1. Under “Evaluation and human oversight,” what must the supplier provide before deployment and after any material change affecting acceptance criteria?

2. In “Structuring the AI contract,” which party is described as remaining answerable for the contracted delivery chain?

3. Under “IP, indemnities and liability,” who retains all rights in Customer Data and other inputs supplied by or on the Customer's behalf?

4. The “Eight diligence gates” group gates 5–6 under which theme?

5. Per the “Material changes and model substitution” clause, what illustrative minimum notice period is suggested for a material change?

6. Which pairing correctly matches a risk path with its example, per “Six ways risk reaches the business”?

7. What best defines a “Third party” in the tiering of AI supply-chain relationships?

8. Under APRA's CPS 230, how is a “fourth party” expressly defined?

9. Contract terms across the chain” lists four themes. Which theme covers “Notice, assessment rights, remediation and proportionate suspension

10. Who is defined as a “Data provider”?

11. In the “Dependencies behind an AI service”, which layer most directly affects availability and location of the service?

12. What illustrative maximum notification window is suggested for an AI-related or security incident?

13. In FTC v. Rite Aid Corporation, what restriction did the stipulated order impose?

14. Which four questions does the masterclass propose to keep regulatory mapping from becoming a static list of law names?

15. Under the “Dependency disclosure and subcontracting” clause, what must the supplier maintain?

16. Which pairing correctly matches a “Contractual guardrails for AI use” theme with its own description?

17. Under “Audit, evidence and regulatory cooperation,” what must the supplier secure from material subcontractors?

18. In the agentic banking assistant case walkthrough, what triggered the unauthorized tool call?

19. Which of the following is NOT one of the four elements of the “operating model for AI dependencies”?

20. Which four functions does the NIST AI Risk Management Framework organize around, as cited in the masterclass?

23. Under “Continuity, termination and exit,” what must the supplier's business continuity and disaster recovery arrangements be consistent with?

24. The “Data use, training and processing location” clause restricts the supplier from doing what, absent the Customer's prior written authorization?

25. Per the 2026 AI Omnibus timing referenced in the masterclass, when do the EU AI Act's Annex III high-risk rules and Annex I product-linked high-risk rules respectively begin to apply?

27. What was the outcome of EEOC v. iTutor Group, Inc., et al.?

28. According to the AI roles terminology, what is an “AI model”?