Copilot CLI adds per-host sandbox network rules that do not replace your upstream proxy, and fixes a one-command Windows bypass

GitHub·medium signalXBlueskyLinkedInCopy link

The same 1.0.85 line adds `/sandbox` network host allow and deny rules that layer on top of a configured upstream proxy instead of replacing it, and fixes a Windows bypass where the sandbox container refused a policy-blocked write for want of a privilege and approving the bypass stopped after the permissive retry, forcing you to disable the sandbox for the whole session. `--add-dir` now rejects non-directory and inaccessible paths uniformly and aborts before session initialization rather than half-starting.