GitHub Copilot App Adds Local Sandboxing to Limit Unintended Command Impact

GitHub Copilot's local sandboxing, now in public preview, restricts an agent session's filesystem access, network connectivity, and Git/GitHub credentials to reduce the blast radius of unintended commands, configurable per project or via a /sandbox command.