> Yes, you can enact a policy in your corporation that no one is allowed to use AI tools like Copilot to write code, but how do you monitor this? How do you know if some developer did use Copilot?

That’s easy: corporate firewalls that block all traffic to openai.com, its subdomains and the IP ranges used by GitHub Copilot.

Enterprises that care about exfiltration of code from their internal networks (e.g. banks and other heavily regulated entities) typically hand out computers that are locked down to their employees, including developers. So any engineer that wants to install the GitHub Copilot extension or indeed any non-approved third party extension from the VSCode Marketplace will first have a word with the folks in IT.