This is our Data Loss Prevention (DLP) feature working as intended. To protect intellectual property, tenant administrators can restrict the ability to copy code out of the environment.

If you believe you need this access, please contact your Tenant Admin. They can enable copy/paste for your role via Role Permissions → can_copy_paste.

All clipboard attempts (allowed or blocked) are logged in the activity feed for audit purposes.

The Panopticon monitors active typing and IDE focus. It aggregates keystrokes into "Active Sessions." If a developer is idle for too long, the session pauses automatically.

Payroll uses these mathematically verified "Active Hours" rather than manual timesheets. Timesheets are accessible from Workspaces → Payroll.

Admins review and approve timesheets before export.

The Vault allows administrators to store sensitive environment variables (API keys, database credentials, tokens) that are injected into the IDE session without exposing them to developers.

• Secrets are encrypted at rest (AES-256).
• Developers cannot view secret values — they can only use them in code.
• Secrets are never written to the file system or logged.

Set up via Workspaces → Select Project → Settings → Vault.

The AI Copilot in Nexus provides context-aware code suggestions as you type. It analyzes the surrounding code, file context, and project structure to offer relevant completions and snippets.

• Tab to accept: Press Tab to accept a suggestion.
• Esc to dismiss: Press Esc to ignore a suggestion.
• Multi-line: Copilot can suggest entire functions, classes, or boilerplate.

Copilot suggestions are generated server-side and never leave the WorkMA platform.

The Sentinel AI automatically reviews merge requests for:

• Security vulnerabilities — SQL injection, XSS, hardcoded secrets.
• Code quality — complexity, duplication, naming conventions.
• Best practices — error handling, input validation, test coverage.

Findings are posted as PR comments and visible in the workspace dashboard. You can configure which rules are enabled in Admin → Sentinel Settings.