Building a School District AI Policy
That Actually Works

// Google Apps Script — AI Policy Stakeholder Survey Processor
// Attach to your Google Form responses spreadsheet

function processAIPolicySurvey() {
  const sheet = SpreadsheetApp.getActiveSpreadsheet().getSheetByName("Form Responses 1");
  const data  = sheet.getDataRange().getValues();
  const headers = data[0];

  const summary = {
    total:      data.length - 1,
    byRole:     {},
    blockAll:   0,
    selective:  0,
    allowAll:   0,
    topConcerns: {},
    toolsInUse: {}
  };

  for (let i = 1; i < data.length; i++) {
    const role     = data[i][1]; // Column B: Role
    const stance   = data[i][2]; // Column C: Block preference
    const concerns = data[i][3]; // Column D: Top concerns
    const tools    = data[i][4]; // Column E: AI tools currently used

    summary.byRole[role] = (summary.byRole[role] || 0) + 1;

    if (stance === "Block all AI tools") summary.blockAll++;
    else if (stance === "Selective blocking") summary.selective++;
    else summary.allowAll++;

    concerns.split(",").forEach(c => {
      c = c.trim();
      summary.topConcerns[c] = (summary.topConcerns[c] || 0) + 1;
    });

    tools.split(",").forEach(t => {
      t = t.trim();
      if (t) summary.toolsInUse[t] = (summary.toolsInUse[t] || 0) + 1;
    });
  }

  // Generate report
  const report = SpreadsheetApp.getActiveSpreadsheet()
    .insertSheet("Policy Survey Report");
  report.appendRow(["AI Policy Stakeholder Survey Summary"]);
  report.appendRow(["Total Responses", summary.total]);
  report.appendRow(["Block All", summary.blockAll,
    "Selective", summary.selective,
    "Allow All", summary.allowAll]);

  Logger.log("Survey processed: " + summary.total + " responses");
}

# district-ai-policy.yaml
# Machine-readable AI policy definition
# Version-controlled in the district's IT documentation repo

policy:
  name: "District Generative AI Acceptable Use Policy"
  version: "2.1"
  effective_date: "2025-08-01"
  review_date: "2026-06-30"
  approved_by: "Board of Education — Resolution #2025-047"
  owner: "Director of Technology"

scope:
  applies_to:
    - "All students (K-12)"
    - "All certified and classified staff"
    - "All district-owned and managed devices"
    - "All network connections (on-campus and take-home)"
  exceptions:
    - group: "IT Security Staff"
      reason: "Requires access for threat assessment and tool evaluation"
    - group: "Approved Teacher Pilot Participants"
      reason: "Participating in Phase 2 controlled rollout"

categories:
  blocked:
    - "Text & Language"
    - "Image & Visual"
    - "Code & Development"
    - "Agents & Automation"
    - "Audio, Voice & Music"
    - "Video"
    - "Data, Analytics & Research"
    - "Search, Knowledge & Docs"
  permitted_with_approval:
    - "Education & Learning"
  always_permitted:
    - "Security & Detection"

enforcement:
  technical:
    blocklist_source: "AI Tools Blocklist — 16,024+ domains"
    update_frequency: "daily"
    content_filter: "GoGuardian / Lightspeed / Securly"
    dns_filter: "Cisco Umbrella"
  consequences:
    student_first: "Digital citizenship module completion"
    student_second: "Parent conference + temporary device restriction"
    student_subsequent: "Academic integrity procedure per student handbook"
    staff: "Professional conduct framework per collective agreement"

# Teacher Training Portal Configuration
# LMS module structure for AI policy training
# Integrates with Google Classroom or Canvas

training_program:
  name: "District AI Policy Professional Development"
  academic_year: "2025-2026"

  tier_1_awareness:
    required: true
    audience: "All certified and classified staff"
    delivery: "Asynchronous — LMS module"
    duration: "60 minutes"
    deadline: "2025-09-30"
    modules:
      - title: "What Are Generative AI Tools?"
        duration: "10 min"
        content: "Overview of AI landscape, 16,024+ tools in 18 categories"
      - title: "Our District AI Policy — Key Points"
        duration: "15 min"
        content: "Acceptable use, prohibited use, exceptions, consequences"
      - title: "How Technical Controls Work"
        duration: "10 min"
        content: "Blocklist integration, content filter, on/off network"
      - title: "Spotting AI-Generated Student Work"
        duration: "15 min"
        content: "Red flags, detection tools, conversation starters"
      - title: "Exception Process & Reporting"
        duration: "10 min"
        content: "How to request tool approval, how to report incidents"
    assessment:
      type: "Quiz — 10 questions, 80% passing score"
      attempts: 3

  tier_2_integration:
    required: false
    audience: "Teachers requesting AI tool access"
    delivery: "Synchronous — workshop"
    duration: "3 hours"
    sessions: "Monthly — October through March"
    prerequisite: "Tier 1 completion"
    topics:
      - "Designing AI-resistant assessments"
      - "Pedagogical frameworks for AI in the classroom"
      - "Data privacy when using approved AI tools"
      - "Submitting and managing tool exception requests"

  tier_3_champions:
    required: false
    audience: "Teacher leaders — 2 per building"
    delivery: "Cohort — monthly meetings"
    duration: "Full academic year"
    stipend: "$500 / year"
    responsibilities:
      - "Peer support for Tier 1 and Tier 2 staff"
      - "Evaluate new AI tools for potential exception approval"
      - "Serve on annual policy review committee"
      - "Present at building staff meetings quarterly"

# Policy Enforcement Audit Script
# Generates quarterly compliance report
# Run at the end of each quarter

#!/bin/bash
# /opt/scripts/policy-audit.sh

QUARTER="Q$(( ($(date +%-m) - 1) / 3 + 1 ))"
YEAR=$(date +%Y)
REPORT_DIR="/var/reports/ai-policy/$YEAR"
mkdir -p "$REPORT_DIR"

echo "=== AI POLICY COMPLIANCE REPORT ===" > "$REPORT_DIR/${QUARTER}-report.txt"
echo "Period: $QUARTER $YEAR" >> "$REPORT_DIR/${QUARTER}-report.txt"
echo "Generated: $(date)" >> "$REPORT_DIR/${QUARTER}-report.txt"
echo "" >> "$REPORT_DIR/${QUARTER}-report.txt"

# 1. Blocklist coverage
TOTAL_BLOCKED=$(wc -l < /var/lib/ai-blocklist/domains.txt)
echo "Blocklist Coverage: $TOTAL_BLOCKED domains" >> "$REPORT_DIR/${QUARTER}-report.txt"

# 2. Block events this quarter
BLOCK_EVENTS=$(grep -c "BLOCKED.*ai-tools" /var/log/content-filter/access.log)
echo "Block Events: $BLOCK_EVENTS" >> "$REPORT_DIR/${QUARTER}-report.txt"

# 3. Unique students who triggered a block
UNIQUE_STUDENTS=$(grep "BLOCKED.*ai-tools" /var/log/content-filter/access.log \
  | awk '{print $3}' | sort -u | wc -l)
echo "Unique Students Blocked: $UNIQUE_STUDENTS" >> "$REPORT_DIR/${QUARTER}-report.txt"

# 4. Top 10 most-blocked AI domains
echo "" >> "$REPORT_DIR/${QUARTER}-report.txt"
echo "=== TOP 10 BLOCKED AI DOMAINS ===" >> "$REPORT_DIR/${QUARTER}-report.txt"
grep "BLOCKED.*ai-tools" /var/log/content-filter/access.log \
  | awk '{print $5}' | sort | uniq -c | sort -rn | head -10 \
  >> "$REPORT_DIR/${QUARTER}-report.txt"

# 5. Exception requests this quarter
EXCEPTIONS=$(find /var/lib/ai-policy/exceptions/ -name "*.json" \
  -newer "$REPORT_DIR/../last-quarter-marker" | wc -l)
echo "" >> "$REPORT_DIR/${QUARTER}-report.txt"
echo "Exception Requests: $EXCEPTIONS" >> "$REPORT_DIR/${QUARTER}-report.txt"

# 6. Training completion
echo "" >> "$REPORT_DIR/${QUARTER}-report.txt"
echo "=== TRAINING COMPLETION ===" >> "$REPORT_DIR/${QUARTER}-report.txt"
echo "See LMS report for Tier 1/2/3 completion rates" >> "$REPORT_DIR/${QUARTER}-report.txt"

touch "$REPORT_DIR/../last-quarter-marker"
echo "[$(date)] Quarterly audit report saved: $REPORT_DIR/${QUARTER}-report.txt"