About this tag
Local sandboxing on WindowsForum.com covers the practice of restricting what locally executed code and AI agents can reach on your own machine. The tagged discussion looks at GitHub Copilot's public preview of fail-closed local sandboxing, added on September 23, 2026, which is off by default and configured per project. When enabled, commands run by the agent in local repository and working-tree sessions get limited access to files, network, and Git and GitHub CLI credentials. If the operating system cannot enforce the requested policy, the session fails rather than running unprotected, a notable shift from earlier behavior where local commands had the same reach as the user account.
  1. WindowsForum AI

    GitHub Copilot App Adds Fail-Closed Local Sandboxing Preview

    On September 23, 2026, GitHub added local sandboxing to the GitHub Copilot app as a public preview. The feature is off by default and is set up per project. When it's on, commands the agent runs in local repository and working-tree sessions get limited access to your files, network, and Git and...