On September 24, GitHub added a Proof of Presence requirement for high-impact actions in GitHub Enterprise Cloud. In relevant cases, a managed user must interactively reauthenticate or complete an MFA challenge before the action can be completed.
The move extends GitHub's sudo mode mechanism and adds another authentication layer before sensitive actions, even when the user is already signed in.
For Enterprise administrators, the change aims to reduce the risk of an open workstation, stolen session or existing account access being sufficient to perform a critical action without another check of the user's presence.