GitHub Copilot Sandboxing is GitHub's answer to the "agent with full shell access" problem: two complementary isolation modes for running GitHub Copilot CLI agent sessions, both in public preview. Local sandboxing wraps the commands an agent runs on your machine in an OS-level sandbox powered by Mic