So theoretically yes, your example could be a breach. With these provisions I often try to isolate so only generative ai (not simple ai tools) are a breach and educate my clients on not using gen ai whatsoever in their development process without pub consent to be safe
