GitHub has added enterprise-managed sandbox policies to GitHub Copilot for JetBrains, giving administrators centralized control over how agentic commands can access local resources. The controls are in public preview and are designed for organizations that want consistent restrictions across developer environments.
The preview can govern sandbox enablement, filesystem and network access, proxy configuration, developer-tool access and macOS Keychain access. Managed restrictions override user settings, which makes the update materially different from a developer choosing a local sandbox configuration for themselves.
The same JetBrains release adds cross-file jumps for next-edit suggestions, reusable global project context in chat and a public-preview connection between Copilot CLI sessions and IDE context through /ide. GitHub also reports reliability fixes across MCP servers and agent sessions, including better handling of tool execution and session state.
The governance controls are in public preview rather than generally available. The release adds a centrally enforceable security boundary for JetBrains agent workflows, but it does not establish that every Copilot workflow is fully isolated or risk-free. Enterprises still need to define appropriate permissions, network rules and review requirements for agentic development.