# Client-code AI permission review

Record the proposed material, recipients, purpose and authorised client decision, with a clean synthetic alternative.

A worked fictional permission decision plus an independently written toy example. No actual client consent or legal conclusion is supplied.

Source: https://aona.ai/resources/guides/client-source-code-ai-nda/
Sources checked: 2026-09-21

## The permission record should answer four questions

### Material

What client information would leave?

Note: Include derived and automatic context

### Recipient and purpose

Which service/account and task are proposed?

Note: Follow the relevant data path

### Authority

Who can decide under the client’s process?

Note: This worksheet does not grant permission

| Fictional case | Scope or decision | Meaning |
| --- | --- | --- |
| Requested material | A function from SYNTHETIC_CLIENT_PORTAL | Original client code remains withheld |
| Proposed recipient | SYNTHETIC_AI_SERVICE and model provider | Actual recipients would need review |
| Authority | Fictional client contract owner | Project request alone is insufficient in this exercise |
| Illustrative outcome | Use the independent toy example only | No real client consent is supplied |

## Review checklist

- [ ] Identify the governing client terms
  Have the responsible owner resolve permission and confidentiality questions for the actual contract.
- [ ] Record the authorised decision
  Do not treat a generic template or colleague’s assurance as a contract amendment.
- [ ] Use an independent synthetic reproduction where possible
  Removing names from the original code may not remove its confidential substance.

## Included example files

- README.md
- permission-review.md
- clean-example.py
- synthetic-cases.json
- clean-reproduction-review.md
- fictional-permission-case.md

## Source references

- USPTO: Guidance on use of AI-based tools: https://www.govinfo.gov/content/pkg/FR-2024-04-11/html/2024-07629.htm (2026-09-21)

Use the worksheet within the relevant legal, contractual and technical scope. It is not a certification or a record of an installed-product test.