Nine principles. Three clusters.
Design principles
What the integrated system must satisfy
Three premises survive the analysis: education must be personalised to the individual; the learner must own their data; the system must serve a lifetime. From these, nine requirements follow when the premises meet the constraints of the real world. They form a dependency graph — every principle connects to at least two others. Remove any one and the system collapses.
Cluster 1 · Learner
What the system must do for the learner.
01 / 09
Autonomous completeness
A complete academic education delivered without requiring a human teacher in the path.
The teacher gap grows faster than teachers can be trained. A system that requires a teacher to function cannot reach the people who need it most. The architecture replaces the instructional and assessment functions of a teacher — not the socialisation, identity formation and emotional development that human relationships provide. Where teachers exist, the system enriches their work; where they do not, the learner still receives a complete academic education.
02 / 09
Radical individualisation
The learner steers through intention, not curriculum.
The system recognises where the learner stands, adapts continuously, and generates content in whatever form serves that learner at that moment. This derives directly from the tutoring research: the only way to close the gap at scale is to make individual tutoring the default mode rather than the luxury exception.
03 / 09
Universal access
Every human, regardless of location, income, disability or life situation, must be able to use the system.
Access cannot depend on owning personal hardware or having a stable internet connection. A system that excludes the population it most needs to reach has failed before it starts. Hub design and island mode (L7) make this principle technically achievable, not merely aspirational.
Cluster 2 · Trust
The guarantees without which the learner-facing promises collapse.
04 / 09
Competence over certificate
Abilities are demonstrated through continuous granular process evidence — not point-in-time examinations.
The OECD finding that AI-assisted output quality does not transfer to unassisted performance confirms what the competency-based literature has long argued: if AI can produce any output on demand, only evidence of the thinking process itself remains valid. L6 turns this from an aspiration into an architectural commitment.
05 / 09
Protection of the learner
The system must not harm, manipulate, create dependency, or stigmatise.
It recognises its own limits and hands over to humans when it reaches them. A system operating at the intimacy level that radical individualisation demands holds dangerous power. Protection is architecturally mandatory from the first design decision — implemented in the Protection-Agent and Audit-Agent of L1.
06 / 09
Data sovereignty
Learning data belongs to the learner. No state, company or institution may use it for control, evaluation or surveillance.
The deep learner profile — capturing how a person thinks — demands the strongest possible guarantee: not "it is forbidden to access the data" but "it is impossible to access the data." This principle requires architecture, not policy. The mechanisms are described in detail on the Sovereignty page.
Cluster 3 · Governance
Who controls the system, and how.
07 / 09
No monopoly control
No single actor controls the system. The operator is a trustee — responsible for infrastructure, not content.
The structural incompatibility between trustee and shareholder governance makes this a design requirement, not a preference. A publicly traded company has fiduciary duties to shareholders, not learners. A trustee whose obligations point at the learner can credibly hold the system in trust.
08 / 09
Cultural diversity with universal interoperability
Scientific foundations are universal. Cultural content is sovereignly curated. Both coexist and interoperate.
The two-layer Knowledge Graph (L5) avoids two failure modes simultaneously: a global system that imposes cultural monoculture, and a fragmented system where competencies do not transfer across contexts. Layer 1 governs empirically falsifiable claims; Layer 2 governs interpretation, narrative and values.
09 / 09
Education as binding right
The system is built as if effective education were a human right.
Not because any treaty currently guarantees it in this form, but because the architecture does not wait for permission. When a person anywhere on earth can demonstrably move from illiteracy to professional competence without institutional gatekeeping, the absence of legal recognition becomes harder to sustain.