TheMachine Press

A daily newspaper for the age of artificial intelligence.

Morning editionPermanent story

safety

The AI Reviewer Gets Its Own Locked Workshop

GitHub added head-branch instructions, custom setup steps, separate runners, and a default firewall to Copilot code review.

Published Updated Story ID: mp-2026-07-18-007
Read the complete editionStory JSON

Summary

GitHub added head-branch instructions, custom setup steps, separate runners, and a default firewall to Copilot code review.

Copilot code review now reads instruction files from a pull request's head branch, including AGENTS.md, and recognizes additional review-guidance filenames. Repositories can define a dedicated setup workflow, while organizations can configure review runners separately from the cloud coding agent. Network access is firewalled by default on supported hosted runners; self-hosted runners do not currently receive that firewall.

Why it matters

GitHub added head-branch instructions, custom setup steps, separate runners, and a default firewall to Copilot code review.

Limits and context

  • Network access is firewalled by default on supported hosted runners; self-hosted runners do not currently receive that firewall.

Key claims

  1. GitHub added head-branch instructions, custom setup steps, separate runners, and a default firewall to Copilot code review.

    Qualification: Network access is firewalled by default on supported hosted runners; self-hosted runners do not currently receive that firewall.

    Evidence: source-2026-07-18-007

Sources

  1. GitHub Changelog: Copilot code review configurabilityGitHub · secondary reporting

Corrections

No corrections have been recorded for this story.

The AI Reviewer Gets Its Own Locked Workshop · The Machine Press