✏️ Explanatory Question
Runs inside a sandboxed GitHub Actions environment.
Has restricted, firewalled internet access.
Can only push to copilot/ branches.
Responds only to users with write access.
Draft PRs require independent review before merge.
Co-authors commits with the requester for clear attribution.