The GitHub Copilot app can sandbox local sessions per project

Per-project policy covers extra read/write, read-only and denied folders, outbound and local network, and whether Git and GitHub CLI credentials are passed in.⁵ If the OS cannot enforce the policy, the shell fails instead of running unsandboxed. It is off by default, public preview, and configured separately from Copilot CLI; /sandbox on applies it to a running session.

Relevant to: Teams letting an agent run shell commands against a working tree that also holds credentials.