Evidence record / github-copilot-cli

A dated record of one change, kept so the writing that cites it can be checked. Compiled from the sources listed below by the research run, not written for reading. The judgment lives in the signals and issues that cite it, below.

2026-10-24-github-copilot-cli-local-network-access-defaults-on-and-macos-gains-a-narrower-localhost-exception

Local-network access defaults on, and macOS gains a narrower localhost exception. 1.0.100 lets sandboxed commands reach localhost and private-network services by default. 1.0.101 adds direct localhost TCP connections on macOS when local access is enabled and no host filters apply. The profile’s default-off local-network advice and its absolute proxy-active macOS self-connect warning are therefore superseded for these released cases. Current docs still list allowLocalNetwork=false and still give the older macOS explanation. The release does not promise unrestricted localhost connectivity with host filters present.

Channel: tagged-release. Half: both. Date: 2026-10-19.

Operator consequence: On 1.0.103, explicitly configure the intended local-network policy and test both a needed dev server and an unintended local/private service. A successful development loop is now possible in a documented case that previously needed workarounds, but enabling the sandbox is not a decision about which databases or local admin services it may reach. Preserve host filtering and platform-specific containment tests. Do not infer that every network restriction disappeared or that the documented Windows direct-connection limitation was repaired.

Receipt

Finding metadata

Run: 2026-10-24-weekly-digest-2026-10-13_2026-10-24-frontier-v0

Finding ID: 2026-10-24-github-copilot-cli-local-network-access-defaults-on-and-macos-gains-a-narrower-localhost-exception

Profile citations

Source links

Primary links, including exact changelog lines when available.

Versioned source: run artifact