GitHub Copilot assisted permissions are generally available: an LLM classifies command, path and URL requests and auto-approves the clearly safe ones
A mode between approving every step and allowing everything, which administrators can make the default.
// Key points
- In assisted mode, an LLM evaluates Copilot's requests to run a command, access a file system path or open a URL; requests classified as clearly safe proceed automatically and the rest still need approval.
- It is generally available in Copilot CLI, the Copilot app and Visual Studio Code.
- Enterprise administrators can block Allow All while keeping Assisted, disable Assisted separately, and set the default mode for new sessions; if the default is unavailable, sessions start with manual approval.
Builder's takeApproval fatigue is a risk in itself, and a model doing the first pass beats people clicking "yes" by reflex. But it is a probabilistic call. My setup: make Assisted the team default, block Allow All, and pair it with logs like the Claude Code safety-layer events from October 21, then spot-check what was auto-approved so the classifier does not become a black box no one reads.
// Background · from #Coding agents
Full timeline →- Oct 28 GitHub Copilot adds server-to-server authentication: call the Copilot SDK with a GitHub App installation token, no signed-in user required
- Oct 28 Claude Code 2.1.311 and 2.1.312: standard-context sessions over 200K tokens now compact and continue, and hooks are capped at 24 concurrent per session
- Oct 27 GPT-6.1 Terra arrives in GitHub Copilot at provider list pricing, enabled automatically under the default model policy