AIGN EOS – Education Operation System

The operational governance architecture for educational AI

AIGN EOS – Education Operating System for Trustworthy AI Decisions Affecting Children
⏱ EU AI Act high-risk obligations for educational AI apply from 2027. — Is your school or institution ready? See what’s required →
Preprint · Working Paper · Open Access

AIGN EOS —
Education
Operating System

For Trustworthy AI Decisions Affecting Children. The first operational, auditable and certifiable governance architecture for educational AI — globally applicable, legally grounded.

EU AI Act high-risk classification for educational AI — 2027
7 April 2026
Upmann, P. (2026)
DOI: 10.5281/zenodo.19450612
v1.0 · EN

Three realities that apply right now — in every classroom.

1

No audit trail: When an AI decision disadvantages a student, no school without an EDR can document how that decision was reached — or defend it.

2

No liability basis: Without auditable decision records, there is no legal foundation to challenge or correct a flawed AI recommendation affecting a child.

3

No systemic protection: Algorithmic bias accumulates silently — without equity monitoring, structural discrimination becomes educational infrastructure.

Publication Details
SeriesAIGN — AI Governance Network
TypePreprint / Working Paper
Versionv0.1-EN
LanguageEnglish (en)
LicenseAll Rights Reserved. Citation encouraged.
KeywordsEDR · CRIA · ASGR · Child Rights · AI Governance
Intended audiences
Researchers & peer reviewers

Sections 1–5: architecture specification, normative synthesis, design science methodology.

Policy & governance practitioners

Sections 2, 7 and 8: governance gap analysis, AIGN OS 2.0 integration, recommendations.

Procurement & decision-makers

Section 6: Trust Label Levels 1–3, ASGR maturity, Education License.

AIGN EOS at a glance
3Trust Label levels
7OS architecture layers
12EDR data fields
4Roadmap phases
2027EU AI Act deadline
GlobalApplicable everywhere
The structural gap

No existing framework delivers
what schools actually need.

UNESCO provides orientation but no architecture. UNICEF provides principles but no protocol specification. OECD provides guardrails but no execution logic. The EU AI Act defines obligations but no implementation architecture for schools. AIGN EOS occupies precisely the space they leave open: the operational layer between norm and reality.

Framework What it delivers What it leaves open AIGN EOS response
UNESCO Orientation, principles, policy framework No implementation architecture; no artifact specification Education Purpose Charter + D-CRIA Gate as implementation anchor
UNICEF v3.0 Children’s rights principles; D-CRIA concept; protection requirements No protocol specification; no auditability; no certification logic EDR + Trust Label Levels 1–3 as auditable bridge from principle to evidence
OECD Trustworthy AI principles; education guardrails; equity monitoring No execution logic; no runtime layer; no lifecycle management Policy-as-Code + Risk Engine as execution layer; ASGR as lifecycle monitor
EU AI Act Legal obligations; high-risk classification; sanctions framework No implementation architecture for schools; no sectoral runtime system EDR as Art.-12-compliant logging system; ASGR as compliance evidence
Runtime logic

AIGN EOS as an Operating System:
Input → Processing → Output → Feedback.

Not a framework. Not a checklist. Not a policy document. AIGN EOS is a runtime layer that operates over educational AI systems — structuring decisions, recording them, verifying them and certifying them. Enforcement is achieved through Policy-as-Code gates, mandatory EDR writes, CRIA clearance and Trust Label gating.

Phase
INPUT
Component
Use-Case Intake + CRIA Gate
Every AI application passes through D-CRIA. High-risk use cases classified and cleared before deployment.
Function
Impact assessment, high-risk classification, risk register
Output
CRIA report; high-risk flag; risk register entry
Phase
INPUT
Component
Policy-as-Code Engine
Institutional rules encoded as machine-readable rules, verified before every AI interaction.
Function
Pre-execution compliance gate, blocking non-compliant interactions
Output
Policy check log; compliance flag; block/allow decision
Phase
PROCESSING
Component
Risk Engine (NIST-RMF)
Continuous GOVERN/MAP/MEASURE/MANAGE: bias testing, drift detection, incident logging, equity KPI tracking.
Function
Continuous risk monitoring, equity dashboard, incident management
Output
Risk score; equity dashboard; incident queue
Phase
PROCESSING
Component
Human Oversight Module
Override mechanisms and decision templates for teachers. No automated decision without human checkpoint in high-stakes contexts.
Function
Human-in-the-loop enforcement, escalation path management
Output
Override record; teacher confirmation; escalation log
Phase
OUTPUT
Component
Education Decision Record (EDR)
Complete, exportable record of every AI decision: input classes, model version, confidence, policy checks, human override, outcome, appeals.
Function
Audit anchor, liability instrument, redress foundation, certification evidence
Output
EDR file (auditable, replay-capable, legally admissible)
Phase
OUTPUT
Component
Explainability UX
Age-appropriate explanations for four audiences: Child · Parent · Teacher · Supervisory authority. Anti-anthropomorphizing rules active.
Function
Multi-audience disclosure, consent management, transparency
Output
Disclosure log; consent record; explanation record
Phase
FEEDBACK
Component
ASGR Monitoring
Continuous assessment of organizational maturity: Trust Label status, re-assessment triggers, drift alerts, compliance reports.
Function
Lifecycle governance, maturity measurement, label status
Output
ASGR report; label status update; re-assessment flag
Phase
FEEDBACK
Component
Appeal & Remedy Service
Complaint channel for children, parents and teachers. Defined review process, human review, documented outcome, lessons-learned loop.
Function
Rights-based redress, SLA enforcement, system correction loop
Output
Remedy protocol; SLA metrics; system correction flag
AIGN OS 2.0 integration

Seven-layer governance architecture —
AIGN EOS as the Education Profile.

AIGN OS 2.0 is the horizontal governance architecture. AIGN EOS is its complete sectoral instantiation for education. Every EOS component is unambiguously assigned to one or more layers — fully traceable, no gaps.

L1

Purpose & Scope D-CRIA Intake

Education Purpose Charter; use-case typology covering Admission / Assessment / Proctoring / Tutoring / Analytics. High-stakes classification at intake.

L2

Risk & Impact Risk Engine

D-CRIA/CRIA as mandatory gate (Design→Pilot→Scale); Education Risk Register. Deployment blocked without CRIA clearance. Scales from pilot to full deployment.

L3

Data & Privacy Policy-as-Code

Guardian Consent Flows; DPIA mapping; Data Minimization Defaults. UK Children’s Code-compliant. GDPR-aligned. Machine-readable rules enforced before every interaction.

L4

Model & Evidence Equity Test Suite

Benefit-risk analysis before scaling. Bias/Equity Test Suite with subgroup-specific and continuous monitoring. Outcome evaluation as standard, not optional.

L5

Transparency & Explainability EDR + Explainability UX

Multi-audience Explainability UX for 4 levels (Child · Parent · Teacher · Authority). Anti-anthropomorphizing rules. EDR disclosure fields for every decision output.

L6

Oversight & Redress Human Override Record

Human-in/on-the-Loop Playbooks. Child-Rights Review Board. Appeal & Remedy Service with SLA and documented outcome. Every escalation path defined in advance.

L7

Governance & Lifecycle Trust Label + ASGR

AIGN Education License; procurement clauses for EdTech vendors; Trust Label Levels 1–3; ASGR continuous maturity monitoring. Annual renewal and drift alerts.

Core of the architecture

The Education Decision Record:
If it isn’t recorded, it didn’t happen.

The EDR is the central intersection of all AIGN EOS components. It simultaneously serves as audit record, liability anchor, transparency instrument, redress foundation and certification evidence. A 12-field schema — mandatory, cryptographically signed, replay-capable.

case_id Anchor

Unique Decision Identifier

Links all subsequent records across the entire EDR chain. The spine of every auditable decision.

timestamp

ISO-8601 Timestamp

Immutable record of when the decision occurred. Audit timeline and evidence preservation.

use_case_class

Classification

Admission / Assessment / Proctoring / Tutoring / Analytics. Determines applicable controls and high-stakes flag.

input_data_classes

Input Data Categories

Categories of input data used (without raw data). Data protection compliance evidence at point of decision.

model_id + version

Model Identification

Unique model identification including version and training date. Enables reproducibility and drift detection.

policy_checks

Policy Verification Results

Pass/fail/overridden result of all Policy-as-Code verifications. Compliance evidence at the moment of every decision.

decision_output

AI Output (Anonymized)

Actual AI output, anonymized/pseudonymized. The basis for contestation, review and appeal by affected parties.

confidence_score

Model Confidence

Model confidence measure for this decision. Uncertainty disclosure and escalation trigger for low-confidence outputs.

human_override Key

Human Oversight Record

Override: yes/no; substitution and reasoning if yes. Evidence of human oversight and liability anchoring for the school.

appeal_reference

Contestation Link

Reference to complaint ID if contestation occurred. Traceability connecting remedy to original decision.

outcome_tracking

Longitudinal Outcome

Tracked consequence of the decision over time. Efficacy and fairness evidence for ongoing equity monitoring.

edr_hash Integrity

Cryptographic Hash

Cryptographic hash of the full EDR entry. Tamper-evident by design — integrity protection against manipulation.

Control generates accountability

The Control–Liability Logic.

AIGN EOS is built on a principle existing policy frameworks systematically omit: control generates accountability, and accountability requires a record. Without auditable decision records, there is no accountability. Without accountability, there is no incentive for governance.

Control level
AIGN EOS mechanism
Liability consequence
Legal basis

Decision control

EDR records every AI decision: who, what, why, with what confidence, at what moment.

School can document and defend the decision before authorities or in court.

Process control

Policy-as-Code verifies compliance before every execution — machine-readable rules enforced at runtime.

Proof that institutional rules were active at the time of the decision.

Bias control

Equity Test Suite systematically detects disparate error rates across all relevant subgroups.

Documented bias evidence excludes silent accumulation of structural discrimination.

Override control

Human Override Record documents every human intervention with reasoning and timestamp.

Teacher and institutional responsibility is demonstrable — not merely asserted.

Remediation control

Appeal & Remedy Service with SLA and outcome protocol for children, parents and teachers.

Affected parties can verify whether their right to contest was effective or denied.

Visible outcome

Education Trust Label —
Levels 1, 2 and 3.

The AIGN Education Trust Label makes governance maturity visible, comparable and procurement-relevant. Not a self-declared badge — an evidence-based certification level demonstrated through auditable artifacts, gated by ASGR maturity. Globally portable. Legally grounded.

Level 1
ASGR 1 — Initiated

Pilot-Ready

Minimum requirement for school pilot
CRIA draft completed
Baseline DPIA documented
Safety/bias pre-tests passed
Disclosure UX implemented
AIGN Academy foundational training done
Level 2
ASGR 2 — Managed

Operational

Award criterion for municipal procurement
EDR active and exportable
Equity dashboard live
Human override playbook in force
Redress SLA defined and monitored
Full CRIA report; regular re-assessments
Level 3
ASGR 3 — Optimized

Assurable

Mandatory for state-level high-risk deployment
Third-party audit completed
Independent efficacy evaluation
ISO/IEC 42001-compatible evidence packages
Full ASGR Level 3 maturity assessment
Continuous improvement cycles documented
A global standard — for every institution

Built for schools, universities
and EdTech providers worldwide.

AIGN EOS is designed for global portability. Trust Label Level 1 requires no advanced digital infrastructure — making it applicable from primary schools in rural contexts to research universities in regulated markets.

Primary & Secondary Schools

Your school uses AI.
Can you prove it’s safe?

From adaptive learning tools to proctoring systems and admission algorithms — every AI touching a student’s path requires governance. AIGN EOS starts at Level 1: structured documentation, a basic CRIA process and foundational training. No advanced infrastructure required.

Protect students from algorithmic bias — with evidence
Defend every AI-supported decision before parents and regulators
Anchor human oversight operationally — not as a policy declaration
Start with Level 1 in days, not months
Start with Trust Label Level 1
Universities & Research Institutions

Lead the field.
Certify your governance.

Universities are simultaneously providers, deployers and researchers of AI. AIGN EOS provides the institutional architecture to govern all three roles — from student-facing systems to research AI and administrative automation — with a single certifiable framework.

Certifiable AI governance for accreditation, funding and partnerships
Align with EU AI Act, ISO/IEC 42001 and OECD principles — operationally
Establish institutional AI literacy through AIGN Academy integration
Become a globally visible reference institution for responsible AI
DOI-verified Trust Label — internationally comparable and procurement-ready
Apply for the Corporate Trust Label
EdTech Providers & Vendors

Build products that institutions can actually procure.

From 2027, EU AI Act Art. 12 applies to high-risk educational AI. Without a demonstrable EDR export interface and audit-ready logging, your product lacks the compliance foundation required for institutional procurement. AIGN EOS defines exactly what’s required — and how to deliver it.

EDR export interface: the mandatory technical baseline
Bias/Equity Test Suite before deployment — not after incidents
Safety by Design as default: Policy-as-Code from product launch
Trust Label Level 2 as procurement differentiator for institutions
Learn EdTech compliance requirements

Every school. Every country. Every child deserves accountable AI.

AIGN EOS is designed for global portability — from European universities navigating the EU AI Act to schools in Sub-Saharan Africa, South Asia and Latin America deploying AI-driven platforms through donor programs. Trust Label Level 1 requires no advanced infrastructure. Begin now.

Implementation roadmap

Four phases from first assessment
to certified, auditable assurance.

01

Discovery

Typify use cases; high-stakes classification; D-CRIA intake; data flow mapping; stakeholder plan including child participation; ASGR baseline assessment.

→ ASGR Level 1 evidence
02

Build

Implement EDR standard; establish RMF-based lifecycle; minimal controls (logging, oversight, disclosure); AIGN Academy foundational training; pilot evaluation.

→ Trust Label Level 1
03

Scale

Activate Evidence-Before-Scale Gate; conclude Education License agreements; launch equity dashboard; full CRIA report; ASGR Level 2 evidence package.

→ Trust Label Level 2
04

Assure

Third-party audit; ISO/IEC-42001 alignment; independent outcome evaluation; full ASGR Level 3 maturity assessment. Certifiable governance achieved.

→ Trust Label Level 3
Policy recommendations

What must change — for governments,
EdTech providers and schools.

Governments & Authorities

Policy & statutory obligations

Mandate CRIA/D-CRIA as a statutory gate before any AI introduction into educational infrastructure.
Operationalize EDR obligations analogous to EU AI Act Art. 12 at municipal level: no AI use without auditable records.
Embed Education Trust Label Level 2 as a minimum award criterion in public tenders.
Establish AI literacy as a mandatory qualification for teaching staff, analogous to Art. 4 EU AI Act.
EdTech Providers

Product & compliance requirements

EDR export interface as a mandatory component of every educational AI product — without it, EU AI Act Art. 12 cannot be fulfilled.
Bias/Equity Test Suite for all subgroups: evidence before deployment, continuous monitoring in operation.
Safety by Design as default, not opt-in: Policy-as-Code, content filters, anti-anthropomorphizing rules active from launch.
Schools & Universities

Operational governance requirements

Introduce EDR-based logging: every AI decision with potential student impact must be recorded, regardless of how minor it appears.
Operationally anchor ‚Human responsibility always rests with the school‘ — the Human Override Record provides the evidence trail.
Establish a child-appropriate complaint process: SLA defined, human review guaranteed, every outcome documented.
Core theses

What distinguishes AIGN EOS from every other approach.

Five operationalized propositions — not principles, not guidelines, not intentions. Each is enforced at runtime, auditable and certifiable. AIGN EOS provides the operational architecture. Not another guideline.

1

Educational AI systems that lack an EDR cannot systematically meet the logging and traceability requirements of EU AI Act Art. 12. No decision without a record.

2

Educational AI deployed without CRIA significantly increases structural bias risks and undermines non-discrimination obligations. No deployment without impact assessment.

3

Educational AI without a Human Override Record does not operationalize EU AI Act Art. 14 human oversight. Responsibility must be demonstrable, not merely asserted.

4

Educational AI without Trust Label Level 2 lacks a structured evidence pathway to demonstrate conformity with high-risk AI requirements from 2027.

5

AIGN EOS provides the operational architecture. Not another guideline. Not a framework. An operating system — enforceable, auditable, certifiable.

Your school. Your students.
Your accountability.

The EU AI Act high-risk obligations for educational AI apply from 2027. AIGN EOS provides the architecture to meet them — auditable, certifiable, globally applicable. Start in days.

DOI: 10.5281/zenodo.19450612 · Upmann, P. (2026) · AIGN EOS v1.0 · All Rights Reserved · aign.global ↗