Copilot CLI prereleases extend sandbox network policy and delegated approvals
GitHub's Copilot CLI 1.0.108 prereleases reload local MCP denial paths after directory changes. The later 1.0.109-1 prerelease adds IPv4 and IPv6 CIDR allow-or-deny rules, fixes ACP preToolUse `ask` handling so the ACP client can decide, and adds Fable 5.2 plus path-setting environment variables.
Why it matters: Directory, address and delegated approval policy all sit on the same sandbox authority boundary. The later prerelease materially widens what operators can constrain while making the client—not an implicit fallback—the decision point for `ask` results.