GitHub is letting a language model decide which of Copilot’s shell commands, file-system accesses and URL fetches are safe enough to run without asking the developer first. The option, called assisted permissions, became generally available Monday in GitHub Copilot CLI, the GitHub Copilot app and Visual Studio Code, GitHub said in a changelog post .

Without assisted permissions, developers working with Copilot’s agent choose between answering approval prompts one at a time and granting blanket permission, which removes oversight of individual actions. GitHub’s documentation calls the new mode “a middle ground between manual approval and granting broad permissions with an allow-all option.” A model reviews each eligible request and approves the ones it judges safe in the context of the task. Anything it isn’t confident about goes to the developer, as it would under manual approval.

What the reviewer model actually sees

Existing rules are checked first.…