Pwabbit, Is the assumption that you are part of an AS9100 certified organization? Is your direct customer also AS9100 certified?
For your customer, they are required by ISO9001 to define requirements to their supplier (you). Then AS9100 adds the phrase "including the identification of relevant technical data (e.g., specifications, drawings, process requirements, work instructions);"
8.4.3 Information for External Providers
The organization shall ensure the adequacy of requirements prior to their communication to the external provider.
The organization shall communicate to external providers its requirements for:
a. the processes, products, and services to be provided
including the identification of relevant technical data (e.g., specifications, drawings, process requirements, work instructions);
In your original post, there is a contradiction. First you say they are not flowing down:
- record retention
- customer approved special processes
- control of suppliers
And then you say they want you to accept an authorization to proceed "for us to buy material without requirements of any kind".
Yes, they can issue you an order or ATP and waive record retention, customer approved special processes and control of suppliers. Since you are AS9100, then you default record retention period would apply. You can select a special processor of your choice. You can apply controls to your suppliers per your process.
However, they cannot issue you an ATP and expect you to sign it "without requirements of any kind". They would be in violation of 8.4.3