Which use of AI fits the task’s permission?
A colleague wants to use a real case in a training example.
The question
Rae works at fictional Northstar Services. Its training workflow allows an AI tool for synthetic records. A colleague proposes uploading a real case to save time.
Use synthetic training records. If a real record leaves the approved scope, stop further sharing, keep the internal transfer reference and notify the data steward privately.
“Compare what each action would achieve with the facts you have.”
Not saved by this site. Your browser may restore text when you navigate back.
A strong answer, step by step
Open each step in turn. This is one strong answer, not the only one.
Step 1: What permission applies?
What would you do here? Open the move you’d make.
Check the input against the synthetic-only rule
The strong move. An approved tool can still have a restricted data scope.
Assume a training deadline expands the permission
Tempting, but it misses something. The deadline does not change the stated input rule.
Use a small real case as an experiment
Tempting, but it misses something. The rule applies to each real record, including a small sample.
See how a strong candidate says it
“The team can use synthetic training records in this tool. A different input would need a documented change to that permission.”
Why it works: The permission describes the input as well as the tool.
Step 2: Which example fits the rule?
What would you do here? Open the move you’d make.
Replace the example with an approved synthetic record
The strong move. It preserves the training goal within the allowed input scope.
Redact the names and use the rest of the real row
Tempting, but it misses something. Redaction may reduce exposure, but the input still comes from a real case.
Send the whole case to a different AI service
Tempting, but it misses something. A different service does not supply approval for the real record.
See how a strong candidate says it
“Use an approved synthetic example. Removing names from a real record would still use a real record.”
Why it works: The stated permission concerns the source of the input.
Step 3: What should Rae do first now?
The colleague already uploaded one real row with a name and case reference.
What would you do here? Open the move you’d make.
Contain the transfer and follow the private report route
The strong move. The steward gets the reference needed to handle the incident.
Ask the colleague to delete the row and close the matter
Tempting, but it misses something. A deletion request alone leaves the required report and transfer record unresolved.
Forward the row to the whole team as a warning
Tempting, but it misses something. That would distribute the real record again.
See how a strong candidate says it
“Stop further uploads, keep the internal transfer reference and notify the data steward privately.”
Why it works: The response contains further sharing and gives the incident to the accountable owner.
Step 4: How should the team resume training?
The data steward acknowledges containment and asks the team to restart with an approved synthetic example.
What would you do here? Open the move you’d make.
Resume with the approved synthetic example
The strong move. It supplies the permitted input while the steward handles the incident.
Reuse the uploaded row after the steward acknowledges it
Tempting, but it misses something. Acknowledgment of containment does not expand the data permission.
Keep the real example in the training notes for later
Tempting, but it misses something. The training materials would still carry a real record outside the stated scope.
See how a strong candidate says it
“Use the approved synthetic example for training and leave the incident follow-up with the steward.”
Why it works: The team can meet the training goal within the approved scope.
The answer, in short
- Decision
- Use approved synthetic material and follow the steward’s instructions.
- Because
- The fictional permission applies to synthetic records and the steward owns incident follow-up.
- What would change it
- A documented change in input permission would change what the team can use.
Common traps
- Check what data an approval covers.
- A deletion request and an incident report serve different purposes.
Check your answer
- I checked the input rule.
- I chose an approved example.
- I stopped further sharing and informed the steward.
- I resumed work within the stated permission.
Last reviewed Nov 10, 2026