← All needs

Copilot Harness approval system is dangerous

Type: Bug With the new "Copilot" harness, I only gave a single approval for a single command and the agent was able to run all the commands it wanted after that, without asking for any new approval. This is not acceptable. With the new "Copilot" harness, I only gave a single approval for reading the content of a fetched web page and the agent was able to fetch and read any web page it wanted after that, without asking for any new approval. This is not acceptable. The "Local" harness was able to follow a simple spec-based workflow (~80 lines, simple) and produce an analysis document (~100 lines, average). The "Copilot" harness did not follow anything and replied about 3 lines in the chat after taking more time and spending more credits. VS Code version: Code 1.142.0 (6d62b1d5dace93a33b3a6d3eca1317bd5e15bcb1, 2026-10-15T03:02:17Z) OS version: Windows_NT x64 10.0.26100 Modes: