[sgbeal]

> Am I thinking correctly

No, you're not. Company time + company resources = company property. Company project = company property. No code within any given company belongs to one person, but belongs to (spoiler alert!) the company.

If you want to develop voodoo to make you irreplaceable, do it in the context of your own projects, with your own resources, on your own time.

PS: there may well be legal reason that they require the prompts. e.g. to ensure that you're not injecting materials owned by someone else. They are perfectly justified in demanding access to every byte which goes into their software, documents, infrastructure, etc.