What changed
GitHub made the Copilot app generally available for assigning issues and coding tasks to cloud agents through repository workflows and reviewable pull requests.
Why it matters
Issue-driven delegation turns the tracker into an execution surface, making repository permissions, branch protection and review policy part of the agent contract.
What to do
Assign one labeled maintenance issue in a test repository, restrict write scope and require CI, code-owner review and a reversible pull request.
Caveat
General availability does not remove prompt injection, dependency, authorization or code-quality risks, and cloud execution sends repository context to the service.