Capstone Brief — Institutional AI-Use Guideline v0.1

Handed out in Session 1. This is the destination; everything in the course feeds it.

What you will leave with

By Wednesday morning your team ships a draft institutional AI-use guideline (v0.1) for your department or faculty:

• ≤ 2 pages. Length is a bug. If it can't be taught to first-years in ten minutes, it won't govern anything.
• Nine components (7 required + 2 optional): scope & definitions · principles · permission architecture (three lanes) · disclosure standard · instructor AI-use disclosure (4b, new) · integrity procedure · data & privacy rules + platform governance (PDPA-mapped) · ownership & review + monitoring metrics · roles, infrastructure & funding (Component 8, optional).
• Version block on page one: v0.1 · named owner · review date ≤ 12 months out.
• Red-team tested: attacked by another team in four personas; top three findings patched; the rest logged in a v0.2 backlog.
• Its own AI-use disclosure at the foot. A policy about AI transparency that hides its own AI use is dead on arrival.

Plus a personal 7/30/90-day action plan with a named ally, dates, and a kill criterion ("I will know this failed if ___ by ___").

How each session feeds it

Session	You produce	It becomes
1	EAI-CMM baseline · Threat/Gift matrix	Your measured starting point · the risk/opportunity inventory the guideline must answer
2	Ethics triage rankings · case memo	The principles component · severity logic for the integrity procedure
3	Disclosure template · detector position	Components 4 & 5, with the Patterns citation attached
4	Verification log · two working workflows	The staff-diligence norm — staff disclose too
5	Redesign sheet · tutor prompt · policy paragraph	The permission architecture · course-level layer of the policy
6	Maturity scan · gap analysis · mirror test · drafting brief	The build spec, with instructor-disclosure symmetry and infrastructure requirements. No brief, no draft.
7	Guideline v0.1 · EAI-CMM delta · action plan	The capstone, shipped

Portfolio (six artifacts, kept by you)

1. EAI-CMM baseline + retake with delta
2. Verification log (≥3 rows per workflow)
3. Assessment redesign sheet
4. Guardrailed-tutor prompt + break-test note
5. Guideline v0.1 with red-team backlog
6. 7/30/90 action plan with kill criterion

Assessment

Formative throughout (nothing graded before S7). Session 8 (Thursday 3 Sep · 11.00 am–1.00 noon): present artifacts 5–6 against the summative rubric (five criteria, max 20; pass ≥ 12, distinction ≥ 17; one "Ship It" award for the plan the panel would fund tomorrow).

Ground rules

• Bring one real course (syllabus + assessments). No hypotheticals — every artifact must be deployable the Monday after.
• Teams of 4–5, mixed discipline, fixed for all three days. Your table is your drafting team.
• Working account on at least one frontier AI assistant, verified at check-in.

Axiom A7: policy is a product. Perfect is what institutions say while shipping nothing. We ship v0.1.