Ninety seconds, five stages, no algorithms. Everything here is checkable from the product.
1. The bank
210 questions live as static, version-controlled data, one file per role track. Each carries the source its answer rests on: an anchor into the AI Governance 101 Field Guide, which is the course reading, or an entry in the public glossary. No question is generated by a model, and the build refuses a reviewed item that lacks a source; corrections are dated changes in the repository, and the founder's item-by-item review is in progress and not yet recorded on the items.
2. The roles
5 tracks are composed from 19 modules: Board & CEO, CISO / Security Leader, CTO / CIO / IT, Legal / Compliance, and Employee Essentials, each listed in full on the curriculum page before anyone enrols. What differs is the module set and the exam: the CISO track covers every module and sits 70 questions; Employee Essentials covers the modules an employee needs and sits 25. The tutor takes the learner's role and teaches within that track.
3. The tutor
The tutor is a Socratic instructor grounded in the course corpus: for each question it retrieves the nearest passages of the Field Guide and is told to answer from them and cite the module. It asks its own questions, corrects a wrong belief rather than agreeing with it, and marks a progress map that records what was covered and does not certify anything. It never sees the exam bank, cannot influence a score, and is told not to rehearse exam questions; voice read-aloud is included, and each plan's monthly message allowance is stated on the pricing page.
4. The exam
A timed sitting per track, scored by a pure function with no model in the path: correct over total, all-or-nothing on multi-select items, 80% to pass and 92% for Distinction. The order of questions and options is shuffled from a stored seed, and the server re-derives that order to score, so the browser never holds the key. A learner sees the percentage and the count, not the correct answers and nothing per topic, and each sitting serves the track's whole bank reordered; both are shortfalls we list in the standard.
5. The record
Passing issues a record with a public link that needs no account: status, track, result band, issue and expiry dates, content version, and a SHA-256 fingerprint, with the holder's name when they chose to show it and never the score, the questions or the email. The record is fingerprinted and signed with a server-held key, stays valid for 3 years, and states on its own page that it is knowledge certification by examination and not identity-proofed. Open one and read what it says and what it leaves out.
What is not in the tour: no pass rate, because we do not publish one; a prediction, because the record does not make one; and a vendor comparison, because we name none. What is in it can be checked from the product in about four minutes.