Copilot CLI 1.0.84-0 lets an approved bypass prompt disable the managed sandbox for the whole session
GitHub·medium signal
Released 2026-09-04, managed sandbox sessions can now be disabled for the rest of the session from an approved bypass prompt. One approval under time pressure now removes the sandbox for every subsequent tool call, not just the command in front of you, which is a meaningfully wider grant than the prompt's wording implies. The same build fixes sandboxed `gh` picking an arbitrary account when several GitHub accounts are in the credential store.