VS Code 1.130 lets the model judge risk before an agent tool call asks for approval

VS Code 1.130, released July 22, 2026, adds opt-in Assisted Permissions: the language model rates the risk of each proposed agent tool call, letting low-risk calls run autonomously while uncertain ones still route to the user for approval. The release also extends the Agent Host with worktree isolation across Claude and Codex harnesses and adds aggregate AI credit-usage tracking for Copilot business plans.

What it means A shipping example of an LLM risk-prefilter layered ahead of hard approval gates — the pattern agent-tooling teams are converging on.