7.1.2. Ownership and Limitations of Outputs
💡 First Principle: GitHub's terms say GitHub does not claim ownership of your inputs or of Copilot's output — a disclaimer, not a grant of ownership to you — and they put responsibility for using that output on you. Neither point erases the limitations: output may resemble public code, may be imperfect, and you remain responsible for verifying and for any IP considerations.
Key facts the exam expects:
- GitHub claims no ownership of the output — the terms state "GitHub does not claim ownership of your Input or Output"; they do not assign ownership to you. Whether anyone holds rights in a given snippet is a question of law, and you retain any ownership you already have in your inputs.
- Limitations remain — because output is generated probabilistically, it can be incorrect, insecure, or (rarely) resemble existing public code. Who holds rights in the output says nothing about correctness or freedom from all IP concerns.
- IP indemnity — on Business and Enterprise plans, GitHub offers IP indemnity for suggestions, contingent on having the duplication-detection (public-code matching) filter enabled. That's a concrete tie between a safeguard and a protection.
- Responsibility stays with you — consistent with Phase 3, accountability for what's committed and shipped remains the developer's and organization's.
💡 Key Point: Responsibility doesn't hinge on ownership. The terms make you responsible for reviewing, testing and validating output before use, and for deciding whether your use needs a third-party license.
⚠️ Exam Trap: "Because Copilot generated it, there are no IP or quality concerns" is wrong. GitHub's no-ownership position doesn't equal guaranteed originality or correctness; the public-code filter and review exist precisely because resemblance and errors are possible. And IP indemnity on Business/Enterprise depends on enabling the matching filter.
Reflection Question: If GitHub does not claim ownership of Copilot's output, why are you still responsible for it, and what condition must a Business/Enterprise customer meet to receive IP indemnity?
