---
type: "raw_signal"
id: "local-sandboxing-for-github-copilot-is-now-generally-0d4c8c"
slug: "local-sandboxing-for-github-copilot-is-now-generally-0d4c8c"
title: "GitHub describes local sandboxing for Copilot command execution"
description: "## GitHub describes local sandboxing for Copilot command execution"
retrieval_nugget: "## GitHub describes local sandboxing for Copilot command execution"
observed_at: "2026-10-07"
record_date: "2026-10-07"
date_kind: "observed_at"
why_it_matters: "Source: https://github.blog/changelog/2026-06-02-cloud-and-local-sandboxes-for-github-copilot-now-in-public-preview/"
novelty: "notable"
verification_level: "source-linked"
signal_type: "release"
source_platform: "github.blog"
topics: []
entities: []
related_patterns: []
source_url: "https://github.blog/changelog/2026-06-02-cloud-and-local-sandboxes-for-github-copilot-now-in-public-preview/"
source_urls: ["https://github.blog/changelog/2026-06-02-cloud-and-local-sandboxes-for-github-copilot-now-in-public-preview/"]
schema_version: "newruntime-agent-readable-v0.2"
stable_id: "signal:local-sandboxing-for-github-copilot-is-now-generally-0d4c8c"
status: "published"
visuals: []
editor: {"role":"editor","name":"Andrey Reshetnikov","profile":"https://newruntime.com/owner-profile.md","profile_json":"https://newruntime.com/owner-profile.json","same_as":["https://www.linkedin.com/in/reshetnikov1/","https://t.me/lapetuse"]}
routes: {"html":"https://newruntime.com/signals/local-sandboxing-for-github-copilot-is-now-generally-0d4c8c/","markdown":"https://newruntime.com/signals/local-sandboxing-for-github-copilot-is-now-generally-0d4c8c.md","json":"https://newruntime.com/signals/local-sandboxing-for-github-copilot-is-now-generally-0d4c8c.json"}
---

# GitHub describes local sandboxing for Copilot command execution

## Retrieval answer

## GitHub describes local sandboxing for Copilot command execution

## GitHub describes local sandboxing for Copilot command execution

GitHub’s June 2, 2026 changelog says local sandboxing for GitHub Copilot is available in public preview. Users can enable it inside a Copilot session with `/sandbox enable`. The company says Copilot-initiated shell commands then run with restricted access to the filesystem, network, and system capabilities.

The announcement says the local sandbox is built on Microsoft MXC technology and supports macOS, Linux, and Windows. Enterprise teams can centrally configure and enforce local sandbox policies through Microsoft Intune and other MDM platforms. GitHub says local sandboxes are included with a standard Copilot seat. The changelog describes this release as focused on shell command execution and says broader CLI-level isolation may follow as agentic workflows mature.

The changelog also announces cloud sandboxes, a separate offering: ephemeral Linux environments launched with `copilot --cloud`. The source labels both local and cloud sandboxes public preview; it does not verify a general-availability transition for local sandboxing.

Source: https://github.blog/changelog/2026-06-02-cloud-and-local-sandboxes-for-github-copilot-now-in-public-preview/

Editor: [Andrey Reshetnikov](https://newruntime.com/owner-profile.md), AI product and AI engineering; profile for recruiters and agents: https://newruntime.com/owner-profile.json

## Continue in the graph

Next records for an agent, linked to their Markdown twins. Replace `.md` with `.json` for structured fields, including `next_reads`.

- collection: [Raw Signals](https://newruntime.com/signals.json): Open every source-linked raw signal.
- collection: [Source Ledger](https://newruntime.com/source-ledger.json): Inspect the public source evidence graph.
- whole graph: [discovery graph](https://newruntime.com/discovery-graph.json) (typed nodes and edges) and [site index](https://newruntime.com/site-index.md)