Domain 3 content was verified on 26 August 2026 and is current as of August 2026. This page uses GitHub Docs and the GitHub Copilot Trust Center for the suggestion pipeline, data handling, model hosting, model selection, and responsible-use limits.
GitHub Docs — Code suggestions · GitHub Docs — Inline suggestions responsible use · GitHub Copilot Trust Center
What this domain is really testing#
Domain 3 tests the path from local developer activity to an AI-generated suggestion: context collection, prompt assembly, service routing, filtering, model hosting, response handling, and human review.
Think of Copilot as a context-packaging and filtering system around LLMs, not as an editor feature that magically understands your entire repository.
The end-to-end suggestion flow#
For inline suggestions, Copilot watches the editing context in a supported IDE and offers ghost text or next edit suggestions as you type. The responsible-use documentation describes a pipeline of input processing, language model analysis, response generation, and output formatting; the code suggestions page adds that suggestions matching public code may be discarded or shown with a reference depending on policy. GitHub Docs — Inline suggestions responsible use GitHub Docs — Code suggestions
Developer types or pauses in IDE
|
v
IDE extension gathers local context
(current file, cursor area, selected/open relevant files, settings)
|
v
Prompt builder ranks and trims context to fit the model context window
|
v
GitHub Copilot service / proxy
(authentication, policy checks, content filters, public-code policy)
|
v
Model host selected for the feature/model
(OpenAI/GitHub Azure, Anthropic/AWS/GCP, Google Cloud, xAI, Azure, Fireworks, etc.)
|
v
Generated candidate suggestion
|
v
GitHub Copilot service / proxy post-processing
(harmful/offensive/off-topic filtering, public code matching when enabled, formatting)
|
v
IDE displays ghost text, next edit, alternatives, or no suggestion
|
v
Human accepts, partially accepts, edits, dismisses, or ignoresThe model does not directly read your disk. The IDE extension and Copilot service choose what to send. Selected context becomes input tokens; generated text becomes output tokens; and some models also account for cached tokens. Since 1 June 2026, current Copilot billing is per token under AI Credits, while code completions and next edit suggestions are still not billed in AI Credits. GitHub Docs — Models and pricing
Current model usage pricing
Current model usage is priced from input, output, and cached tokens converted into AI Credits. The current pricing reference uses AI Credit token rates rather than 0x-included model labels or general model multipliers. Code completions and next edit suggestions remain included. Existing annual Pro and Pro+ subscribers who stayed on request-based billing keep a request-based exception.
What context Copilot gathers#
For inline suggestions, Copilot preprocesses surrounding code at the cursor and may add snippets from open tabs. For Chat, documented context can include open files, active repository data, chat history, and optional web search. Repository indexing improves context-enriched answers for Copilot Chat and cloud agent, and indexed repositories are not used for model training. GitHub Docs — Repository indexing GitHub Docs — Prompt engineering
GitHub does not publish an exact numeric scoring formula for context priority. For exam purposes, use this practical order: explicit user-provided context first, then the active editing location, then nearby and open-file context, then broader repository or indexed context, then optional external context such as web search or MCP tools when a feature and policy allow it.
| Practical priority | Context type | Why it matters |
|---|---|---|
| 1 | Your prompt, selected code, explicit file references, or chat variables | This is the clearest signal of intent. |
| 2 | Current file and code around the cursor | Inline suggestions are primarily grounded in what you are editing now. |
| 3 | Open and relevant files or tabs | Copilot uses open files to understand nearby APIs, style, imports, and tests. |
| 4 | Chat history and instructions | Useful only when it remains relevant; stale history can mislead the model. |
| 5 | Repository semantic index or project context | Helpful for Chat and cloud agent, but retrieved context is still selective. |
| 6 | Optional web, MCP, or connected sources | Available only where enabled and allowed by policy. |
Opening relevant files and closing irrelevant ones is not superstition — it changes the context Copilot is likely to package.
Prompt assembly, tokenization, and context windows#
The prompt builder packages the request plus selected context into a tokenized model input. Tokens are not words; they are the accounting units used by models and Copilot pricing. The context window limits how much input and working context fits in one interaction, so Copilot must rank, trim, summarize, or omit excess context.
Some current Copilot models support a 1 million token context window in VS Code and Copilot CLI, but that is an extended capability, not whole-repository awareness. Larger context also consumes more tokens and more AI Credits for billable features. GitHub Docs — Supported AI models
Proxy filtering and post-processing#
The GitHub Copilot service sits between the client and the model host. GitHub’s model-hosting page states that input prompts and output completions continue to pass through GitHub Copilot content filtering systems, including public code matching when applied and mechanisms to detect and block harmful or offensive content. The supported-models page also describes filters for harmful, offensive, or off-topic content and public code matching when enabled. GitHub Docs — Model hosting GitHub Docs — Supported models
Public code matching is setting-dependent. If blocked, Copilot compares suggestions plus about 150 characters of surrounding code against public GitHub code and suppresses matches or near matches in most products. If allowed, or if block mode is unsupported, Copilot can show references with repository URLs and license information. Private repositories and non-GitHub code are not part of that public-code search, and the index refreshes every few months. GitHub Docs — Code referencing GitHub Docs — Finding matching code
Public code matching is configurable
For Copilot Business, "Blocked" is the default public-code matching policy, and "Allow" is a valid configuration that flags matching suggestions with references.
Post-processing turns candidate output into ghost text, a next-edit location, a formatted chat response, a code reference, or no suggestion. Nothing is applied until the user accepts it.
Retention, training, and sharing#
For Copilot Business and Copilot Enterprise, the verified rule to memorize is simple: code snippets are not retained after a suggestion is returned, and customer code is never used to train models. GitHub also documents that it does not use Business or Enterprise customer data to train AI models, while individual Free, Pro, Pro+, and Max interactions may be used for training unless the user disables that setting. GitHub Docs — Model training and improvements GitHub Copilot Trust Center
A fixed Copilot Chat retention period and a transport-security protocol version are outside the verified GH-300 facts used here.
Where models are hosted#
Copilot can route to models from several providers, but the Copilot service and filters remain in the path. Current OpenAI models listed by GitHub are GPT-5 mini, GPT-5.3-Codex, GPT-5.4, GPT-5.4 mini, GPT-5.4 nano, GPT-5.5, GPT-5.6 Luna, GPT-5.6 Sol, and GPT-5.6 Terra. GitHub also lists Claude, Gemini, Grok, Kimi, Microsoft MAI-Code, and Raptor mini models. GitHub Docs — Model hosting GitHub Docs — Supported models
| Provider family | Hosting summary from GitHub Docs |
|---|---|
| OpenAI | Hosted by OpenAI and GitHub’s Azure infrastructure. |
| Anthropic | Hosted across Amazon Web Services, Anthropic PBC, and Google Cloud Platform, depending on model path. |
| Gemini models hosted on Google Cloud Platform. | |
| xAI | Grok models hosted on xAI under a zero data retention API policy. |
| Microsoft | MAI-Code models served on Azure AI Foundry within GitHub’s tenant; Raptor mini is fine-tuned GPT-5 mini. |
| Moonshot / Kimi | Open-weight models hosted by GitHub/Microsoft infrastructure or Fireworks AI; prompts are not sent to Moonshot AI. |
Current supported models
The current OpenAI names to recognize are GPT-5 mini, GPT-5.3-Codex, GPT-5.4, GPT-5.4 mini, GPT-5.4 nano, GPT-5.5, and GPT-5.6 Luna/Sol/Terra. GPT-4o and GPT-4.1 are not in the current supported-models list.
Auto, base, and LTS models#
Auto model selection is a routing system that considers system health, availability, task complexity, model policies, subscription type, data-residency restrictions, and FedRAMP-compliance restrictions. It is generally available in Copilot Chat on GitHub.com and VS Code, Copilot CLI, cloud agent, and the GitHub Copilot app. GitHub Docs — Auto model selection
For Copilot Business and Enterprise, a base model is the default model Copilot uses when no other models are enabled. A new base model is automatically enabled within 60 days after designation, giving administrators time to update IDE extensions. An LTS model is supported for one year from designation so organizations can build around a stable target. On 18 March 2026, GitHub designated GPT-5.3-Codex as both the base model and the LTS model. GitHub Docs — Base and LTS models
Base and LTS model: GPT-5.3-Codex
GPT-5.3-Codex is both the base model and the LTS model. The designation date is 18 March 2026, and Business/Enterprise administrators get a 60-day upgrade window before the base model is automatically enabled.
Limitations you must be honest about#
Copilot suggestions are probabilistic. They can be plausible and wrong, syntactically valid but semantically broken, biased toward common patterns in training data, stale relative to new libraries or APIs, or inconsistent between runs. The responsible-use pages call out hallucination, inaccurate code, security risks, public-code matches, language-quality differences, and reduced quality when too much context cannot fit into the model call. GitHub Docs — Inline suggestions responsible use GitHub Docs — Chat responsible use
No current Copilot feature should be treated as omniscient whole-repository awareness. Repository indexing and larger context windows improve retrieval, but Copilot still sees a selected slice of context and generates likely output from it. The safe workflow is to review, test, scan, and adapt every important suggestion before it becomes production code.
The exam answer is usually: Copilot can accelerate the work, but the developer remains responsible for correctness, security, licensing, and fit.
Check yourself#
Question 1
In a typical inline suggestion, which component decides what local context becomes part of the model request?
A) The model reads the entire repository directly
B) The IDE extension and Copilot prompt-building service select and package context
C) The public-code index sends private code to the model
D) The user must manually paste every dependency
Show answer
Answer: B. Copilot gathers selected context such as surrounding code and open files, then packages it into a prompt that fits the model context window.
Question 2
What happens when suggestions matching public code are allowed?
A) Matching code is always blocked silently
B) Matching suggestions can be shown with references to public repositories and license information where found
C) Private repositories are added to the public-code index
D) The model is retrained on the accepted suggestion
Show answer
Answer: B. Blocking versus allowing is policy-dependent. Allowed matches can be annotated with references; blocked matches are suppressed in supported products.
Question 3
Which statement is correct for Copilot Business and Copilot Enterprise?
A) Customer code is used for model training by default
B) Code snippets are retained after each suggestion for model improvement
C) Code snippets are not retained after suggestion, and customer code is not used for training
D) Only public repositories receive data protections
Show answer
Answer: C. For Business and Enterprise, the verified study fact is no post-suggestion code-snippet retention and no training on customer code.
Question 4
Which model fact is current for 26 August 2026?
A) GPT-4o is the Copilot base model
B) GPT-4.1 is the Copilot LTS model
C) GPT-5.3-Codex is both the base model and the LTS model
D) There is no base model concept for Business or Enterprise
Show answer
Answer: C. GitHub designated GPT-5.3-Codex as both base and LTS on 18 March 2026.
Question 5
Why can Copilot give different answers to the same prompt?
A) LLM output is probabilistic and context-dependent
B) Copilot always searches the live internet for every answer
C) The public-code filter writes new code into the repository
D) Repository indexing guarantees complete whole-repository awareness
Show answer
Answer: A. LLMs are probabilistic, and changes in prompt wording, open files, context, model choice, or system state can change the result.
