Can clients see attachments, and how do I avoid showing the wrong version?

Attachments, like the final PDF you want approved, can be shown on a task in the portal. Since a working task often collects multiple versions over time, the cleanest approach is a dedicated review task or subtask that holds only the version the client should review.