GitHub gives admins a dedicated policy for Copilot app access — and pushes managed settings into the cloud agent

Three 27 July 2026 changelog entries move Copilot governance from convention to control: a dedicated policy for managing Copilot app access, enterprise managed settings that now apply to both the Copilot app and the Copilot cloud agent, and improved OpenTelemetry configuration plus model management in the JetBrains plugin. Claude Opus 5 had become selectable in Copilot three days earlier, on 24 July 2026.

What it means Once a coding agent runs in the cloud under enterprise settings, the admin policy surface IS the security boundary — and the telemetry configuration is what makes any of it auditable afterwards.