🔹 Feature: GitHub Sandboxes
🔹 What It Does: GitHub Sandbox provides fast, cheap, isolated, and resumable cloud microVM environments so Copilot can safely run, test, and iterate on code beyond the developer’s local machine. Available alongside local sandboxes — together, they give Copilot a safe place to execute commands, interact with your code and tools, and run agentic workflows without ever touching your host.
What Is It Giving You:
✅ MicroVM-Level Isolation in the Cloud: Each Copilot session gets its own ephemeral cloud microVM with hypervisor-grade boundaries. Agentic workflows can install packages, modify files, build containers, and run services — host machine and other sessions stay untouched.
✅ Fast & Cheap to Spin Up: Lightweight microVMs start in seconds, so agentic loops aren’t bottlenecked by environment setup. Pay only for what you use.
✅ Resumable Sessions: Pause an agent run, come back later — the sandbox picks up where it left off. Long-running or interrupted tasks don’t restart from zero.
✅ Local Sandbox Companion: Standard Copilot seat includes a local sandbox built on Microsoft MXC technology — consistent isolation across macOS, Linux, and Windows. Enable with /sandbox enable in any Copilot session.
✅ Built-In Identity, Governance & Policy: Consistent enterprise controls for what Copilot can touch (filesystem, network, system capabilities). Enterprises can centrally configure and enforce sandbox policies.
✅ Foundation for Real Agentic Development: Agentic coding is interactive, stateful, and parallel — and it needs an execution layer built for that. Sandbox is that layer for Copilot, freeing devs from “but what if the agent breaks my machine?”
For everyone running Copilot agents in YOLO mode — this is the safety net that lets you stop worrying and start shipping. 🚀
🌐 https://docs.github.com/en/copilot/concepts/about-cloud-and-local-sandboxes
