GitHub describes local sandboxing for Copilot command execution
GitHub’s June 2, 2026 changelog says local sandboxing for GitHub Copilot is available in public preview. Users can enable it inside a Copilot session with /sandbox enable. The company says Copilot-initiated shell commands then run with restricted access to the filesystem, network, and system capabilities.
The announcement says the local sandbox is built on Microsoft MXC technology and supports macOS, Linux, and Windows. Enterprise teams can centrally configure and enforce local sandbox policies through Microsoft Intune and other MDM platforms. GitHub says local sandboxes are included with a standard Copilot seat. The changelog describes this release as focused on shell command execution and says broader CLI-level isolation may follow as agentic workflows mature.
The changelog also announces cloud sandboxes, a separate offering: ephemeral Linux environments launched with copilot --cloud. The source labels both local and cloud sandboxes public preview; it does not verify a general-availability transition for local sandboxing.