Machine-readable
district AI policy.

Why a machine-readable AUP?

Today, district AI policies live in 20-page PDFs. An AUP makes the operational subset of that policy machine-readable: an LMS reads one JSON document at submission time and resolves 'is this allowed?' in O(1). The PDF still exists; the AUP is the operational alias.

A canonical example

{
  "aup_version": "0.1",
  "policy_id": "lincoln-district-42-2026-ai-aup",
  "policy_name": "Lincoln High District 42 — Classroom AI AUP",
  "version": "1.2.0",
  "effective_at": "2026-01-15T00:00:00Z",
  "scope": {
    "type": "district",
    "institution_id": "lincoln-high-district-42",
    "grade_bands": ["K-5", "6-8", "9-12"]
  },
  "permitted_use": {
    "permitted_roles": ["edit", "cite_check", "translate", "tutor_dialog"],
    "assistance_extent_max": "minor"
  },
  "prohibited_use": {
    "prohibited_roles": ["draft", "image_generation"]
  },
  "disclosure_requirements": {
    "required_when": "when_used",
    "required_prompt_evidence_mode": "hashed",
    "signature_required": true,
    "teacher_acknowledgment_required": true,
    "artifact_hash_required": true
  },
  "vendor_requirements": {
    "requires_tutor_card": true,
    "required_compliance": ["ferpa", "coppa"],
    "required_content_filter_strength_min": "strict",
    "retention_days_max": 90,
    "prohibits_third_party_data_sharing": true,
    "prohibits_model_training_on_student_data": true
  },
  "parent_notification": {
    "notification_level": "at_enrollment",
    "parent_consent_required": true,
    "consent_age_threshold": 13
  },
  "published_by": {
    "name": "Lincoln High District 42 — Office of the Superintendent",
    "role": "district"
  },
  "published_at": "2026-01-08T15:30:00Z"
}