Copilot generalizes local sandboxes based on MXC
Agents' tools can be isolated by native Windows, macOS and Linux controls.
General availability
Facts, analysis and limits
Verified facts
- General availability covers Copilot CLI, the Copilot application and VS Code sessions using Agent Host.
- Policies restrict files, networking and credential access; the organization can impose rules that cannot be weakened.
- The sandbox concerns the execution of the tools, regardless of the model used, and does not add any Copilot cost.
What changes
A border of execution becomes central when the agents act locally.
Practical implication
Enable a restrictive repository policy and test denied access to secrets and the network.
Availability
Belgium/EEA: regional scope is not specified in the sources reviewed; check the account, contract and processing region before use.
Limits and uncertainty
No independent product testing or account-access check was performed for this entry.