as reports reveal that human contractors hired to evaluate image generation quality are being exposed to explicit user images and prompts. Additionally, Microsoft recently rewrote the Copilot runtime in Rust using AI agents for 120,000 dollars.
7 stories · Updated
GitHub Copilot now offers local sandboxing in its CLI, app and supported VS Code sessions, with controls over agent access to files, networks and credentials.
Microsoft announced updates to its Copilot AI system at a Windows and Surface event, granting it access to local PC files and operating system actions.
Human contractors hired to improve Microsoft's Copilot AI chatbot review explicit user images and prompts to evaluate generation quality.
Microsoft is rolling out a unified Copilot app featuring AI agents and coding tools while introducing usage-based billing models.
Microsoft converted 430,000 lines of TypeScript into 800,000 lines of production Rust using AI agents for $120,000 in token costs.
A newly disclosed zero-click remote code execution flaw named Plugin4Shell affects major AI coding agents, exposing enterprise users to supply-chain attacks.
GitHub Copilot is changing its billing model. It's moving from a flat subscription to a token-based system, potentially raising costs for some users.