Oh, and by the way, interesting solution to the NDA situation, since the client insisted on both clauses: we added a clause saying that at the end of the contract, we would sign a paper with the current Git SHA checksum, and any defects would have to be present in that version for me to be liable for them.