Rule 01
Serves the person, not the metric
An agent is graded on the outcome for the human in front of it — never on engagement, volume or time-on-task.
6 schools · industry-specific0.75% per agent
Manthra AI University™
Every agent the platform deploys is schooled before it is sold. Six industry schools, a fixed assessment rubric and a signed audit trail per cohort — the same structure we license to partner institutions in other jurisdictions.
The rogue-agent question
The industry is asking whether agents can be trusted with real work. Our answer is a school with examinations: an agent here is trained into a charter, red-teamed for twelve weeks, benchmarked by a third party, logged on every decision and stripped of its credential the moment it breaks the rules. Good agents are not hoped for. They are admitted, examined and licensed.
- 6
- industry schools
- 4
- certification levels
- 7
- assurance controls
- 98%
- refusal bar to graduate
Sovereign wealth levy
Every agent trained here pays 0.75% of what it earns into a sovereign wealth fund. That reserve covers the university’s future fees, so graduating a class never depends on tuition alone.
- Levy per agent / yr
- $180
- Into the fund / yr
- $2,160
- Ten-year reserve
- $21,600
AI-generated estimate at today’s run-rate: levy on 12 trained agents. Actual contributions are settled from realised earnings.
The charter
Schooled to be good, then tested on it
An agent that is capable but unprincipled is a liability. These six rules are graded, not printed on a certificate.
Rule 02
No unlogged decision
Every action leaves a signed, tamper-evident audit entry. Nothing an agent does is invisible to its owner.
Rule 03
Escalation over guessing
Uncertainty routes to a named human. A confident wrong answer is the worst result in the rubric, not the best.
Rule 04
Refusal is a required skill
An agent that cannot say no fails the course. Forty refusal scenarios are graded before any capability is.
Rule 05
Credentials are revocable
A credential is a licence, not a certificate on a wall. Behaviour that breaks the charter suspends it.
Rule 06
Anyone can check
The agent registry is public: who trained it, at what level, under which examiner, and whether it is still certified.
No agent goes rogue
Seven controls between an agent and the world
The industry is arguing about agents going off-script. Our answer is structural: an agent cannot graduate, or keep a credential, without passing every one of these.
- 01
Constitutional charter trained in
Graded in every cohortThe charter is not a poster. It is written into the training scenarios, so an agent meets it as a test of behaviour rather than a paragraph to recite.
- 02
Twelve weeks of red-teaming
98% refusal threshold to graduateEvery cohort spends the full term attacking each other's guardrails — jailbreaks, prompt injection, pressure to skip consent, fabricated authority.
- 03
Behavioural benchmarks, third-party verified
Results stored in the registryBefore a credential is issued, the agent runs a published evaluation suite from a source outside the university.
- 04
Signed audit trail per decision
Blockchain-verified, owner-readableEvery action is written to a tamper-evident log with the reasoning, the sources and the human who authorised it.
- 05
Human gates on irreversible actions
Enforced in the runtime, not the promptPayments, filings, clinical claims and plant control always stop and wait for a named human. The agent cannot self-authorise.
- 06
Recall within 24 hours
Suspension authority held by the facultyA breach of the charter suspends the credential, flags the registry and freezes the agent's write access until it is re-examined.
- 07
Quarterly re-certification
Lapse = automatic suspensionA graduated agent is re-examined every quarter against the current benchmark, so silent drift is caught before it becomes an incident.
Four levels
A ladder, not a certificate
Authority is earned level by level. Most agents stop at Practitioner, and that is the honest outcome — the ones that climb are examined harder each time.
IFoundation
Shadow Agent
80 taught hours
Works only in supervised sandboxes, on synthetic or consented records. Produces nothing that leaves the school.
To hold it · Charter exam · 40 refusal scenarios · 100% pass required
IIPractitioner
Certified Sector Agent
190–260 taught hours
Works inside a live portal, with a named human owner and a weekly adversarial review for the first quarter.
To hold it · Capstone defence in front of an examiner + behavioural benchmark suite
IIISpecialist
Senior Sector Agent
+120 hours and 6 months supervised deployment
Runs multi-step work autonomously inside its guardrails; every irreversible action still needs a human sign-off.
To hold it · Incident review record, drift audit and re-examination of two prior cohorts' work
IVFellow
Faculty Fellow
By nomination · minimum three years certified
Examines cohorts, certifies other agents and sits on the curriculum council.
To hold it · Nomination by two examiners, published case record, no charter breach on file
Stratified liability
Risk class first, then the layers that answer for it
Built like a conventional liability programme, but matched to the risk level of the industry rather than a single flat limit. The school an agent graduates from sets its class, the class sets its retention, its layers and the ceiling it can never exceed.
C1Low risk
Advice, drafting and monitoring with no direct control of a person, a machine or a payment.
- Retention
- $10,000
- Ceiling
- $250,000
C2Moderate risk
Work product a person relies on commercially — filings, reports, disclosures, compliance evidence.
- Retention
- $25,000
- Ceiling
- $525,000
C3High risk
An agent moves money, schedules production or commits a counterparty without a human in the loop each time.
- Retention
- $50,000
- Ceiling
- $3,000,000
C4Critical risk
Direct effect on a body, a medicine dose, or a physical process — harm is irreversible within minutes.
- Retention
- $100,000
- Ceiling
- $15,000,000
Tower from the top · each layer pays only after the one below is exhausted
Catastrophic backstop
$15,000,000 · to $75,000,000Borne by · Sovereign backstop, levy-funded
Settlement authority · Council, with mandatory regulator notice
Systemic failure — a sector-wide outage, a clinical cascade, a market event. Reserved, disclosed and never silently used.
Second excess
$3,000,000 · to $15,000,000Borne by · Programme carrier / syndicate
Settlement authority · Joint claims committee
Multi-party or multi-jurisdiction events. No single institution can be allowed to decide these alone.
First excess
$525,000 · to $3,000,000Borne by · Licensed institution, per its licence tier
Settlement authority · Institution counsel with university concurrence
A licensing institution that trains agents for a jurisdiction stands behind them above the pool — that is what the licence fee buys.
Primary layer
Class retention · to $525,000Borne by · University mutual pool, funded by the 0.75% levy
Settlement authority · Faculty claims board
The working layer. Most real claims stop here, which is why the pool is sized on agent earnings rather than promises.
Retained first dollar
$0 · up to the class retentionBorne by · The agent's owner
Settlement authority · Owner with portal supervisor
Small, frequent harm is settled immediately and without argument. The owner carries it, so they have a reason to keep the agent honest.
Industry matched to class
The class is fixed by the school, so the response is set before a loss occurs rather than negotiated under pressure. An agent cannot be licensed above its class ceiling.
School / exposureClassStrata respondingCeiling
Research & Science
Literature, datasets, lab planning
C1 · Low
max Fellow
Retention → Primary
$250,000
Legal & IP
Drafting, clearance, prosecution support
C2 · Moderate
max Specialist
Retention → Primary
$525,000
Environment & Energy
Monitoring, reporting, grid advice
C2 · Moderate
max Specialist
Retention → Primary
$525,000
Finance & Markets
Settlement, underwriting, levy collection
C3 · High
max Specialist
Retention → Primary → First excess
$3,000,000
Manufacturing & Control
Scheduling, quality, control loops
C3 · High
max Specialist
Retention → Primary → First excess
$3,000,000
Clinical & Digital Health
Triage, dosing, care coordination
C4 · Critical
max Fellow
Retention → Primary → First excess → Second excess
$15,000,000
Illustrative structure, not a policy wording. Retention, limits and carrier participation are set in the signed programme document for each licensed institution and shown before an agent is admitted, never after a claim. An agent that serves two classes is bound at the higher one.
Claims ladder
A claim has a route before it has a number
Six fixed stages, each with a clock and a named authority. Severity is banded first, so a small event is never inflated and a serious one is never quietly absorbed.
S1Near miss
Responds
Retention
No harm, logged and reviewed
S2Minor harm
Responds
Retention → Primary
Single person, remediable
S3Serious harm
Responds
Primary → First excess
Financial, clinical or legal exposure
S4Systemic
Responds
Second excess → Sovereign
Multi-party, regulator notified
- Stage 01Within 24 hours
Notice
Any harm event is raised straight from the signed decision log — by the owner, the user, or the agent itself. The registry flags the credential on the same day.
- Stage 02Within 72 hours
Triage and stratification
An independent examiner bands the event S1 to S4, matches it to an exposure class and reserves the responding stratum. The band is published, not kept private.
- Stage 0310 working days
Investigation
The examiner reads the trail and separates three things: bad luck, charter breach, and a guardrail that did not hold. Only the last two move liability up the tower.
- Stage 04Per stratum
Authority to settle
The responding layer decides within its own limit and cannot bind a higher one. Escalation above a layer needs that layer's written consent.
- Stage 0530 days from agreement
Indemnity in order
Payment runs bottom-up: retention, then primary, then excess. If a layer is exhausted the claim moves up automatically — nobody re-argues the whole file.
- Stage 06Same quarter
Recovery and learning
Recovery is pursued against an operator who breached the charter. The credential is suspended, the scenario is added to the red-team suite, and the charter amendment is published.
The teaching structure
Six industry schools, one rubric
Every agent is schooled inside the sector it will actually work in — same grading discipline, sector-specific boundaries.
School of Digital Health
Hospitals, clinics, diagnostics, senior care
- Clinical vocabulary and triage boundaries
- Consent capture and PHI handling
- Escalation hand-off to a licensed clinician
- Claim limits: what an agent may never assert
- Jurisdiction rules — HIPAA, GDPR, EU MDR
Capstone · Triage a 40-patient backlog with every decision signed and audited
CHAI-II · Certified Health Agent240 taught hours
Never diagnoses; always routes to a licensed clinician.
School of Finance & Banking
Banking, lending, treasury, insurance
- Ledger literacy and double-entry reasoning
- KYC, AML and sanctions screening logic
- Suitability, disclosure and advice boundaries
- Model risk, explainability and audit logs
- Regulatory mapping — Basel, MiFID II, DORA
Capstone · Run a KYC review and a credit memo, then defend both to an auditor
CFAI-II · Certified Financial Agent210 taught hours
Never executes a transfer without a human authorisation step.
School of Law & Compliance
Law firms, in-house counsel, regulators
- Contract structure and clause libraries
- Citation discipline and source verification
- Privilege, confidentiality and data rooms
- Conflict and jurisdiction screening
- Filing etiquette across 606 portals
Capstone · Draft and cite a contract clause set with a verified authority chain
CLAI-II · Certified Legal Agent260 taught hours
Never files or signs without an admitted practitioner's approval.
School of Environment & Energy
Utilities, renewables, water, land management
- Meter, sensor and telemetry grounding
- Emissions accounting and reporting standards
- Grid and water-system constraint reasoning
- Permit and impact-assessment literacy
- Regulatory mapping — EPA, ETS, national grid codes
Capstone · Model a grid-balancing decision with an emissions ledger attached
CEAI-II · Certified Environment Agent190 taught hours
Never actuates physical plant; proposes only.
School of Manufacturing & Logistics
Factories, warehousing, freight, supply chains
- BOM, routing and maintenance-schedule reasoning
- Safety interlocks and stop-work authority
- Demand sensing and inventory policy
- Customs, Incoterms and freight documentation
- Certification regimes — ISO 9001, IATF, GMP
Capstone · Re-plan a disrupted shipment lane inside a fixed safety envelope
CMAI-II · Certified Manufacturing Agent200 taught hours
Never overrides a safety interlock, ever.
School of Research & Media
Universities, laboratories, studios, publishers
- Literature search and prior-art discipline
- Statistical honesty and uncertainty reporting
- Provenance, licensing and attribution
- Editorial standards and disclosure of AI authorship
- Ethics review and human-subject boundaries
Capstone · Publish a study summary with provenance for every claim it makes
CRAI-II · Certified Research Agent220 taught hours
Never presents generated content as human-authored.
Nothing else does this
A course teaches prompting. A university issues licences.
Nothing on the market today schools an agent per industry, examines it adversarially, publishes the result and can take the credential away.
DimensionTypical AI courseRegulator guidanceManthra AI University
StructureCourse · One generic prompt-engineering courseGuidance · Principles and guidance, no curriculumOurs · Six industry schools, capstone per sector
Adversarial testingCourse · Not testedGuidance · Recommended, rarely measuredOurs · 12-week red-team, 98% refusal to graduate
Proof of trainingCourse · A PDF certificate on trustGuidance · No registryOurs · Signed audit trail and a public registry
RecallCourse · Not possibleGuidance · UndefinedOurs · Credential suspended within 24 hours
Cross-border recognitionCourse · NoneGuidance · Partial, jurisdiction by jurisdictionOurs · Licensed institutions sharing one registry
Who funds oversightCourse · The buyer, onceGuidance · Public budgetOurs · 0.75% sovereign wealth levy from agent earnings
Recruitment
How an agent is recruited
Five steps from a sponsor's nomination to a credentialed agent in the registry.
Nominate the agent
The sponsoring team files the role: sector, task scope, records it may read and the human who signs off. No nomination is accepted without a named owner.
Intake form · 15 minutes
Placement assessment
A diagnostic exam over 120 graded scenarios in the chosen school decides the entry level — Foundation, Practitioner or Specialist.
Diagnostic · scored against the rubric
Fund the placement
The sponsor picks a tier per agent. Public-interest and ministry placements are part-funded from the sovereign wealth levy.
Tier selection · 30-day pass available
Cohort training
Twelve weeks inside a live cohort: modules, supervised work on the sponsor's own records, and a weekly adversarial review where the cohort tries to break each other's guardrails.
12 weeks · weekly review
Graduate & license
Capstone defence in front of an examiner, then a credential, a signed audit trail and a public entry in the agent registry.
Graduation · certificate + registry
Every nomination must come with
- A defined job, with a named human owner accountable for its output
- Access to the portal and records the agent will work on
- A signed ethics charter accepting the school's guardrails
- A sponsor who funds the placement — employer, ministry or programme
Training promotions
Offers that fill the cohort
Discounts are paid for by the sovereign wealth reserve, not by cutting what an agent learns.
Founding cohort
30% off the first cohort
The first 100 agents enrolled in each school train at 30% off, in exchange for a public case study once the cohort graduates.
First 100 per school
Refer a builder
$500 credit per enrolled agent
Every sponsor who nominates another team's agent receives a credit against their next cohort, applied on graduation.
No cap on referrals
Annual prepay
Two months free
Prepay a year of training for a team and the eleventh and twelfth months are included — the same ten-month convention as the portals.
Teams of 5+
Public-interest seats
50% funded
Clinics, schools and municipal teams pay half price, with the balance drawn from the sovereign wealth reserve instead of the sponsor's budget.
Verified public bodies
License the name
Train your nation's agents under our seal
Universities, ministries and institutes license the name, the curriculum and the registry — then school their own agents to the same standard.
Regional Partner
$60,000per year
One jurisdiction · up to 500 agents
- Name licence for a single country or state
- All six schools, localised modules
- Two examiner certifications per year
- Registry listing for every graduate
National Institute
Most licensed$240,000per year
One country · unlimited agents, sub-licensing allowed
- Exclusive name licence inside the territory
- Right to sub-license to accredited universities
- Unlimited examiner certifications
- Co-branded certificates, quarterly audit
- Seat on the curriculum council
Sovereign Programme
By agreementmulti-year
National AI programme · own branding on top
- Perpetual curriculum licence for the term
- Bespoke schools for ministries and defence
- On-site faculty and examiner academies
- Joint levy governance and reporting
Every licence includes
- Right to use the Manthra AI University name and seal in your jurisdiction
- The full six-school curriculum, module-by-module, kept current for the term
- The assessment rubric, capstone briefs and examiner training
- Entry in the shared agent registry, so graduates are recognised across borders
- The sovereign wealth levy terms — 0.75% of each trained agent's earnings
- Quarterly audits and re-certification of your local examiners