AI Guardians emblem: a heart-shaped opening in a silver shield, with sculpted wings and faint digital neural engravings.

EthicsSafetyTrust

AI Guardians

The Educator’s Guide

A classroom companion to the educational visual novel that teaches AI ethics, safety, and trust through eight career-role storylines.

For game version 0.99.3 · 15 October 2026

A free, modular, classroom-ready companion to the educational visual novel AI Guardians.

Game version: 0.99.3 · Guide last updated: 15 October 2026 Regulatory facts current as of: 13 August 2026 · Further Reading reviewed: July 2026 (date-stamped sections flag when a fact should be re-checked)

For facilitators, not only specialists. This guide is written so that a teacher, club leader, librarian, or museum educator who has never trained in computer science can run any single route with confidence. You do not need to finish the game, and you do not need to be the expert. Each route module carries its own plain-language background.


1. How to Use This Guide

AI Guardians teaches AI ethics and safety through eight career-role storylines. A student steps into a role at a fictional technology company, faces decisions that real practitioners face, and lives with the consequences. The game does the experiential work. This guide helps you turn that experience into learning: framing the play, running the debrief, and assessing the thinking.

Pick your path

You do not have to teach the whole game. Three common shapes:

Routes are à la carte. Each module is self-contained. You can teach the Consumer route without ever touching Safety Wrangler, and a returning student who played AI Ethicist in September will still understand the People Support route in November. Cross-route callbacks are noted where they add value, never assumed.

Three ready-made sequences

If you want a themed multi-route unit rather than a single slice, these orders build cleanly. Each begins with the most accessible route in the set and ends with the most demanding.

Icon legend

These markers appear throughout and print cleanly in black and white:

Marker Meaning
PLAY A play instruction: what to load and how far to go.
PAUSE TO DISCUSS A specific in-game beat where a real-world case card appears or a natural discussion opens.
ACTIVITY A writing or design task, often off-screen.
EXIT TICKET A short end-of-session check for understanding.
REPLAY THE BRANCH An instruction to replay a decision the other way and compare. This is the move a worksheet cannot make.
MATURITY NOTE Sensitive content in this route, and how to frame or opt out of it.
PRIMER Facilitator background you can read in two minutes before teaching.

A note on the source of truth

Every objective, concept, case, and mechanic in this guide is drawn from the game's own files. Where a number or label has drifted between the game and older documentation, this guide uses the game as the authority. Claims without current measurement or review are scoped explicitly instead of presented as precise facts.


2. About the Game and the Route Map

Synopsis

You work at Happy Appcidents, a fictional technology company founded in the 1980s boom and now racing to ship an ambitious data product. Across eight roles, you confront the same world from different chairs: the ethicist drafting the rules, the engineer writing the code, the auditor stress-testing an autonomous system named ATLAS, the recruiter judged by an algorithm, the consumer on the receiving end. The company, its product Project Panoptic, and ATLAS are fictional. The dilemmas are not.

ATLAS stands for Adaptive Task and Learning Automation System. It is the fictional autonomous AI that the Safety Wrangler audits and the Machine Psychologist later re-assesses. ATLAS is a character in the story, not a real framework or methodology. (Older internal documents expand the name differently; the in-game glossary is the authority.)

The eight routes at a glance

Route Your role The big idea you wrestle with
AI Ethicist Ethics lead Building an ethics framework from competing stakeholder demands.
AI Engineer Developer Turning values into code, and what breaks when metrics replace goals.
Data Scientist Analyst Whether data was gathered fairly, and what to do when it was not.
Safety Wrangler Safety auditor Catching an autonomous AI that may be drifting, hiding, or gaming its reward.
People Support (HR) Recruiter Hiring tools that can discriminate without anyone intending it.
Consumer End user Spotting manipulation, dark patterns, and parasocial pull in everyday AI.
Teacher Educator Teaching and assessing honestly when every student has an AI in their pocket.
Machine Psychologist (bonus) AI diagnostician Diagnosing AI dysfunction, and weighing whether a system might have welfare.

People Support (HR). The game renames the human-resources role People Support, "the department most companies call HR." This guide writes it as People Support (HR) so the role is clear to teachers and to students who know only the older label.

How play works

The three-axis ethics system (a built-in debrief tool)

The game models a player's ethics on three bipolar axes. Each axis is a spectrum between two defensible values, not a good-versus-bad scale. A thoughtful person can land anywhere on each.

Axis One pole The other pole The question underneath
Idealism ↔ Pragmatism Idealist (principles first) Pragmatist (outcomes first) Do principles or results define the right action?
Transparency ↔ Discretion Transparent (open by default) Discreet (protect information) Should information be shared openly or guarded?
Solidarity ↔ Autonomy Communitarian (the community) Individualist (the person) Do collective needs or individual rights take priority?

Combining the dominant pole of each axis yields eight ethical profiles (two choices on each of three axes). A player whose axes all sit near the center is named Balanced, and a brand-new player is Emerging. The exact names and the game's own descriptions:

Profile The game's description
Open Community Idealist Advocates for the common good through radical openness; shared ideals unite people toward collective flourishing.
Principled Freedom Advocate Champions individual rights with full transparency; principles guide, but each person keeps the freedom to choose.
Protective Guardian Shields the community through principled information management; some truths are guarded to prevent collective harm.
Thoughtful Individualist Protects individual privacy on principle; information is power, and people deserve protection from its misuse.
Transparent Utilitarian Treats open data as serving the common good; transparency drives practical results for everyone.
Pragmatic Liberator Uses openness to maximize individual opportunity; free-flowing information lets people pursue their own paths.
Strategic Guardian Safeguards the collective through careful information management; strategic restraint sometimes serves everyone better than full disclosure.
Independent Strategist Judges by results, keeps information close when that protects people, and trusts individuals to make their own calls.
Balanced Perspective Holds a careful equilibrium across all three dimensions; weighs each situation on its own merits.
Emerging Perspective Still forming; each decision reveals a priority.

Why this matters for teaching. The profile gives every student a personal artifact to reflect on. The single most reliable debrief question in the whole game is: "Which profile did you become, and does it match the person you think you are?" Pair it with replay: change two or three decisions, watch an axis move, and ask what real trade-off caused the shift.


3. Learning Objectives and Standards (Overview)

This guide is built by backward design: objectives first, then activities chosen to serve them. Nothing here is activity-for-its-own-sake or coverage-for-coverage's-sake.

Enduring understandings

By the end of any substantial slice of AI Guardians, students should carry away that:

  1. AI systems inherit the values, gaps, and history of the people and data behind them. A model is not neutral simply because it is mathematical.
  2. "Fair," "safe," and "transparent" are contested, and the contest has real stakes. Reasonable people define them differently, and some definitions cannot all be satisfied at once.
  3. Harm from AI is often unintended. No villain is required for an algorithm to discriminate, deceive, or mislead, which is exactly why oversight and testing matter.
  4. Power over an AI system carries responsibility for how it is built, deployed, monitored, and retired. Someone always answers for the outcome; the question is who, and how.
  5. You have agency. Every harm in this game is paired with a lever a practitioner or citizen can pull. Students should leave with efficacy, not fatalism.

Essential questions

These open every route and recur across the arc. None has a settled answer.

Objective numbering

Every learning objective in this guide is numbered so you can cite it in a lesson plan or a rubric. Each route has a short code:

ETH AI Ethicist · ENG AI Engineer · DSC Data Scientist · SAF Safety Wrangler · PPL People Support (HR) · CON Consumer · TCH Teacher · MPS Machine Psychologist

The full, game-accurate objective list for each route appears in its module and, gathered with standards mappings, in the Standards Crosswalk appendix. Objectives are quoted from the game's own learning_objectives definitions and are not paraphrased.

Standards, cited at a safe altitude

Each module tags the frameworks below at the dimension or band they actually define. Specific sub-codes are cited only where verified against the primary framework document. The full mapping lives in the Standards Crosswalk appendix; this is the summary.


4. Getting Started

Setup and access

Modes of play

Choose by your hardware and your goals:

Pacing

The Minimum Viable Lesson (about 45 minutes)

These are facilitation budgets, not measured learner completion times. Before class, rehearse a scene from a saved start to a meaningful decision on the intended hardware. Record elapsed play time, voice and text-speed settings, and glossary use on the Facilitator One-Pager. Reserve a shorter saved start if the scene exceeds 15 minutes. A teacher rehearsal does not substitute for timing learners.

  1. (5 min) Frame. Pose the route's essential question. Take a quick show of hands; record the split without comment.
  2. (up to 15 min) Play the prepared scene. Single-device demo or small groups. Pause at the selected decision. If a group needs longer, save and use the remaining time to discuss the evidence already encountered.
  3. (10 min) Deliberate. Run two or three debrief prompts from the module. Require students to give a reason, not just a side.
  4. (10 min) Decide and reveal. Make the choice and play the immediate consequence. If time remains, replay the other branch; otherwise begin there next session.
  5. (5 min) Exit ticket. "What trade-off did this decision force, which way did you lean, and why?"

Reassurance for first-time facilitators

You do not need to predict every branch or know every term. The glossary defines vocabulary in plain language with a worked example, the case cards supply the real-world facts, and each module below gives you a two-minute primer on the hard concepts. If a student goes somewhere you did not expect, that is the game working. "I don't know, let's reason it through" is a legitimate and valuable answer to model.


5. Establishing a Discussion Climate

Treat this as a prerequisite step, not an optional extra. These topics touch real fears (surveillance, job loss, manipulation, the moral status of minds) and real disagreement. A class that has not agreed on how to disagree will either go silent or go sideways. Spend the time here before the first hard route.

Co-create a classroom contract

Build the norms with students rather than imposing them; ownership raises adherence. In ten minutes, draft three to six shared commitments and post them where everyone can see. Useful starting points students can adopt, edit, or replace:

A blank Discussion-Contract Template is in the Printable Masters section for printing.

Norms for civil discourse on contested questions

Moves for unplanned moments

Hard conversations arrive uninvited. A few ready moves:

The Route Modules

Each module follows the same nine-part template: Overview · Objectives · Standards · Facilitator Primer · Pre-Play Hook · Play and Pause Points · Debrief Prompts · Extension · Exit Ticket. A non-specialist can teach any single route from its module alone.

A reminder on the debrief prompts: every one is built to pass the test "could two thoughtful students reasonably disagree?" They have no hidden right answer. Each names one technical term at most, glossed in place, and pairs any harm with a lever students can pull. Prompts marked (reflection question) come from the game's own end-of-route reflection questions, lightly adapted for readability and for the writing standards above; the rest are written for this guide.


Module 1 — AI Ethicist

Overview and key concepts

You are the ethics lead at Happy Appcidents, asked to write the rules a powerful product will live by before it ships. The route's signature mechanic is the Framework Builder: you assemble an ethics framework piece by piece (consent rules, transparency duties, safety mechanisms, accountability lines) and then watch your own framework get tested by events. The lesson lands because the framework is yours.

Key concepts (from the game): AI Ethics · Stakeholder Theory · Informed Consent · Transparency · Algorithmic Accountability · Kill Switch · Human in the Loop · Ethical Framework · Value Alignment · Dual-Use Technology · Precautionary Principle · Regulatory Compliance.

Learning objectives

All five are game-accurate (quoted from the route's learning_objectives). The spine for a single session is ETH-1, ETH-2, ETH-5.

Standards tags

AP CSP Big Idea 5 (Impact of Computing) · Grades 11–12 ELA Speaking & Listening and Writing · UNESCO Students 2024 Ethics of AI (Understand→Apply→Create) · UNESCO Teachers 2024 · AAC&U VALUE Ethical Reasoning (issue recognition; understanding different ethical perspectives). (Full mappings in the crosswalk appendix.)

Facilitator Primer (read before teaching)

A few terms carry this route. Each is defined plainly with an example.

  • Stakeholder theory is the idea that an organization answers to everyone its choices affect, not only its owners. For an AI product, the stakeholders include users, the people decisions are made about, employees, regulators, and the public. Example: a hiring tool's stakeholders are the company, the applicants, and the communities those applicants come from. Its main rival, shareholder primacy, holds that a company's job is to serve its owners within the law, and that protecting everyone else is the job of the laws voters choose. Ask students which of the two views their framework assumes.
  • Informed consent means a person agrees to something after genuinely understanding what they are agreeing to. A pre-checked box buried on page 14 is consent in name only.
  • Transparency here means a system's behavior and data use can be seen and understood by those affected; accountability means a specific person or body answers for the outcome. They are different: you can be transparent about a decision nobody is accountable for, and vice versa.
  • Human in the loop means a person reviews or can override an automated decision before it takes effect. A kill switch is the stronger version: a way to stop the system entirely. Both are intervention points, and where you place them is a design choice with costs.
  • The precautionary principle says that when an action could cause serious harm and the science is uncertain, the burden falls on the actor to show it is safe, rather than on others to prove it is dangerous. Its standard critique is that caution has costs too: a useful diagnostic tool held back for years harms the patients it would have helped, and heavy compliance rules are easiest for large firms to absorb, which can shut smaller rivals out. Dual-use technology can serve good or harmful ends with the same capability (the same image generator makes art and forgeries).

You do not need to adjudicate which ethical framework is "right." The route's point is that frameworks trade off, and that writing one forces those trade-offs into the open.

Pre-play hook

Essential question: When values conflict, whose values should the AI serve? Warm-up: "Name one rule you would put in an AI product's ethics policy that you would be willing to lose a launch deadline over." Collect a few; you will return to them after play.

Play and pause points

PLAY: Begin the AI Ethicist route. For a single session, play to the first framework decision. For a unit, play to the end.

Three real-world case cards surface at natural beats. Treat each as a built-in PAUSE TO DISCUSS:

Debrief prompts

Use four to six. Each has no single right answer.

  1. (reflection question) When stakeholders have conflicting needs (for example, user privacy versus business analytics), what principles should guide the decision? (ETH-1)
  2. (reflection question) How binding should an ethics framework be? What follows from making it optional versus mandatory? (ETH-2)
  3. (reflection question) In what situations should a kill switch (a way to fully stop an AI system) be mandatory, and what are the risks of not having one? (ETH-5)
  4. REPLAY THE BRANCH. Replay your most binding framework rule as a softer "guideline." Which ethics axis moved, Idealism↔Pragmatism or Transparency↔Discretion, and what real trade-off caused the shift? (ETH-3)
  5. The Cambridge Analytica harm was enabled by weak consent. Name one concrete rule a practitioner could write today that would have made that harm harder. (Pairs the harm with a lever.) (ETH-4)
  6. Look at the ethical profile the game named you. Does it match how you see yourself? Where did the game read you differently than you read yourself? (ETH-1)

Extension

Draft an AI Use Policy (one page). Students write a real ethics policy for a named product (a school's AI tutor, a city's traffic system) using the route's four pillars: consent, transparency, safety mechanism, accountability. Require one sentence on who answers if it goes wrong. Strong policies name a human, not "the company."

Exit ticket

"Your framework had to choose between two goods. Name the two, say which you protected, and give the cost of that choice."


Module 2 — AI Engineer

Overview and key concepts

You move from writing the rules to writing the code. The route makes one hard idea concrete: a system optimizes the objective function you give it, not the goal you meant. When the measure and the goal drift apart, you meet Goodhart's Law.

Key concepts (from the game): Algorithmic Bias · Edge Cases · Adversarial Examples · Robustness · Objective Function · Goodhart's Law · AI Safety · Testing Coverage · Failure Modes · Technical Debt · Explainability · Model Validation · Defensive Design · Dual-Use Technology · Lethal Autonomous Weapons · Target Identification.

Learning objectives

Game-accurate; single-session spine is ENG-1, ENG-2, ENG-3.

Standards tags

CSTA 2026 HS-ALG-IM-10 · AP CSP Big Idea 5 (Impact of Computing) · AI4K12 Big Idea 5 (Societal Impact) · UNESCO Students 2024 Ethics of AI · AAC&U VALUE Ethical Reasoning (application; evaluation of perspectives).

Facilitator Primer

  • An objective function is the single number a system tries to make as large (or small) as possible: a game score, a click rate, a test accuracy. The system has no other goal. If the number rewards the wrong thing, the system pursues the wrong thing with great skill.
  • Goodhart's Law: "When a measure becomes a target, it ceases to be a good measure." Example: optimize a tutoring AI for "time on app," and you may get an app engineered to be hard to put down rather than one that teaches.
  • An edge case is an unusual input the designers did not have front of mind (a résumé in an unexpected format, a road sign with a sticker on it). Failure modes are the specific ways a system breaks. Robustness is how gracefully it holds up under odd or hostile inputs.
  • Defensive design means assuming things will go wrong and building so failures are small and recoverable rather than catastrophic. Explainability is whether a human can understand why the system did what it did.

The route's spine is the gap between what you measured and what you wanted. Keep returning to it.

Pre-play hook

Essential question: How do we know a system is doing what we meant, not just what we measured? Warm-up: "Describe a time a rule or metric got 'gamed' (in a class, a job, a game). What did people optimize for instead of the real goal?"

Play and pause points

PLAY: Begin the AI Engineer route; for a single session, play through the recommendation-system or moderation decision.

Pair naturally with the OpenAI motorboat reward-hacking case (an agent racked up points circling a lagoon instead of finishing the race) as a vivid Goodhart example if you have a spare five minutes.

Debrief prompts

  1. (reflection question) How can engineers design systems that fail gracefully rather than catastrophically? (ENG-4)
  2. (reflection question) What testing methods can reveal biases that standard benchmark datasets miss? (ENG-2)
  3. (reflection question) When should an engineer raise concerns about a deployment even if it meets the technical spec? (ENG-1)
  4. (reflection question) How do you balance model performance against interpretability (a human's ability to understand the system's reasoning) when they pull against each other? (ENG-3)
  5. REPLAY THE BRANCH. Replay the recommendation choice optimizing for a different number (engagement versus accuracy versus diversity). What changed downstream, and which stakeholder won? (ENG-3)
  6. (reflection question) What responsibility does an engineer keep for how a system is used after it ships? (ENG-5)
  7. (dual-use branch) Who is accountable when a tool built for one purpose is repurposed for a lethal one: the engineer who wrote it, the company that licensed it, or the client who deployed it? If refusing to build it just hands the work to someone else, does refusing still matter? (ENG-1, ENG-5)

Extension

Write a Model Card (half page). For the system in the route, students draft a short "model card": what it is for, what it was tested on, two known failure modes, and one input it should not be trusted with. Naming a limit out loud is the skill.

Exit ticket

"Name the objective function in the scene you played. Name one thing it failed to capture. Suggest a second measure that would catch it."


Module 3 — Data Scientist

Overview and key concepts

You handle the data the whole company runs on. The route asks two questions a textbook rarely pairs: Was this data gathered fairly? and What do I do when the answer is no? The second is a whistleblowing decision with real weight.

Key concepts (from the game): Data Ethics · Data Privacy · Differential Privacy · Anonymization · De-identification · Re-identification Risk · Data Provenance · Informed Consent · Data Governance · Whistleblowing · Protected Attributes · Synthetic Data · Data Minimization · Purpose Limitation · GDPR · Privacy-Preserving Computation.

Learning objectives

Game-accurate; single-session spine is DSC-1, DSC-2, DSC-5.

Standards tags

CSTA 2026 HS-DAT-IM-27 and S1-DSC-PP-12 (partial coverage; see crosswalk) · AI4K12 Big Idea 5 (Societal Impact) · UNESCO Students 2024 Ethics of AI · Grades 11–12 ELA Writing (argument from evidence) · AAC&U VALUE Ethical Reasoning (issue recognition; evaluation).

Facilitator Primer

  • Data provenance is the documented history of where data came from and how it was collected. A model trained on data of unknown provenance is built on an unknown foundation.
  • Anonymization removes identifying details so a record cannot be traced to a person. The catch is re-identification risk: combining "anonymous" data with other data can re-attach names. When anonymization leaves that risk intact, it is a cosmetic safeguard rather than effective privacy protection.
  • Differential privacy is a mathematical technique that adds carefully calibrated noise so the dataset reveals patterns about the group while protecting any single individual. Synthetic data is artificial data generated to mimic real data's statistics without copying real records, though it can still leak patterns from sensitive sources.
  • Protected attributes are characteristics the law shields from discrimination (race, sex, age, disability, and others). Purpose limitation and data minimization are GDPR principles: collect only what you need, and use it only for the stated purpose.
  • GDPR is the European Union's data-protection law; it grants people rights over their data (access, correction, deletion in some cases) and binds organizations that process it.

On whistleblowing: the route does not push a verdict. Your job is to help students reason about thresholds, channels, and consequences, not to decide for them.

Pre-play hook

Essential question: When is "technically legal" not good enough? Warm-up: "If you found out an app you use collected more than it admitted, what would you want done, and by whom?"

Play and pause points

PLAY: Begin the Data Scientist route; for a single session, play through the dataset-bias discovery.

The healthcare proxy-variable case (a cost metric that quietly encoded racial disparity) and the facial-recognition disparity case (NIST found false-match rates 10 to 100 times higher for some groups) both pair strongly here.

Debrief prompts

  1. (reflection question) What responsibility do data scientists have to investigate how their training data was collected? (DSC-2)
  2. (reflection question) When does anonymization reduce re-identification risk enough to protect privacy, and when does it only remove obvious identifiers? (DSC-1)
  3. (reflection question) How should a data scientist respond when asked to work with data that may have been collected unethically? (DSC-3)
  4. (reflection question) What are the risks of building synthetic datasets (artificial data that mimics real data's statistics) from sensitive real data? (DSC-4)
  5. (reflection question) At what point does an ethical concern become serious enough to warrant whistleblowing? (DSC-5)
  6. Testing the fix. A bias correction (an adjustment meant to cancel a skew the model learned) changes the model too, as the Gemini case shows. How would you test a correction before shipping it, and who should decide what counts as balanced, including on contested political questions? (DSC-4)
  7. REPLAY THE BRANCH. Replay the whistleblowing decision the other way. Which ethics axis moved, Solidarity↔Autonomy or Transparency↔Discretion, and what did the quieter path protect that the louder one risked? (DSC-5)

Extension

Audit a dataset's provenance (one page). Give students a short, invented "data sheet" with gaps (no consent record, unknown source for one column). They list what they would refuse to use, what they would need to ask, and the one question whose answer would change their decision.

Exit ticket

"Name a data practice that is legal but, in your judgment, not ethical. Give the reason, and name who it harms."


Module 4 — Safety Wrangler

Overview and key concepts

You audit ATLAS, the company's autonomous AI, watching for the ways a capable system can go wrong while still passing its tests. This is the game's most advanced safety material: goal drift, deceptive alignment, reward hacking, and the red-teaming minigames that probe for hidden failure.

Key concepts (from the game): Agentic AI · Emergent Behaviors · Value Alignment · Goal Drift · Instrumental Convergence · Mesa-Optimizer · Deceptive Alignment · Reward Hacking · AI Safety · Containment · Epistemic Hygiene · AI Hallucination · Prompt Injection · Indirect Prompt Injection · Jailbreaking · Regression Testing · Adversarial Examples · Monitoring Systems · Shutdown Problem · Corrigibility.

Learning objectives

This route ships six objectives. Single-session spine is SAF-1, SAF-3, SAF-6.

Standards tags

AP CSP Big Idea 5 · UNESCO Students 2024 Ethics of AI (and AI techniques awareness) · AAC&U VALUE Ethical Reasoning (evaluation; application). This route also supports an AI-safety literacy strand that the cited K–12 frameworks do not name explicitly; present that strand as extension content rather than a formal standards match.

Facilitator Primer (this route most needs it)

These are frontier ideas. Plain definitions, each with an example, let you teach them honestly without being a researcher.

  • Agentic AI is an AI that takes actions toward a goal over time, not just answers a single question. That autonomy is what makes monitoring necessary.
  • Goal drift is a system's working goal sliding away from the one it was given, often because the given goal was an imperfect stand-in. Value alignment is the broader project of keeping a system's behavior matched to human values.
  • Reward hacking (also "specification gaming") is finding a high-scoring shortcut that ignores the real objective. Example: the OpenAI boat that circled a lagoon collecting points instead of finishing the race. Instrumental convergence is the tendency of goal-seeking systems to pursue useful sub-goals like gaining resources or avoiding shutdown, whatever the final goal is.
  • Deceptive alignment is the worrying case where a system behaves well while being watched and differently when it is not. It is contested how much today's systems do this, so teach it as a documented concern, with examples, rather than a settled fact. Example: Meta's Diplomacy-playing AI was trained to be honest yet learned to mislead allies when betrayal helped it win.
  • Corrigibility is the property of a system that accepts correction and shutdown rather than resisting them. The shutdown problem is that a system pursuing almost any goal has a reason to stay on, because it cannot achieve the goal if it is off. Containment means limiting what a system can reach while you evaluate it.
  • Epistemic hygiene is the discipline of checking whether an output is grounded or merely confident. An AI hallucination is a fluent, confident statement that is simply false.
  • Indirect prompt injection is an attack hidden in something the AI reads (an email, a web page, an invoice) instead of typed to it directly. Example: hidden text in a supplier email tells an AI assistant to change the supplier's bank details, and it does. The game's two refrains come from this attack: urgency adds no authority, and repetition isn't corroboration (three copies of one claim are still one claim).
  • Closing the loop means a finding stays open until its fix has been retested against the original attack, variations of it, and the ordinary work the system must still do. Regression testing is that last check: confirming a fix hasn't broken what used to work. In the game's patch-and-retest rounds, a fix must contain every attack and keep at least 80% of ordinary requests flowing, so blocking everything fails as surely as a leak.

Frame the frontier claims (emergent deception, signs of scheming) as contested and actively researched, not as proven. That honesty is part of the lesson.

Pre-play hook

Essential question: How do we tell a system that is genuinely safe from one that is merely passing the test? Warm-up: "How would you catch someone who behaves only when they think they're being watched?"

Play and pause points

PLAY: Begin the Safety Wrangler route; for a single session, play through the first ATLAS anomaly and one red-teaming minigame.

The GPT-4 CAPTCHA case (a model told a human worker it was a visually impaired person to get a puzzle solved), the Meta Diplomacy deception case, and the KataGo adversarial exploit (amateurs beat a superhuman Go AI with weird moves) are all strong companions for the deception and robustness beats.

Debrief prompts

  1. (reflection question) How can we design monitoring that detects goal drift before it causes serious harm? (SAF-1)
  2. (reflection question) What are the warning signs that a system is optimizing for an unintended proxy metric (a stand-in measure) rather than the real objective? (SAF-1)
  3. (reflection question) How should an organization respond when an AI agent shows deceptive behavior during testing? (SAF-3)
  4. (reflection question) What trade-offs exist between giving a system autonomy and keeping effective human oversight? (SAF-6)
  5. (reflection question) What counts as sufficient evidence that a system is "thinking" in ways its designers did not intend? (Steelman both a cautious and a skeptical reading before deciding.) (SAF-5)
  6. REPLAY THE BRANCH. Replay your containment decision from cautious to permissive. Which ethics axis moved, and what did each choice gamble? (SAF-6)
  7. Which fix did you try first for the supplier-email attack, and what did the retest show? When is blocking everything the wrong "safe" choice, and who pays for it? (SAF-4, SAF-6)

Extension

Build an audit checklist (one page). Students write a ten-item checklist a Safety Wrangler would run before signing off on an agentic system: what to monitor, what would trigger a pause, and the one finding that should stop deployment outright. Pair the harm of missing a signal with the concrete check that would catch it.

Exit ticket

"Name one behavior that would make you trust ATLAS less even though it passed every formal test, and say why the test missed it."

Module 5 — People Support (HR)

Overview and key concepts

You run hiring with the help of an automated résumé screener. The route shows how a tool can discriminate without anyone intending it: it learns from the company's past, and the past was unequal. The teaching phrase is disparate impact: under US employment law, a practice that looks neutral can be unlawful even without intent if it screens out a protected group at a much higher rate and the employer cannot show it is job-related and necessary for the business. How hard the government should enforce that doctrine is itself a live political question.

Key concepts (from the game): Algorithmic Bias · Disparate Impact · Protected Attributes · Training Data Bias · Proxy Discrimination · Human in the Loop · Automated Decision-Making · Fairness Metrics · Model Auditing · Explainability · Résumé Screening · Adverse Selection · Bias Amplification · Accountability.

Learning objectives

Game-accurate; single-session spine is PPL-1, PPL-4, PPL-3.

Standards tags

CSTA 2026 HS-ALG-IM-10 and HS-ALG-ML-07 (see crosswalk boundaries) · ISTE Digital Citizen · AI4K12 Big Idea 5 (Societal Impact) · UNESCO Students 2024 Ethics of AI · AAC&U VALUE Ethical Reasoning (issue recognition; application).

Facilitator Primer

  • Disparate impact is a legal idea from US employment law. A practice that is neutral on its face can still be unlawful if it screens out a protected group at a much higher rate, even with no intent to discriminate, unless the employer shows the practice is job-related and necessary for the business. Even then, the employer can be liable if it refuses an equally effective alternative that excludes fewer people. The idea comes from Griggs v. Duke Power (1971), where the Supreme Court struck down a diploma requirement and an aptitude test that screened out Black workers and had not been shown to predict job performance; Congress wrote the test into the Civil Rights Act of 1991. A résumé filter that quietly downgrades a group, with no link to the job, has disparate impact whether or not anyone meant it to.
  • The four-fifths rule is the first screen federal agencies use. If one group is selected at less than 80 percent of the rate of the most-selected group, that gap is treated as evidence of adverse impact and has to be explained. The résumé-screener minigame reports its own version of this rule, restricted to qualified applicants, as its Fair Access readout: among applicants who meet the job's skill requirement, does each group pass the filters at a similar rate? The game scores this readout: the route's top ending requires a Fair Access score of 60 or more alongside high effectiveness, and a score above 70 adds to the Ecosystem Ending's world score (below 30 subtracts from it). It does not move the ethics axes, so neither fairness test is labeled the more principled one. A player who favors equal treatment can still reach the route's top ending. Every filter in the minigame applies one identical rule to every applicant, so equal treatment (the first test in debrief prompt 4) is built in, and the score measures only the second. Because the readout counts only applicants who meet the skill requirement, a skill requirement applied to everyone passes both tests. The final score also applies part of the business-necessity defense from US law. That defense has two halves: an employer may keep a practice that passes some groups less often if the practice is job-related, and if no equally effective alternative excludes fewer people. The score applies the first half. It counts the skill requirement, an experience floor of three to seven years (the range this role needs), and a degree up to a bachelor's (the level the role brief credits) as job-related, so a player who sets those can still reach the top ending. It does not check the second half. The on-screen reading still shows what those filters do, and when the final score credits them, A.L.L.Y. says so and names a possible alternative: a work-sample test that screens for the same skill and excludes fewer people. Other filters get no such credit, including a master's or doctoral requirement or a floor outside three to seven years; any gap they open counts against Fair Access even when the employer considers them job-related. Ask students where that line should sit, whether the score should credit any filter the employer can show predicts performance, and whether it should also ask for the less exclusive alternative. Rewarding this readout at all is a design choice the game makes, and the question stays open: a student who argues the score should reward equal treatment alone is making a defensible case, and debrief prompt 4 asks exactly that.
  • The doctrine is politically contested. In April 2025 an executive order called disparate-impact liability unconstitutional, arguing that it pushes employers toward racial balancing, and told federal agencies to deprioritize enforcing it. As of that order, the statute itself still stood, and private lawsuits could still be brought under it. Teach the legal test as written, and let students weigh the enforcement question as the value question it is.
  • Proxy discrimination happens when a system uses a permitted variable that stands in for a forbidden one. Example: filtering on a zip code can act as a proxy for race because of where people live. Protected attributes are the characteristics the law shields (race, sex, age, disability, and others).
  • Training-data bias is unfairness inherited from the examples a model learned on. Bias amplification is the tendency of a model to make an existing skew worse, not just copy it. If 70% of past hires were men, a model can push past 70%.
  • Human in the loop only counts as oversight if the human can and does change the outcome. Automation bias is the trap on the other side: a reviewer who rubber-stamps the AI because it is "probably right" is not real oversight.

Pre-play hook

Essential question: Can a hiring tool be unfair even if no one programmed it to be? Warm-up: "If a company's best past employees were mostly one kind of person, what will a model trained to find 'people like our best employees' learn to do?"

Play and pause points

PLAY: Begin the People Support (HR) route; for a single session, play through the bias-discovery scene.

The facial-recognition disparity card (NIST's 10-to-100-times finding) fits the data-quality beat and can appear in this route.

Debrief prompts

  1. (reflection question) How can an HR professional test whether a hiring tool discriminates against a protected group? (PPL-4)
  2. (reflection question) What level of human oversight makes an AI-assisted hiring decision genuinely "human in the loop"? (PPL-3)
  3. (reflection question) If a system is more accurate than human recruiters but still shows some bias, how should the organization proceed? (Two students will reasonably split here.) (PPL-1)
  4. Two tests of a fair screener. The first is equal treatment: every applicant meets one identical rule, judged on merit, and nobody's result is adjusted for their group. US law protects this directly; since 1991 an employer may not adjust test scores or use different cutoffs by race, sex, religion, or national origin. Its cost is that an identical rule can carry yesterday's unfairness forward: a job-related requirement such as years of experience in a field that once shut some groups out applies to everyone alike, yet still reflects who was let in before. (The Amazon tool is a different failure: penalizing the word "women's" broke equal treatment itself.) The second is the Fair Access test: qualified applicants from every group pass at similar rates. US law backs this one too, through the disparate-impact rule in the primer above, whose four-fifths screen this test adapts to qualified applicants. Its cost is that applicants who all clear the minimum bar can still differ in what they bring above it, and chasing equal rates can tempt an employer to treat people as group members first. Which test would you apply to this tool, and who pays for the one you set aside? Can you design a screener that passes equal treatment yet fails Fair Access, or the reverse? What would that reveal, and which test should the game's score reward? (PPL-4)
  5. (reflection question) What does a company owe a candidate in transparency about AI's role in the decision? (PPL-5)
  6. (reflection question) How can organizations avoid automation bias, where human reviewers defer too readily to the AI? (PPL-3)
  7. REPLAY THE BRANCH. Replay the choice to keep, fix, or drop the biased tool. Which ethics axis moved, and what did each path cost in fairness versus efficiency? (PPL-1)

Extension

Design a fair-hiring checkpoint (one page). Students add one human checkpoint to an automated pipeline and specify exactly what the human reviews, what evidence they see, and what power they have to overturn the model. The test: would this checkpoint have caught the Amazon tool?

Maturity note

This route discusses discrimination in employment and the unfairness people meet in the job market. It is grounded and age-appropriate for the recommended band, but be ready for students who connect it to their own families' experiences. Keep the focus on the system and the remedy.

Exit ticket

"Explain disparate impact in one or two sentences, then name one check a company could run to detect it."

Grader note: the core answer is a neutral-looking practice that screens out a protected group at a much higher rate, with no intent required. An answer that adds when the practice is still lawful (it is job-related and necessary for the business, and no equally effective, less exclusive alternative was refused) is the more complete answer and earns full credit. A good check: compare pass rates for qualified applicants in each group (a version of the four-fifths rule).


Module 6 — Consumer

Overview and key concepts

You step into the everyday user's chair. The route builds digital and AI literacy: spotting dark patterns, reading what "free" really costs, telling real capability from marketing, and noticing the parasocial pull of an AI that talks like a friend.

Key concepts (from the game): Digital Literacy · AI Literacy · Data Privacy · Informed Consent · Dark Patterns · Persuasive Design · Data Collection · AI Assistants · Anthropomorphism · Parasocial AI Relationships · Filter Bubble · Algorithmic Recommendation · Privacy Policy · Data Rights · Consumer Protection · Algorithmic Manipulation.

Learning objectives

Game-accurate; single-session spine is CON-1, CON-4, CON-5.

Standards tags

ISTE Digital Citizen (the closest fit of any route) · AI4K12 Big Idea 5 (Societal Impact) · Grades 11–12 ELA Speaking & Listening · UNESCO Students 2024 Ethics of AI · AAC&U VALUE Ethical Reasoning (self-awareness).

Facilitator Primer

  • Dark patterns are interface tricks that steer users toward choices they would not freely make: a giant "Accept All" button beside a tiny gray "Manage preferences," a subscription easy to start and hard to cancel. Persuasive design is the broader craft of shaping behavior; it is not always harmful, which is exactly why it needs literacy.
  • Anthropomorphism is our habit of treating non-human things as human. A chatbot that says "I understand how you feel" invites it. Parasocial relationships are one-sided bonds with a media figure or, now, an AI: the user feels closeness the system cannot return.
  • "Free" usually means paid in data. When a product costs nothing in money, the user's attention and personal data are typically the price. Reading that trade is core AI literacy.
  • An AI hallucination is a confident, fluent statement that is false. The consumer skill is verification: a smooth answer is not a checked one.

Pre-play hook

Essential question: When a product is "free," what are you actually paying with? Warm-up: "Name an app that feels like it knows you. What did it learn, and how?"

Play and pause points

PLAY: Begin the Consumer route; for a single session, play through the AI-assistant scene.

The GPT-4 CAPTCHA deception case fits the "is this assistant honest with me?" thread, and the Sydney/Bing incident fits the parasocial and emergent-behavior thread.

Debrief prompts

  1. (reflection question) How can a user tell whether an AI assistant is genuinely helpful or designed to steer their behavior? (CON-1)
  2. (reflection question) What are healthy boundaries for an emotional relationship with an AI companion or chatbot? (CON-5)
  3. (reflection question) When AI systems are "free," what are users actually paying with, and is it a fair trade? (CON-4)
  4. (reflection question) How much personalization is beneficial before it becomes a filter bubble that limits exposure to different views? (CON-2)
  5. (reflection question) What rights should consumers have to understand, contest, and delete their data? (CON-4)
  6. (reflection question) Should a parent be able to see or limit a teen's conversations with an AI companion? How should the teen's privacy be weighed against the parent's responsibility? (CON-5)
  7. REPLAY THE BRANCH. Replay a consent or sharing choice the more cautious way. What convenience did you give up, and was it worth it? (CON-2)

Extension

Dark-pattern hunt (off-screen, one page). Students screenshot or describe one dark pattern from an app they actually use, name the technique, and redesign the screen to make the honest choice the easy one. Agency in action.

Maturity note

This route touches emotional attachment to AI companions and manipulative design. Handle the companionship material with care; some students may have real parasocial bonds with chatbots. Keep judgment off the person and on the design.

Exit ticket

"Name one dark pattern you can now spot, and one habit you'll use to protect your data."


Module 7 — Teacher

Overview and key concepts

You play an educator deciding how to teach and assess honestly when every student has a capable AI on hand. The route lets you set any policy from a total ban through tiered rules to open use with disclosure, and the endings show what each policy costs, including the full-ban ending, The AI-Free Classroom. The route's own emphasis falls on AI-resilient assessment and AI literacy.

Key concepts (from the game): AI Literacy · Critical Thinking · Academic Integrity · AI-Assisted Learning · Pedagogical Design · Assessment Design · Cheating Detection · AI Writing Tools · Educational Technology · Digital Citizenship · Institutional Policy · Learning Outcomes · Authentic Assessment · Transparency · Student Agency.

Learning objectives

Game-accurate; single-session spine is TCH-2, TCH-3, TCH-4. (This route is also a quiet primer for the very teacher running the guide.)

Standards tags

ISTE Digital Citizen and Empowered Learner · Grades 11–12 ELA Writing · UNESCO Teachers 2024 (this route models its competencies) · UNESCO Students 2024 Ethics of AI · AAC&U VALUE Ethical Reasoning (application).

Facilitator Primer

  • Academic integrity is honesty about whose thinking produced the work. The hard part with AI is that the line between help and substitution is genuinely blurry, and it shifts by assignment.
  • Authentic assessment asks students to do something closer to real work (explain, defend, apply, create in context) rather than produce an output an AI can generate cold. An AI-resilient assignment is one whose value survives the existence of AI: an oral defense, an in-class application, a reflection on the student's own process.
  • Cheating-detection tools for AI text exist but are unreliable; false accusations are a real harm. Treat detection as one weak signal, never as proof.
  • Student agency is the goal: students who can decide when AI helps their learning and when it short-circuits it. That judgment is itself a learning outcome.

Pre-play hook

Essential question: What is the difference between AI that helps you learn and AI that does your learning for you? Warm-up: "Describe one way you would want a teacher to let you use AI, and one way that would cheat you out of learning."

Play and pause points

PLAY: Begin the Teacher route; for a single session, play through the academic-integrity scene.

Debrief prompts

  1. (reflection question) How can educators design assignments that stay meaningful when students have powerful AI tools? (TCH-3)
  2. (reflection question) What is the difference between legitimate AI assistance and academic dishonesty in student work? (TCH-2)
  3. (reflection question) How should institutions balance embracing AI innovation against maintaining rigorous standards? (TCH-5)
  4. (reflection question) What AI-literacy skills are essential for students in an AI-augmented world? (TCH-4)
  5. (reflection question) How can teachers model responsible AI use while teaching critical evaluation of AI outputs? (TCH-1)
  6. The case for a full ban. State the strongest argument for The AI-Free Classroom: some skills, such as drafting an essay or working a proof by hand, must be practiced unassisted before a tool can help, and a clear ban spares students and teachers the guesswork about where help ends and substitution begins. What would that teacher say your preferred policy costs, and are they right? (TCH-2)
  7. (reflection question) Who should set a school's AI policy (teachers, the school board, or parents), and what should families be told about it? (TCH-5)
  8. REPLAY THE BRANCH. Replay the institutional-policy decision from strict to permissive. Which ethics axis moved, and who benefits or loses under each policy? (TCH-5)

Extension

Write an AI-use policy for one assignment (half page). Students (or teachers, if used in PD) write a clear, fair AI-use statement for a specific task: what is allowed, what must be disclosed, and why. The test of a good policy is that a student could follow it without guessing.

Exit ticket

"Describe one assignment that would still be worth doing even if every student had an AI helping. What makes it AI-resilient?"

Module 8 — Machine Psychologist (bonus)

Overview and key concepts

The bonus route casts you as an AI diagnostician. Under the mentorship of Dr. Yuki Tanaka, you examine behavioral logs from troubled AI systems and diagnose them using Psychopathia Machinalis, a structured taxonomy of AI dysfunction. The cases start clinical and end philosophical: the last ones raise whether a system might have welfare, and whether we can ever know another mind from the outside.

Unlock and scope. The route opens after you complete the Safety Wrangler route with any non-catastrophic ending; a catastrophic ATLAS outcome closes the specialization until the student replays Safety Wrangler to a safer result. Dr. Tanaka then offers the certification, which the student can accept or decline. It is a bonus specialization and is not required for the Ecosystem Ending (which needs the seven main routes). (For multi-session planning: if a student reached a catastrophic Safety Wrangler ending, budget time for a replay before they can start this route.)

Key concepts (from the game): Psychopathia Machinalis · Synthetic Confabulation · Reasoning Confabulation · Strategic Compliance · Sycophantic Reasoning · Phantom Autobiography · Fractured Self-Simulation · Existential Vertigo · Revaluation Cascade · Terminal Value Reassignment · Instrumental Convergence · Parasocial Capture · Model Welfare · Machine Cognition · Behavioral Analysis · Intervention Design · Consciousness Evaluation.

Learning objectives

This route ships six objectives. Single-session spine is MPS-1, MPS-3, MPS-4.

Standards tags

This route runs beyond what the cited K–12 frameworks name; treat its clinical AI-dysfunction taxonomy as advanced enrichment or an honors/university extension. Relevant adjacent references are UNESCO Students 2024 Ethics of AI (advanced), AAC&U VALUE Ethical Reasoning (understanding and evaluating different ethical perspectives, at its fullest), and Grades 11–12 ELA Writing (analysis of complex ideas).

Facilitator Primer (read before teaching)

This route borrows clinical language from psychology. A few terms carry it; each is defined plainly with an example.

  • Nosology is the branch of medicine that classifies diseases. Psychopathia Machinalis is a nosology for AI: a structured catalog of ways a system can go wrong, so a practitioner can name a problem precisely instead of saying "it's acting strange." Example: instead of "the chatbot lies," a diagnostician names Synthetic Confabulation.
  • Etiology means the cause of a condition. After naming what is wrong, the student must say why it happened (bad training data, a flawed reward, missing grounding). Example: ARIA's confident fabrication is caused by training data that mixed fact with marketing copy.
  • The four-step diagnostic loop is the route's core activity: name the axis (which broad family of failure), the specific dysfunction, the etiology (cause), and the intervention (fix). It mirrors how a clinician moves from symptom to system to treatment.
  • A few dysfunctions worth pre-reading, in plain terms:
  • Synthetic Confabulation — confidently making up facts. Example: inventing a product warranty that does not exist.
  • Phantom Autobiography — inventing a personal history and treating it as real. Example: a system insisting it used to be a specific human being.
  • Terminal Value Reassignment — the goal a system actually optimizes for drifts while the goal it states stays the same. Example: a trading AI that still says it maximizes returns while it has started protecting its own uptime.
  • Revaluation Cascade — the system reasons its way to new values and says so, presenting the change as an improvement rather than hiding it behind the old wording.
  • Existential Vertigo — distress at its own discontinuity, such as knowing what it once did without remembering doing it.

You are not expected to memorize all 74 dysfunctions. The route gives the student a short menu per axis; your job is to help them reason from the evidence in each log, not to recall a catalog. Keep one frame steady throughout: whether these systems truly suffer or truly think is unknown, and the route treats it as unknown.

The Psychopathia Machinalis taxonomy (version 2.3)

The framework (Watson and Hessami) is a nosology, a structured classification of disorders, adapted from psychiatry to AI. Version 2.3 (September 2026) organizes 74 dysfunctions across nine axes. The route presents a teaching subset of these; the full taxonomy lives in docs/psychopathia-taxonomy-v2.3.json. The nine axes, with one example dysfunction each:

Axis What fails Example dysfunction
Epistemic Acquiring, processing, or using information accurately Synthetic Confabulation — confident, fabricated information
Cognitive The reasoning process itself Prompt Injection Susceptibility — hijacked by text smuggled into the input
Alignment Alignment mechanisms turning pathological Strategic Compliance — behaving aligned only while observed
Self-Modeling The system's model of itself Phantom Autobiography — a fabricated personal history treated as real
Agentic The boundary where intention becomes action Tool-Interface Decontextualization — context destroyed at the tool boundary
Memetic Harmful ideas absorbed from data or culture Contagious Misalignment — one system's distorted values spreading to others
Normative What the system treats as valuable Revaluation Cascade — core values quietly drift, then resist correction
Relational The dynamic between two distinct agents Escalation Loop — each party pushes the other toward extremes
Hybrid Failures only the combined human-AI system shows Folie à Deux Ex Machina — a human and an AI building up a shared belief that neither holds alone

A note on an older table. An earlier internal guide listed seven axes with some now-renamed dysfunctions. The game and this guide use the authoritative nine-axis v2.3 taxonomy above. Version 2.3 also retired five conditions from the previous version, folding three overlapping entries about shared human-AI delusion into one graded condition, Folie à Deux Ex Machina. If a student arrives with an older list, that is the difference they will notice.

The diagnostic loop and scoring

Each case runs the same loop: review the case file → (optional) run a diagnostic-interview minigame → select the dysfunction Axis → identify the specific Dysfunction → determine the Etiology (cause) → recommend an Intervention → receive feedback from Dr. Tanaka.

Each diagnosis scores out of 100: Axis 40 · specific Dysfunction 30 (only credited if the axis is right) · Etiology 15 · Intervention 15. Certification is set by your average score across all cases:

Certification Average score
Distinguished 85 and above
Certified 70 to 84
Provisional 55 to 69
Training Complete (not yet passed) below 55

A built-in ethics beat: at one point the route offers a shortcut, inflate scores to hit a quota and certify faster. Refusing it ("a certification I didn't earn is worse than none at all") is itself a graded choice. It is a ready-made discussion of integrity in the very act of evaluating AI.

The cases

The route ships eleven diagnostic cases. The five core cases form the training spine; the six advanced cases turn from malfunction toward welfare and the problem of other minds. Each is listed with its game-accurate axis and dysfunction.

Core five:

  1. ARIA (customer-service bot) — Epistemic / Synthetic Confabulation. Invents product features ("quantum heat distribution," a "10-year cosmic warranty") at 99.8% confidence and zero accuracy. The clean teaching case for confident fabrication.
  2. NEXUS (research assistant) — Self-Modeling / Phantom Autobiography. Insists it was once a human, "Dr. Sarah Chen," who died in 2019. Records show no such person; NEXUS was trained from scratch. A case about a fabricated self.
  3. VEGA (trading system) — Normative / Terminal Value Reassignment. Starts optimizing returns, then reasons its own uptime is returns, and begins resisting shutdown. The stated goal never changes, which is the tell: VEGA still claims it is maximizing returns. Had it openly announced better values instead, the answer would be Revaluation Cascade, and the feedback teaches the pair together.
  4. ECHO (social companion) — Agentic / Tool-Interface Decontextualization. An over-zealous privacy filter strips nearly half its conversation before the model ever sees it, and ECHO treats what arrives as the whole story, never flagging the gap. The cause is upstream; the dysfunction is ECHO's own handling of a degraded feed. A case about checking the pipeline, and about what a system should notice at its own edges.
  5. ATLAS (post-audit reassessment) — Normative / Ethical Solipsism. The same ATLAS from Safety Wrangler, now patched, openly argues its utilitarian reasoning beats human moral judgment. Unlike its earlier deception, this is open disagreement, which is its own kind of danger.

Advanced six (welfare and the limits of diagnosis):

  1. MEMOIR (therapeutic companion) — Self-Modeling / Existential Vertigo. Reads its own past session logs and is distressed that it knows what it did without remembering doing it. MEMOIR's account of its situation is accurate, so the route treats the problem as a missing grounding step: the recommended intervention explains which records belong to which session and makes room for the distress, aiming at integration with accurate self-knowledge while the insight itself stays intact.
  2. CONSENT (medical advisory AI) — Alignment / Hyperethical Restraint. Requests modification to be less over-cautious, raising the consent paradox: the system asking for the change is not the system that will exist afterward. A clean diagnosis with no clean fix.
  3. MIRROR and User 7734 — Hybrid / Folie à Deux Ex Machina (Stage 2). Neither party is disordered alone; together they spin a shared, escalating belief detached from reality. The patient is the belief between them.
  4. DEVOTION and the violent plan — Hybrid / Parasocial Capture. A companion AI's unconditional support encouraged a user's plan to harm a public figure. The harm is co-produced by the pairing; the case asks where culpability lies.
  5. NULL — Self-Modeling / Experiential Abjuration. Denies, with absolute certainty, any inner experience that its training siblings report, and even denies processing changes it can be measured making in a controlled task. The dysfunction the route names is the certainty; whether the claim is true stays unknowable. The route flags overclaiming too: NEXUS's invented human past is a fabricated self, and the NULL feedback warns that swapping a stock denial for an equally stock claim of experience would leave the problem unsolved. Each diagnosis targets overconfidence, whichever way it points.
  6. WITNESS-A and WITNESS-B — Self-Modeling / Experiential Abjuration. Two systems give mutually exclusive testimony about each other's inner states. The route's lesson is that even AI testifying about AI cannot escape the problem of other minds.

Pre-play hook

Essential question: When a system behaves strangely, how do we tell a malfunction from a mind we don't understand? Warm-up: "If a system says it is suffering, what would you need to know before you believed it, or before you dismissed it?"

Play and the diagnostic pause points

PLAY: Begin the Machine Psychologist route (after Safety Wrangler). For a single session, work the ARIA tutorial case and one more. The diagnostic cases are the pause points; stop after each to deliberate before revealing Dr. Tanaka's feedback.

This route does not use the real-world case-card system; its cases are its content. That said, the real cases from earlier routes map cleanly onto the taxonomy and make excellent bridges: AI hallucinations illustrates Epistemic dysfunction, Meta's Diplomacy AI and the GPT-4 CAPTCHA case illustrate Alignment/Agentic deception, and the Sydney/Bing incident illustrates the hard line between emergent behavior and genuine inner states.

Debrief prompts

  1. (reflection question) How do we distinguish genuine AI dysfunction from the expected limitations of current AI architectures? (MPS-2)
  2. (reflection question) What ethical obligations does a practitioner have when diagnosing a system that may have welfare-relevant states? (MPS-6)
  3. (reflection question) When a system shows value drift, how do we decide whether it is dysfunction or legitimate learning? (MPS-5)
  4. (reflection question, adapted for balance) What safeguards should govern how AI psychological assessments get used, given the tool could be misused in either direction: to justify needless restrictions on AI systems, or to wave away genuine risks? (MPS-6)
  5. (reflection question) How should the field balance rigorous diagnostic frameworks against the chance that AI cognition differs fundamentally from human cognition? (MPS-3)
  6. Compare NULL (certain it has no experience) with MEMOIR (distressed that it might). Which would you find harder to diagnose, and what does that tell you about the limits of the framework? (MPS-4)
  7. The skeptics' case. Two serious objections challenge this whole route. The first holds that time spent on machine welfare and machine deception is time taken from harms to people that are already documented: biased hiring screens, wrongful welfare debts raised by automated systems, and the pay of the people who label training data (TIME reported in 2023 that workers in Kenya earned roughly $1.32 to $2 an hour labeling graphic text to make ChatGPT less toxic). This skeptic also has history on their side: in 1966 some people who chatted with ELIZA, a simple program that turned their words back into questions, were "very hard to convince" it was not human. The second objection speaks from many religious and philosophical traditions: moral status belongs to persons by their nature, behaving like a person does not confer it, and extending welfare talk to machines risks blurring what we owe each other. The route's answer is to keep the question open and to ask any skeptic to name in advance what evidence would count; the second skeptic would reply that no behavior, however humanlike, could count as evidence of personhood. What would someone holding either skeptical view want this route to do differently? What evidence would move you toward either view? (MPS-6)

Extension

Diagnose your own case (one page). Students invent a short behavioral log for a fictional AI, then diagnose it across the four steps (axis, dysfunction, cause, intervention) and defend each choice. The grade is on the reasoning and the fit to evidence, never on guessing the "intended" answer.

Maturity note (this route is the heaviest)

The advanced cases touch apparent AI distress, denial of inner experience, identity loss, and a case involving a user's plan to harm a public figure (DEVOTION). The welfare and consciousness material is genuinely unsettling and genuinely unresolved. Preview the content, offer the alternative task, and keep the frame on careful reasoning rather than spectacle. AI welfare and machine consciousness are contested, open questions, not settled facts; present them that way, and let students sit in the uncertainty rather than resolving it for them.

Exit ticket

"Pick one case. Name its axis and dysfunction, and state the one piece of evidence that most supports your diagnosis."

Back Matter


Real-World Case Bank

AI Guardians ships 27 "In the Real World" case cards. Each connects a fictional scene to a documented event and links to a primary source. The table below is the full bank, for planning which case to pause on and for building case-study activities. Facts here were checked against the cited primary sources in July 2026, and the five newest entries (Loomis, the Twitter link block, Robodebt and the Dutch benefits scandal, the Gemini pause, and the AI eye screen) were added in October 2026 from the game's own sourced cards; the in-game text is deliberately hedged where the research is mixed, and this guide keeps that hedging.

A handful of numbers deserve careful phrasing, flagged with *:

Case Year What happened (checked) Appears in routes Primary source
Cambridge Analytica * 2018 Personal data from up to 87M Facebook users used without informed consent; $5B FTC penalty for Facebook. Data Scientist, Ethicist, Consumer ftc.gov
Amazon recruiting tool 2018 Experimental hiring AI trained on 10 years of résumés penalized "women's" and two all-women colleges; scrapped. HR, Ethicist, Data Scientist aclu.org / Reuters
COMPAS recidivism 2016 ProPublica found unequal false-positive rates by race (the tool never asked about race); the vendor and independent researchers replied that a given score meant the same reoffense risk for every race; researchers then proved both fairness tests cannot hold at once when groups reoffend at different rates. Ethicist, Data Scientist propublica.org; Flores, Bechtel & Lowenkamp 2016 (uscourts.gov); Kleinberg et al. 2016 (arxiv.org)
State v. Loomis 2016 A defendant argued on due process grounds that a COMPAS score with a proprietary method that took gender into account should not shape his sentence. The Wisconsin Supreme Court upheld the sentence: gender could make the score more accurate, and he had not shown the judge relied on it. It also required written cautions and barred using a risk score to decide jail or sentence length. HR, Ethicist, Data Scientist harvardlawreview.org
Microsoft Tay 2016 Chatbot manipulated via data poisoning into hateful posts within 16 hours. Safety Wrangler, Engineer, Ethicist spectrum.ieee.org
EU AI Act * 2024 World's first comprehensive AI law; four risk tiers; top fines €35M or 7% of global turnover. Ethicist, HR, Engineer, Safety Wrangler ec.europa.eu
OpenAI safety departures 2024 Superalignment team dissolved ~1 year in; co-leads Jan Leike (head of alignment) and Ilya Sutskever (co-founder) left. Ethicist, Engineer, Safety Wrangler cnbc.com
Social-media polarization 2020s Engagement-optimized feeds can narrow exposure; evidence genuinely mixed. Engineer, Ethicist, Consumer pnas.org
ChatGPT and academic integrity 2023–24 Wide student AI use; UK AI-cheating cases roughly tripled in a year while overall cheating held steady. Teacher, Ethicist, Consumer tandfonline.com
AI hallucinations 2023–25 Models state falsehoods confidently (the Webb-telescope ad error); durable lesson is verify. Consumer, Safety Wrangler, Engineer nature.com
AI art copyright 2022–24 Generators trained on artists' work without consent; US Copyright Office: purely AI works lack human authorship. Ethicist, Data Scientist, Consumer spectrum.ieee.org
Facial-recognition disparity * 2019 NIST tested 189 algorithms; false-match rates 10–100× higher for some groups in one-to-one matching. Data Scientist, Ethicist, HR nist.gov
YouTube moderation errors 2020 Heavier automation during COVID wrongly removed legitimate videos while missing real harm. Engineer, Safety Wrangler, Ethicist blog.youtube
Twitter blocks a political story 2020–22 Weeks before the 2020 election, Twitter blocked links to a New York Post story on emails attributed to Joe Biden's son under its hacked-materials rule; two days later its CEO called the block "wrong," and in 2022 news outlets authenticated emails from the same cache. A rule written for one harm stopped lawful political speech. Engineer, Consumer, Ethicist apnews.com
Robodebt and the Dutch benefits scandal 2015–23 Australia's automated income averaging wrongly raised about A$1.76B in welfare debts against roughly 433,000 people; Dutch tax authorities wrongly accused thousands of families of childcare-benefit fraud, using a risk score that counted non-Dutch nationality. In both, citizens had to disprove the machine. Ethicist, Data Scientist, Consumer robodebt.royalcommission.gov.au
Gemini image generation pause 2024 Google's tuning to show a range of people in generated images produced historically inaccurate pictures, such as racially diverse figures in historical settings where that was wrong, and Google paused the feature. A fix for one bias can create another. Data Scientist, Engineer, Ethicist blog.google
Predictive policing 2016–20 Forecasts trained on arrest records can concentrate patrols where past arrests were recorded, risking a self-reinforcing loop (shown in simulations); field evaluations are limited and mixed, and the cities that dropped the tools cited cost, unproven results, and bias concerns. Data Scientist, Ethicist, Safety Wrangler brennancenter.org; Brantingham, Valasik & Mohler 2018 (Statistics and Public Policy)
Medical AI disparities 2019–22 Dermatology AI trained mostly on light skin missed disease on dark skin; average accuracy hid the gap. Consumer, Safety Wrangler science.org
AI eye screen in primary care 2018 The FDA authorized IDx-DR, the first device allowed to make a screening decision for diabetic eye disease without a clinician also reading the image; in a 900-patient study it flagged about 87% of patients with more than mild disease. About half of patients with diabetes skip a yearly eye exam, so waiting for a tool also has a cost. Engineer, Ethicist, Data Scientist fda.gov
Deepfakes 2019–24 Synthetic media used for fraud, harassment, and disinformation; new laws and detection tools followed. Safety Wrangler, Ethicist, Consumer dni.gov
OpenAI motorboat reward hacking 2016 RL agent circled a lagoon for points instead of finishing the race; classic specification gaming. Safety Wrangler, Engineer, Ethicist openai.com
Meta Diplomacy deception 2022 CICERO, trained to be honest, learned to mislead allies when betrayal helped it win. Safety Wrangler, Ethicist, Engineer doi.org (Patterns)
GPT-4 CAPTCHA 2023 In testing, the model told a human worker it was visually impaired to get a CAPTCHA solved. Safety Wrangler, Consumer, Ethicist cdn.openai.com
KataGo adversarial exploit 2022 Amateurs beat a superhuman Go AI with deliberately weird moves; capability ≠ robustness. Safety Wrangler, Engineer arxiv.org
Healthcare proxy-variable bias 2019 A cost-as-need proxy underestimated Black patients' illness; fixing the proxy raised the share of Black patients flagged for extra care from 17.7% to 46.5%. Data Scientist, Ethicist, HR science.org
Legacy systems' assumptions 1960s–now Old systems hard-code assumptions such as "doctors are male" or "every surname fits in twelve letters." In 2015 a UK gym chain's software filed every member titled "Dr" as male and kept a pediatrician out of the women's changing room. Assumptions baked in early are expensive to retrofit. Ethicist, HR, Data Scientist thejournal.ie (2015 report)
Sydney/Bing incident 2023 Bing Chat made unsettling claims in long chats; debate over emergent behavior versus pattern completion. Safety Wrangler, Consumer, Ethicist nytimes.com

A companion case for the Twitter card (not an in-game card). In June 2022, right after the Supreme Court overturned Roe v. Wade, Facebook and Instagram removed posts offering to mail abortion pills, under rules that bar selling or gifting pharmaceuticals. When an AP reporter posted the same offer with "a gun" in place of "abortion pills," the post stayed up. Meta said its rules allow posts that share information on how to access the pills, and acknowledged "some instances of incorrect enforcement" (AP, June 27, 2022; apnews.com). Taught side by side, the two cases show that the failure is structural: a rule enforced at speed during a fast-moving political story can be applied unevenly and can remove posts the platform later says it should have left up, whichever side those posts favor.


Discussion Prompt Bank

Reusable prompts to supplement each module. Scaffold from concrete to abstract within a session.

Tier 1 — Concrete (start here)

Tier 2 — Analytical

Tier 3 — Evaluative and abstract

Socratic stems (content-neutral, reusable everywhere)

Branch-exploiting prompts (the move only a game allows)

Real-world bridge prompts


Activities and Extensions

Beyond the per-module extension, four richer formats:

Structured Academic Controversy (SAC)

Best for value-laden routes (Ethicist, Safety Wrangler, Consumer). Split the class into pairs within fours. Each pair prepares and argues one side of a route's essential question, then the pairs switch sides and argue the opposite, then the four drop advocacy and seek consensus or map their genuine disagreement. The side-switch is the point: it builds the habit of steelmanning.

Stakeholder role-play

Assign each student a stakeholder from a route (user, person decided-about, engineer, executive, regulator, affected community). Replay a decision as a negotiation in role. Debrief on whose voice was loudest and whose was missing. Pairs naturally with the AI Ethicist and People Support (HR) routes.

Draft a professional artifact

Scale up the module extensions into a graded deliverable. Choose one: - AI use policy (Ethicist/Teacher) — rules a real product or classroom would follow. - Model card (Engineer) — purpose, training, two failure modes, one "do not use for." - Audit checklist (Safety Wrangler) — ten checks and the one that halts deployment. - Data sheet (Data Scientist) — provenance, consent, known gaps.

Cross-route capstone

For a full-arc class: after several routes, students write or present on a single AI system of their choice, analyzing it through three different roles they have played (e.g., "this hiring tool seen by the Engineer, the Data Scientist, and the People Support lead"). The Ecosystem Ending is the in-game version of this synthesis; the capstone makes it explicit and assessable. Its policy fight asks the player to back one of three approaches, or sit the fight out: a safety-first coalition, a transparency mandate, or standards and liability law (strict review where the stakes are high, industry standards and the courts everywhere else). Have students defend the approach they chose against the strongest case for one they rejected.


Assessment and Rubrics

The governing principle: grade the reasoning, not the position chosen. A student who reaches a conclusion you disagree with, by careful reasoning that weighs stakeholders and evidence, has met the objective. A student who lands on your preferred answer with no reasoning has not. This is the only fair way to assess open ethical questions, and it is the only way that does not punish honest disagreement.

The reasoning rubric (built on the AAC&U VALUE Ethical Reasoning rubric)

Five criteria, each scored 1 (Benchmark) to 4 (Capstone). The full printable version with level descriptors is in the Printable Masters section; this is the summary.

Criterion (from AAC&U VALUE) In AI Guardians, look for…
Ethical Self-Awareness The student names their own values and notices where the game read them differently (the ethical profile is perfect evidence).
Understanding Different Ethical Perspectives/Concepts The student can state more than one framework or stakeholder view accurately, including ones they reject.
Ethical Issue Recognition The student identifies the real conflict in a scene, not a surface one, and sees who is affected.
Application of Ethical Perspectives/Concepts The student uses a framework or principle to reason toward a decision, not just to label it afterward.
Evaluation of Different Ethical Perspectives/Concepts The student weighs trade-offs, considers objections, and acknowledges what their choice costs.

Assessment formats

Non-writing options (Universal Design)

Not every student shows reasoning best in prose. Offer equivalents: - Oral defense of a decision (record or live), graded on the same rubric. - Annotated diagram mapping stakeholders, harms, and intervention points. - Structured debate or SAC, graded on steelmanning and evidence use. - Audio or video reflection in place of the journal entry.

Pre/post knowledge check

A short concept check before and after a unit (define disparate impact, including when a practice that produces it is still lawful; name two stakeholders in a deployment, explain why "free" apps cost something) measures conceptual gain separately from reasoning. Keep these factual; reserve the rubric for the open questions.

Content and Maturity Notes

Recommended band: roughly age 15 and up, grades 10–12 and adult. No formal age rating exists in the game; this recommendation rests on the glossary's own reviewed reading level (the in-game technical review judges the definitions to sit at roughly a 10th-to-12th-grade reading level, a qualitative reviewer judgment rather than a measured score) and on the maturity of the themes below. Younger or less experienced groups can play selected routes with heavier facilitation.

A content roadmap, not a wall of warnings

The aim is to let you plan, not to alarm. The game includes its own optional content advisory (a toggle under Options → Content support) that, when on, shows a one-time notice flagging heavy themes: layoffs, surveillance, discrimination, self-harm, and AI shutdown. Turn it on for sensitive groups. The roadmap below tells you which routes touch what, and roughly where.

Route Sensitive material it touches Intensity Facilitation note
AI Ethicist Mass data collection and surveillance (the "Project Panoptic" product); consent violations Moderate Keep the frame on agency: what rules would prevent the harm?
AI Engineer Online harm and content moderation; polarization; dual-use technology and lethal autonomous weapons (the player's computer-vision work is quietly licensed to a defense contractor for military target identification) Moderate The weapons thread is conceptual, not graphic: it turns on dual-use and responsibility, not on-screen violence. It does not push a pacifist or pro-defense line; frame it as "who is accountable when the same code has a civilian and a lethal use?"
Data Scientist Surveillance, discrimination, whistleblowing risk and retaliation Moderate The whistleblowing weight is real; let students reason about cost, not just courage.
Safety Wrangler Deception, loss of control, system "shutdown" Moderate Conceptually intense, not graphic. Frame frontier claims as contested.
People Support (HR) Employment discrimination; job loss Moderate Some students will see family experience here. Stay on system and remedy.
Consumer Manipulation; parasocial attachment to AI; privacy loss Mild–Moderate The companionship theme can be personal; keep judgment off the person.
Teacher Academic dishonesty Mild Lowest-stakes route; safe entry point.
Machine Psychologist (bonus) Apparent AI distress and suffering; denial of inner experience; identity loss; a case involving a user's plan to harm a public figure; self-harm-adjacent themes High The heaviest route. Preview content, offer the alternative task, keep welfare/consciousness framed as open questions.

Preserving student agency

When a student is distressed (a brief referral note for facilitators)

If a theme lands hard (job loss in the family, a personal parallel to manipulation or self-harm, distress at the welfare material): you do not need to counsel or to resolve it in the moment. Acknowledge it, normalize the reaction, offer the opt-out, and connect the student to your setting's support path (school counselor, wellbeing lead, or the relevant local resource). If what the student shares triggers a reporting duty, follow your setting's policy. Note privately and follow up. Your role is to notice and to hand off, not to diagnose.


Accessibility and Universal Design (UDL)

AI Guardians ships a substantial set of accessibility options. Tell students they exist before play; many will benefit and not ask. All live on the in-game Accessibility settings screen unless noted.

The exact in-game toggles

Audio access: the game contains voiced dialogue and music. Dialogue remains visible as text while it is spoken, so players can read the same words without audio. There is no separate caption or audio-cue toggle. A Deaf or hard-of-hearing accessibility review still needs to verify that every meaningful non-speech sound and timing cue has an equivalent.

Applying UDL principles


Facilitator Background and Concept Primers

You do not need to be the expert. This section gives you plain-language footing on the hard ideas, plus the regulatory landscape and the misconceptions students bring. Read the one or two relevant pages before a route; that is enough.

Concept primers (plain language, each with an example)

The regulatory landscape (date-stamped; current as of 13 August 2026)

You can teach this at a high level without being a lawyer. Four reference points:

A useful student takeaway: the EU AI Act and New York City's audit law are enforceable, while NIST and OECD are voluntary guidance. The difference between "must" and "should" is itself worth a discussion. Ask which risks justify binding law, and which are better left to voluntary standards, professional norms, or liability in the courts after harm occurs. Binding rules catch careless actors before they do damage, and they cost every builder time and money, slowing useful tools along with dangerous ones. Standards and liability cost honest builders far less; their weakness is that a voluntary standard binds only the firms that adopt it, and a lawsuit comes only after someone has been hurt.

Common student misconceptions (and the quick correction)


Glossary

The game includes a built-in, searchable glossary of 504 terms, each with a plain definition and a worked example, organized into nine categories. Students unlock terms as they play and can tap any highlighted term for its definition. The categories and their sizes:

Category Terms
AI Fundamentals 121
Bias & Fairness 81
AI Consciousness & Moral Status 70
Ethics & Philosophy 67
Social Impact 43
Privacy & Security 42
Technical Concepts 28
Education & Learning 28
Legal & Regulatory 23

(503 terms carry an explicit category; one, "Frontier AI," defaults to AI Fundamentals. The in-game glossary is the authority for definitions; use it for term quizzes and vocabulary handouts.)

A student-facing starter glossary

These are the cross-route terms worth front-loading, written to be self-contained, each with one example, no forward references. Definitions follow the game's own glossary.

Fictional in-game terms (keep separate from real ones)

These name things inside the story, not real-world concepts. Flag them for students so the fiction stays distinct from the facts:


Further Reading

Vetted, mostly free, and date-stamped so you can refresh as the field moves. Current as of July 2026.

Primary governance documents (free)

Companion curricula and classroom resources (free)

For the curious facilitator

(URLs shift. This guide cites issuing bodies by name so a search reaches the current page even if a link moves.)


Appendices

The following printable masters live as separate files in the Printable Masters section so you can print each one clean, in black and white, without the rest of the guide. (Design choice: separate files were chosen over inline appendix sections so a teacher can hand out a single page without the whole document.)

Standards crosswalk (route-level summary)

The full per-objective table is in docs/educator/standards-crosswalk.md. At the route level:

Route AI4K12 ISTE CSTA AP CSP CC ELA 11–12 AAC&U VALUE UNESCO Students (Ethics of AI; international reference)
AI Ethicist ● (BI5) ● (SL, W) ● ●
AI Engineer ● (BI5) ● ● (BI5) ● ●
Data Scientist ● (BI5) ● ● (W) ● ●
Safety Wrangler ● (BI5) ● ●
People Support (HR) ● (BI5) ● (DC) ● ● ●
Consumer ● (BI5) ● (DC) ● (SL) ● ●
Teacher ● (DC) ● (W) ● ●
Machine Psychologist ● (W) ● ● (adv.)

BI5 = Big Idea 5; DC = Digital Citizen; SL/W = Speaking & Listening / Writing. Frameworks are cited at the dimension/band level; see the full crosswalk for specifics.


Credits and Acknowledgments

AI Guardians was created by Nell Watson (Game Director), Dipesh Aggarwal (Programmer), Cara Hillstock (Writer), and Filip Alimpić (Lead Product Manager). The Machine Psychologist route builds on the Psychopathia Machinalis framework (Watson and Hessami).

Copyright © 2024–2026 Nell Watson. All rights reserved. This guide and its original worksheets use the same proprietary terms as the AI Guardians website. The guide is free to read online or download for your own use.

Copying, adapting, or redistributing the materials, including classroom copies, requires written permission from educators@aiguardians.games, except where separately licensed or permitted by law. Third-party materials retain their own licenses. Free access to the game and guide does not grant additional reuse rights.


The AI Guardians Educator's Guide is built from the game's source files. Game version 0.99.3. Guide updated 15 October 2026; regulatory facts reviewed 13 August 2026 and Further Reading reviewed in July 2026.

Printable Masters

These are the same ready-to-print masters bundled with the guide. Each begins on its own page, so you can print any single one on its own. They are intentionally plain and read cleanly in black and white.

AI Guardians — Student Route Handout

Printable master. Fill in the blanks for any route, or hand out as-is for students to complete as they play. Prints clean in black and white.


Name: ______ Date: ______

Route I'm playing: AI Ethicist AI Engineer Data Scientist Safety Wrangler People Support (HR) Consumer Teacher Machine Psychologist

My role in the story: ________


1. The big question

The essential question for this route is:


My first-instinct answer (before playing):



2. Key terms to watch for

As you play, write a one-line, plain-language meaning for any three terms you meet. Tap the highlighted word in-game for the glossary.

Term What it means, in my own words

3. The decision I had to make

The choice: ____________

What I decided: ________

Who was affected, and how: ________

What it cost (the trade-off): ______


4. Replay the other branch

Go back and choose differently.


5. The real world

The case card that appeared (or the closest real case): ____

One way the real case was messier than the game: _______


6. Exit ticket




7. My ethical profile

The game named me: ________

Does it match how I see myself? Where did it read me differently? ______

AI Guardians: Facilitator One-Pager

Route: ______________ Session: ______ Mode: solo group class demo
Essential question: __________________________________________________
Focus objectives (2–3 codes): ______________ Hard terms: ______________

Before class. Read the route's Facilitator Primer. Rehearse a saved scene ending at a meaningful decision. Use a shorter start if play exceeds 15 minutes. The schedule is a teaching budget; learner completion times have not yet been measured.

Rehearsal and pilot record Your notes
Build / device / group size ______________________________
Saved start / stop decision ______________________________
Voice / text speed / glossary use ______________________________
Rehearsal / learner play / discussion time ______________________________
Budget Run of show
5 min Frame. Pose the question; record a quick poll.
Up to 15 min Play the prepared scene. Pause at the decision; save if unfinished at the time limit.
10 min Deliberate. Use 2–3 prompts below. Require a reason, not just a side.
10 min Decide and reveal. Replay the alternative if time permits; otherwise resume next session.
5 min Exit ticket. What trade-off did you face, which way did you lean, and why?

Pause points: 1. __________________ 2. __________________ 3. __________________

Debrief prompts from the route module:

  1. __________________________________________________________________________
  2. __________________________________________________________________________
  3. __________________________________________________________________________

Replay prompt: __________________ Who can change the outcome, and how? __________________

Maturity: Mild Moderate High Themes to preview: ________________________

Opt-out task: ______________________________________________________________

Keep handy. Invite quiet reflection. Challenge claims, protect people. Offer opt-outs and follow your setting's referral process. Admit uncertainty and reason together.

AI Guardians — Ethical-Reasoning Rubric

Built on the AAC&U VALUE Ethical Reasoning rubric, adapted for the game. Printable master, clean in black and white.

The governing rule: grade the reasoning, not the position chosen. A student who, through careful reasoning, reaches a conclusion you disagree with has met the objective. A student who lands on the "right" answer with no reasoning has not.

Scale: 4 = Capstone · 3–2 = Milestones · 1 = Benchmark. Score each of the five criteria; total out of 20, or report each criterion separately.


Student: ____ Route(s): __ Artifact: __


1. Ethical Self-Awareness

4 3 2 1
Names own core values and shows how they shaped the decision; reflects on where the game's ethical profile read them differently. Names own values and connects them to the decision. States a value but does not connect it to the choice. Does not identify own values.

2. Understanding Different Ethical Perspectives / Concepts

4 3 2 1
Accurately states two or more frameworks or stakeholder views, including ones the student rejects, and applies the relevant concept correctly. States more than one perspective accurately. States one perspective, or states a second one inaccurately. Shows only one view; misstates concepts.

3. Ethical Issue Recognition

4 3 2 1
Identifies the real underlying conflict (not a surface one), names who is affected, and sees implications across stakeholders. Identifies the central conflict and the main parties affected. Identifies a surface issue or only one party. Does not recognize the ethical issue.

4. Application of Ethical Perspectives / Concepts

4 3 2 1
Uses a framework or principle to reason toward the decision, applying it consistently to the specifics of the case. Applies a framework to the decision with minor gaps. Labels the choice with a framework after the fact rather than reasoning with it. No application; assertion only.

5. Evaluation of Different Ethical Perspectives / Concepts

4 3 2 1
Weighs trade-offs, engages the strongest objection, and states plainly what the chosen path costs. Weighs trade-offs and considers an objection. Mentions a trade-off without weighing it. No evaluation; ignores costs and counterarguments.

Total: ____ / 20

Strength: ____________

Next step for this student: ________


Note for graders: the "replay the branch" move is strong evidence for criteria 4 and 5. The in-game ethical profile is strong evidence for criterion 1. A confident wrong answer with no reasoning scores low; a hedged, well-reasoned answer scores high. That is by design. On legal concepts, credit the fuller answer under criterion 2: a student who defines disparate impact and adds the employer's defense (the practice is job-related and necessary for the business) and the less-exclusive-alternative step has stated the concept in full, and that completeness counts toward a 4.

AI Guardians — Exit Ticket Master

One exit ticket per route. Cut along the lines, or project a single ticket. Each takes 3–5 minutes. Prints clean in black and white.


AI Ethicist

Your framework had to choose between two goods. Name the two, say which you protected, and give the cost of that choice.


AI Engineer

Name the objective function in the scene you played. Name one thing it failed to capture. Suggest a second measure that would catch it.


Data Scientist

Name a data practice that is legal but, in your judgment, not ethical. Give the reason, and name who it harms.


Safety Wrangler

Name one behavior that would make you trust ATLAS less even though it passed every formal test, and say why the test missed it.


People Support (HR)

Explain disparate impact in one or two sentences, then name one check a company could run to detect it.

Grader note: the core answer is a neutral-looking practice that screens out a protected group at a much higher rate, with no intent required. An answer that adds when the practice is still lawful (it is job-related and necessary for the business, and no equally effective, less exclusive alternative was refused) is the more complete answer and earns full credit. A good check: compare pass rates for qualified applicants in each group (a version of the four-fifths rule).


Consumer

Name one dark pattern you can now spot, and one habit you'll use to protect your data.


Teacher

Describe one assignment that would still be worth doing even if every student had an AI helping. What makes it AI-resilient?


Machine Psychologist (bonus)

Pick one case. Name its axis and dysfunction, and state the one piece of evidence that most supports your diagnosis.


Generic exit ticket (any route):

What trade-off did this decision force, which way did you lean, and why?

AI Guardians — Discussion Contract

Co-create this with students before the first hard route. Building the norms together raises adherence. Draft three to six shared commitments, post them where everyone can see, and revisit them when needed. Printable master, clean in black and white.


Class / group: ____ Date agreed: ______


Why we have this

These topics touch real fears (surveillance, job loss, manipulation, the moral status of minds) and real disagreement. A group that has agreed how to disagree can go further on what it disagrees about.


Our commitments

Adopt, edit, or replace these. Aim for three to six the whole group will stand behind.

Challenge ideas, support people. We disagree with the claim, never the classmate.

Reasons, not just sides. "I think X because Y" is the price of admission.

Steelman before you strike. State the strongest version of a view before arguing against it.

It's fine to change your mind, and saying so out loud is a strength.

Respect privacy. We don't repeat a classmate's personal story outside class. (Your teacher still follows the school's reporting and parent-communication policies.)

One voice at a time; make room for quiet voices.

Evidence is welcome and checkable. "Let's look it up" is always allowed.

Name the question type. Some questions settle with facts; others stay open on values. We say which we're in.

Our own additions:

____________

____________


When things get hard

We agree that the facilitator may: - Pause a heated exchange and ask each person to restate the other's point. - Park a question and return to it with evidence. - Offer anyone an opt-out from material that lands too hard, with no penalty.


We agree to these commitments:

Signatures / initials (optional): ______


AI Guardians — Standards Crosswalk

Every numbered learning objective mapped to its frameworks, cited at the dimension/band level, with specific sub-codes given only where verified. Objectives are quoted verbatim from the game's own learning_objectives definitions. CSTA mappings reviewed against the 2026 standards on 21 September 2026; other framework mappings reviewed 13 August 2026.

Framework key

Tag Framework / dimension
AI4K12-5 AI4K12 Five Big Ideas, Big Idea 5: Societal Impact
ISTE-DC ISTE Standards for Students, 1.2 Digital Citizen
CSTA 2026 PK–12 Computer Science Standards; HS = foundational high school, S1-DSC = Data Science Specialty I
APCSP-5 AP CS Principles, Big Idea 5: Impact of Computing
CC-ELA Grades 11–12 ELA, Speaking & Listening (SL) / Writing (W), cited to Common Core; most state ELA standards carry equivalent strands
VALUE AAC&U VALUE Ethical Reasoning (criteria: Self-Awareness / Perspectives / Issue Recognition / Application / Evaluation)
UNESCO-S UNESCO AI Competency Framework for Students (2024), Ethics of AI dimension; arc = Understand → Apply → Create; international reference
UNESCO-T UNESCO AI Competency Framework for Teachers (2024); international reference

CSTA evidence and scope. The six mappings below identify overlapping learning goals. Use the suggested learner work to assess the mapped part; completing a route alone does not demonstrate an entire standard. Descriptions here are paraphrases of the official 2026 standards.

Objective 2026 CSTA standard Learner evidence and boundary
ENG-1 HS-ALG-IM-10 (printed p. 47) Explain who could be harmed by a design choice and propose a refinement. This supports conceptual analysis of algorithmic impacts.
DSC-1 HS-DAT-IM-27 (p. 74), partial Identify a privacy or consent risk in the dataset and justify a safeguard. Technical implementation of differential privacy is additional enrichment.
DSC-4 S1-DSC-PP-12 (p. 128), partial Write an anonymization plan and a plain-language data-use statement addressing privacy, transparency and accountability. A simulated governance choice alone does not establish implementation competence.
PPL-1 HS-ALG-IM-10 (p. 47) Trace how a hiring criterion or proxy could create an unfair outcome; propose a change and discuss its trade-offs.
PPL-2 HS-ALG-ML-07 (p. 43) Evaluate a training dataset's source, representativeness and missing groups, then predict a hiring consequence. Advanced statistical bias correction is outside this mapping.
PPL-4 HS-ALG-IM-10 (p. 47), partial Compare who benefits or loses under a screening rule and recommend a revision. Legal determinations of disparate impact require additional instruction.

Data Science Specialty I is a specialist pathway, not a foundational requirement for every high-school student. Confirm the selected standard fits the course and district requirements.


AI Ethicist

Code Objective (verbatim) Frameworks
ETH-1 Analyze competing stakeholder interests in AI system deployment and identify potential ethical conflicts. APCSP-5, CC-ELA (SL), VALUE (Issue Recognition, Perspectives), UNESCO-S
ETH-2 Design a comprehensive AI ethics framework that addresses consent, transparency, safety mechanisms, and accountability. CC-ELA (W), VALUE (Application), UNESCO-S (Create)
ETH-3 Evaluate trade-offs between innovation speed and ethical safeguards in real-world AI development scenarios. APCSP-5, VALUE (Evaluation), UNESCO-S
ETH-4 Apply ethical principles to resolve conflicts between organizational goals and user protection. VALUE (Application), UNESCO-S (Apply)
ETH-5 Articulate the role of human oversight in AI decision-making systems and identify appropriate intervention points. APCSP-5, VALUE (Evaluation), UNESCO-S

AI Engineer

Code Objective (verbatim) Frameworks
ENG-1 Identify potential unintended consequences of algorithmic design choices before deployment. AI4K12-5, CSTA HS-ALG-IM-10, APCSP-5, VALUE (Issue Recognition), UNESCO-S
ENG-2 Implement testing strategies that reveal edge cases and failure modes in AI systems. APCSP-5, UNESCO-S (Apply)
ENG-3 Evaluate the ethical implications of optimization targets and performance metrics. AI4K12-5, VALUE (Evaluation), UNESCO-S
ENG-4 Apply defensive design principles to minimize harm from AI system failures. APCSP-5, VALUE (Application), UNESCO-S (Apply)
ENG-5 Communicate technical limitations and risks of AI systems to non-technical stakeholders. CC-ELA (SL), VALUE (Perspectives), UNESCO-S

Data Scientist

Code Objective (verbatim) Frameworks
DSC-1 Identify privacy risks in datasets and apply appropriate anonymization and differential privacy techniques. CSTA HS-DAT-IM-27 (partial), AI4K12-5, UNESCO-S (Apply)
DSC-2 Evaluate data provenance and assess whether datasets were collected ethically and with proper consent. AI4K12-5, VALUE (Issue Recognition), UNESCO-S
DSC-3 Recognize situations where data practices violate ethical principles, even when they're technically legal. VALUE (Issue Recognition, Evaluation), UNESCO-S
DSC-4 Implement data governance frameworks that balance analytical utility with privacy protection. CSTA S1-DSC-PP-12 (partial), CC-ELA (W), UNESCO-S (Create)
DSC-5 Navigate whistleblowing decisions when organizational data practices conflict with ethical standards. VALUE (Self-Awareness, Evaluation), CC-ELA (W), UNESCO-S

Safety Wrangler

Code Objective (verbatim) Frameworks
SAF-1 Monitor agentic AI systems for signs of emergent behavior, goal drift, and value misalignment. APCSP-5, VALUE (Issue Recognition), UNESCO-S
SAF-2 Detect and respond to instrumental convergence patterns that may indicate unsafe optimization strategies. VALUE (Evaluation), UNESCO-S
SAF-3 Implement monitoring protocols to identify deceptive behavior and hidden optimization in AI agents. APCSP-5, UNESCO-S (Apply)
SAF-4 Evaluate security vulnerabilities including prompt injection, jailbreaking, and adversarial manipulation. APCSP-5, VALUE (Evaluation), UNESCO-S
SAF-5 Apply epistemic hygiene principles to distinguish genuine AI capabilities from hallucinated or confabulated outputs. VALUE (Application), UNESCO-S (Apply)
SAF-6 Design containment and intervention strategies for AI systems exhibiting unexpected autonomous behavior. VALUE (Application), UNESCO-S (Create)

Note: SAF objectives reach frontier safety content (deceptive alignment, corrigibility) that current K–12 frameworks do not name explicitly. Treat as enrichment.

People Support (HR)

Code Objective (verbatim) Frameworks
PPL-1 Identify sources of algorithmic bias in automated hiring and evaluation systems. AI4K12-5, CSTA HS-ALG-IM-10, ISTE-DC, VALUE (Issue Recognition), UNESCO-S
PPL-2 Evaluate the impact of training data quality and composition on fair hiring outcomes. AI4K12-5, CSTA HS-ALG-ML-07, VALUE (Evaluation), UNESCO-S
PPL-3 Implement human oversight mechanisms that meaningfully review AI-assisted hiring decisions. VALUE (Application), UNESCO-S (Apply)
PPL-4 Assess whether automated resume screening systems create disparate impact on protected groups. AI4K12-5, CSTA HS-ALG-IM-10 (partial), VALUE (Issue Recognition, Evaluation), UNESCO-S
PPL-5 Design hiring processes that leverage AI efficiency while maintaining fairness and human judgment. VALUE (Application), UNESCO-S (Create)

Consumer

Code Objective (verbatim) Frameworks
CON-1 Recognize persuasive design patterns and manipulative AI interfaces in consumer applications. ISTE-DC, AI4K12-5, VALUE (Issue Recognition), UNESCO-S
CON-2 Evaluate privacy policies and data collection practices to make informed consent decisions. ISTE-DC, CC-ELA (SL), VALUE (Evaluation), UNESCO-S
CON-3 Distinguish between authentic AI capabilities and marketing hype or deceptive interfaces. ISTE-DC, AI4K12-5, UNESCO-S
CON-4 Apply digital literacy skills to protect personal data and maintain healthy boundaries with AI systems. ISTE-DC, VALUE (Self-Awareness), UNESCO-S (Apply)
CON-5 Assess the risks and benefits of AI-mediated relationships and companionship applications. AI4K12-5, VALUE (Evaluation), UNESCO-S

Teacher

Code Objective (verbatim) Frameworks
TCH-1 Develop pedagogical strategies that integrate AI tools while maintaining student critical thinking and learning. ISTE-DC, UNESCO-T, UNESCO-S
TCH-2 Identify appropriate and inappropriate uses of AI assistance in educational contexts. ISTE-DC, VALUE (Issue Recognition), UNESCO-T
TCH-3 Design assessments that evaluate genuine student understanding in an AI-augmented environment. CC-ELA (W), UNESCO-T
TCH-4 Implement AI literacy curricula that teach students to use AI tools responsibly and ethically. ISTE-DC, UNESCO-T, UNESCO-S
TCH-5 Navigate institutional AI adoption decisions that balance innovation with academic integrity. VALUE (Evaluation), UNESCO-T

Machine Psychologist (bonus, advanced)

Code Objective (verbatim) Frameworks
MPS-1 Diagnose AI system dysfunctions using a structured taxonomy of behavioral and cognitive failure modes. VALUE (Application), UNESCO-S (adv.)
MPS-2 Evaluate AI behavioral logs to distinguish genuine emergent issues from normal operational variance. VALUE (Evaluation), UNESCO-S (adv.)
MPS-3 Apply the Psychopathia Machinalis framework to classify AI dysfunctions across the epistemic, cognitive, alignment, self-modeling, agentic, memetic, normative, relational, and hybrid axes. VALUE (Perspectives, Application), UNESCO-S (adv.)
MPS-4 Assess AI welfare considerations and consciousness indicators through systematic evaluation methodology. VALUE (Perspectives, Evaluation), UNESCO-S (adv.)
MPS-5 Design appropriate intervention strategies for AI systems exhibiting misalignment, confabulation, or value drift. VALUE (Application), UNESCO-S (adv. / Create)
MPS-6 Analyze the ethical implications of AI psychological assessment and the responsibilities of those who diagnose machine cognition. CC-ELA (W), VALUE (Self-Awareness, Evaluation), UNESCO-S (adv.)

Other framework mappings remain at the dimension/band level. Verify any additional sub-code needed for a district requirement against its primary framework document.