This Memorandum of Understanding records the intention of the Global Association of Cultural and Educational Exchange (“the Association”) and [School] (“the School”) to conduct a six-week Chinese-language learning pilot for 20 to 40 learners using the Association's learning platform. Except for Clauses 6 (Intellectual Property), 7 (Data Protection), 8 (Confidentiality) and 9 (Publicity), this Memorandum does not create legally binding obligations. No fee is payable by the School, the learners or their guardians during the pilot.
I understand that live classes are recorded and that my child's voice recordings from pronunciation practice are stored securely in Singapore and used only for teaching and assessment. I may withdraw this consent at any time by contacting [email], after which the recordings will be deleted within 30 days. ☐ I additionally agree that my child's photographs or written work may be used in the Association's non-commercial publications (optional).
GACEE · Global Association of Cultural and Educational Exchange
HanQiao Delivery Plan汉桥项目落地方案 · Three-country pilot · v3.0
This plan sets out how HanQiao, the Association's AI-enabled Chinese-learning platform, is to be delivered in three countries with one school in each, and how the pilot data will serve as the basis for the next round of external partnerships. It follows four parallel workstreams — external engagement, needs research, technical validation and delivery — and includes application scenarios, the technical route, and reference samples for memoranda and contracts. Time windows are expressed in months and required durations only; every signatory is marked “to be confirmed” until execution; every unverified assumption is flagged in the text.
Version 3.0 · September 2026Basis: GACEE Association profile · JE HanQiao architectureClassification: Association internal · external edition to follow
00 · Executive summary
Executive summary执行摘要
The core task is to place remote Chinese teachers, orchestrable agents and an offline-first learner client into the regular timetables of three schools, complete six weeks of teaching under weak-network, power-cut and shared-device conditions, and obtain verifiable operating data.
The project in one sentence
Teachers first; three countries and three schools as the proving ground; weak network and offline by default; compliance in the foundation. The public entry point is learn.gacee.org and certificate verification is verify.gacee.org.
Objectives
Approve the project, shortlist schools and start technical validation in September; freeze the MVP by the end of October; open six-week classes in one school per country from November; complete the review and decide on expansion before year end.
Pilot footprint
Three countries × one school each × 20–40 learners per school. The three countries cover English, Kiswahili and French as scaffolding languages and three data-protection regimes, validating portability on one system.
Delivery roles
The Association (content, teachers, international resources, programme design) + pilot schools (learner organisation and on-site delivery) + remote Chinese teachers (teaching and sign-off) + the technology platform (systems and AI). Signatories are confirmed after legal review in each country.
Eight principles
Teacher-led; no hallucination; inclusion first; weak-network and offline by default; mother-tongue scaffolding; compliance in the foundation; light before heavy; aligned with standards and local systems.
Four parallel workstreams and their windows
Workstream
Window
Duration
Deliverables
Owner
A External engagement
From September, ongoing
First round 4 weeks, then rolling
Shortlist of candidate schools in three countries; pilot MOU and letters of intent (signatories TBC); teacher agreements; guardian consent templates
Association leads; Ray for Africa; Liu Laoshi for teachers
B Needs research
September–October
2–3 weeks per country, in parallel
Requirements document v1; five personas; field network and device survey for three countries; compliance register v1
Association and platform jointly; local partners run measurements
C Technical validation (Phase 0)
September–October
4–5 weeks
All eight PoC cards concluded; live-first or recording-first decided; ADR-1 to 7 written
Platform
D Delivery (Phases 1–3)
From mid-September
MVP build 6 weeks; pilot preparation 2 weeks; 6 weeks per school; review 2 weeks; Phase 2 about 12 weeks
MVP freeze → three schools open → review report and unit cost → Phase 2 acceptance
Joint programme office
Prior judgement
Bringing a real class into use within two months is feasible only if the MVP is defined as recorded lessons + live classes on existing meeting tools + offline practice in an installable web app (PWA) + two agents (study companion and review). A native offline Android app needs 10–12 weeks to mature; it starts after the pilot opens and ships as a beta in Phase 2. This is not a reduction in scope: the weak-network-and-offline principle is delivered on the web first and migrated to native afterwards.
Success criteria (accepted item by item at the pilot review)
One school per country, 20–40 learners each, completes six weeks; attendance (including replays) and homework submission are recorded by the system.
Teachers' weekly hours fall while learner practice rises, both evidenced by logs; the number of learners served per teacher hour is measured.
Sampled accuracy of agent answers and the hand-off rate are measured; no incorrect judgement goes undetected.
Learners complete practice offline during outages and sync afterwards with zero data loss; network measurements are comparable across the three countries.
School data isolation, guardian consent and cross-border transfer are each evidenced in writing in all three countries.
A measured cost per learner per month is produced and becomes the sole basis for pricing discussions with education authorities, employers and foundations.
01 · Landscape & roles
Landscape and roles落地格局与角色
The long-term four-part structure
Publishing
Curates quality content: competition anthologies, course textbooks, cultural readers; in turn supplies the platform library.
Future Academy
Builds courses and real educational settings across four strands: Chinese culture, world civilisations, AI and the future, growth in practice.
Connects schools, teachers, experts, international resources and programmes; the hub and brand holder of the four.
HanQiao offers three public entry points under the Association's domain: the platform at learn.gacee.org, certificate verification at verify.gacee.org, and single sign-on with the Association website from Phase 2.
Delivery roles and responsibilities
Role
Responsible for
Owns / decides
Does not
The Association (GACEE)
Educational content, teacher resources, international resources, programme design, relationships with schools and education authorities, brand, external contracting
Brand, course copyright, learner relationships; as data controller, decides data purposes
Build its own engineering team
Pilot school (one per country, TBC)
Learner organisation, timetable slots, venue and devices, local facilitator, parent communication and consent collection
Management of its own learners; joint control of its own learner data
Bear system costs; the pilot is free
Remote Chinese teachers (China side)
Recording, live classes, review queue, sign-off of key judgements, participation in curriculum work
Final say on pedagogical judgements; scope of voice and recording licences
Curriculum review, expert guidance, principal and school networks (division of work to be confirmed by the Association)
Curriculum review and principal-network support
Publishing and media resources
Publisher Li
Anthology and textbook publishing, media coverage, content editing (division of work to be confirmed)
Library sources; the “publishing” strand
Platform lead (technology)
Platform
Technical route, architecture decisions, platform team allocation
Technical approver for Workstreams C and D
External revenue and funding sources (consistent with the Association's non-profit status)
Institutional seats: schools, Chinese-community schools and training centres purchase per-learner seats with a free basic tier and per-seat upgrade to the full tier. Pricing is to be determined and is not assumed here; all three pilot schools are free.
Corporate commissioned classes: Chinese enterprises abroad commission classes for local staff, settled per class, with completion certificates and learning reports (from Phase 2).
The Association's own income: event registration, study-journey fees, competition entry fees, membership fees, collected through the Association's own accounts.
Philanthropic funding: EduLink-Africa and public lectures supported by foundations and donors; the inclusive tier is free for ordinary schools. The review report is the core material for funding applications.
02 · Three-country pilot
Three-country pilot design三国试点设计
Three countries are chosen to validate, with the smallest possible sample, that one system is portable across different scaffolding languages, network profiles and data-protection regimes. One school per country preserves depth of engagement and data quality in each class.
Candidate countries (recommended, subject to the Association's confirmation; schools and signatories TBC)
Slot
Recommended country
Rationale
Scaffolding language
Data law (legal confirmation required)
Alternate
P1
Nigeria
Existing online Chinese classes and school relationships; the largest anglophone West African market; power and mobile-network conditions test weak-network and offline design most severely
English
NDPA 2023 and NDPC implementation rules
Ghana
P2
Kenya
East African hub and natural test bed for Kiswahili scaffolding; submarine cable and 4G coverage better than West Africa, serving as the “better network” control group
Kiswahili + English
Data Protection Act 2019 (ODPC)
Tanzania
P3
Côte d'Ivoire
Economic centre of francophone West Africa; validates the French interface and French scaffolding and provides the basis for Phase 3 expansion in francophone countries
French
2013 personal data protection law (ARTCI)
Senegal · Cameroon
Should the Association prefer one slot outside Africa to test an Asian market, Indonesia is an alternate (the Indonesian interface pack is ready); keeping all three in Africa simplifies Ray's coordination and makes the review comparable.
Four-dimension school scoring (1–5 per dimension; total ≥ 14 enters the shortlist)
Network and power
Hours of usable school Wi-Fi or 4G, frequency of power cuts, feasibility of a local cache point.
Demand and organisation
An existing Chinese class or clear demand, a fixed six-week timetable, a teacher willing to act as facilitator.
Partner maturity
Short decision chain at principal level, open parent channels, willingness to sign an LOI and run the consent process.
Compliance feasibility
Guardian consent workable, a lawful route for cross-border transfer, no “cannot do” conclusion.
Uniform specification per school
Item
Specification
Note
Learners
20–40, in 1–2 groups by age and level
Fewer than 20 is an insufficient sample; more than 40 overloads the teacher review queue
Duration
6 weeks; per week: one 30-minute live class + one recorded lesson + 15 minutes of practice daily
Start dates across schools staggered by no more than 2 weeks so one teacher can be scheduled
Teachers
One China-side lead teacher per school; one preparation-and-review teacher shared across the three
Recordings reused; one teacher serves several schools
Devices
Learners' own phones (including shared) + 2–4 shared school devices + one cache-point device (optional)
A 2 GB-RAM Android phone is the acceptance baseline
Local facilitator
One per school, 4 hours per week
Roll call, devices, on-site support, network measurement
Fees
Free throughout the pilot; the Association bears third-party direct costs
Device and data subsidies recorded per school per month into the unit-cost model
Outputs
Learning report, completion certificate (issued by the Association, verifiable), school weekly report, term report for the education authority
Certificates are strictly separate from official HSK results
Cross-country comparison design
All three schools use the same content (the first six weeks of HSK Level 1) and the same system; only three variables differ: scaffolding language, network profile and legal regime. The review compares results across these variables to establish which capabilities are portable and which require per-country adaptation — the basis for Phase 3 scaling.
03 · Workstream A
External engagement对外洽谈
Engagement proceeds “internal before external, near before far”: the plan, pilot specification and partner requirements are finalised first, and only a mature proposal is taken outside. All external commitments derive from the fact sheet; every signatory is marked “to be confirmed” until legal review.
Stakeholder map
Counterparty
What they want
What we need
When
Owner
Association board
Public-benefit fit, controlled risk, brand value
Approval, budget frame, authority to contract
September, week 1
Association lead
Candidate schools (2–3 per country; one signed per country)
A more stable Chinese class, visible learner outcomes, no added cost, data security
Learners, venue, network and device sharing, facilitator, consent process
From September; LOI within 4 weeks
Ray + Association lead
Remote Chinese teachers (China side)
Reasonable hours and pay, usable tools, no replacement by AI, clear recording and voice licences
Participation in curriculum work and the pilot; sign-off of key judgements
From September
Liu Laoshi
Local facilitators / partners
Stipend, training, recognition
On-site execution, measurement, roll call
After LOI
Ray
Education expert (Zhang Laoshi) · Publishing and media (Publisher Li)
Professional standard and influence; publishable outcomes and coverage material
Curriculum review, expert guidance; anthology and textbook publishing, media coverage
From September
Association lead
Local education authorities
Fit with local curriculum and certification, data compliance
Chinese-community schools / international schools / university Chinese departments
Quality courses and test-centre cooperation
Channels and test centres
Phase 2
Association
Chinese enterprises abroad
Staff Chinese training with reports and certificates
Corporate commissioned classes
After MVP stabilises (from December)
Association
Foundations / donors
Measurable public-benefit outcomes
Funding for the inclusive tier
After the review report
Association
Sequence and the objective of each step
September · week 1 · internal alignment
The board approves the project, budget frame, brand and domain resolutions, and authority to contract. Output: board resolution.
September · weeks 1–4 · school shortlist and LOIs
Ray produces a shortlist using the four-dimension score, visits or interviews 2–3 schools per country, and signs one LOI per country; consent-form localisation starts in parallel. Output: 3 LOIs; trilingual consent template.
September · from week 2 · teacher agreements
Liu Laoshi signs hourly agreements with the first 2–3 China-side teachers, covering recording copyright, voice-cloning licence (separate instrument) and confidentiality. Output: 3 teacher agreements; voice licences.
October · pilot MOU
Pilot MOU + data-protection schedule signed with each of the three schools (and their governing body where applicable); samples in §09. Output: 3 MOUs; 3 data schedules.
From December · education authorities and channels
Pilot data (attendance, homework, accuracy, cost, three-country comparison) taken to education authorities and community schools. Output: draft framework of cooperation.
From December · corporate classes
Proposals to 2–3 Chinese enterprises; one paid pilot class first. Output: corporate programme agreement (sample in §09).
Engagement materials
Association profile: condensed to 15 pages in the brand-manual visual system.
HanQiao one-pager: positioning, eight principles, three-country pilot specification, what partners provide and receive.
School edition (English / French / Kiswahili): what learners do each week, what the school provides, how data is protected, how long the free period lasts, what follows.
Education-authority edition: alignment with HSK standards, path to local curriculum integration, data-sovereignty commitments, sample term report.
Demonstration environment: role demo accounts on learn.gacee.org (learner, teacher, school, enterprise, operations); replaced by an anonymised view of a real class once the pilot opens.
Fact sheet: the single source for every external figure, with provenance and update date.
Engagement discipline
No verbal commitments on metrics (latency, accuracy, country coverage); all external figures come from the fact sheet; questions involving minors or data are answered “designed to local law; written reply after legal confirmation”; no party commits on behalf of another.
04 · Workstream B
Needs research需求调研
The research establishes the actual learning conditions of teachers and learners in the three pilot schools: available devices, weekly time slots, modes of study and network environment. Its conclusions determine the MVP scope. The three countries run in parallel, 2–3 weeks each, with one toolkit, so results are directly comparable.
Field measurement toolkit (run by local facilitators, one template for all three countries)
Network measurement
At three times of day (morning, afternoon, evening) measure downlink / uplink / latency / packet loss; record operator and technology (2G / 3G / 4G / 5G).
One 20-minute Zoom audio call to Singapore; record drops and subjective clarity (1–5).
Download a 50 MB test file; record time and interruptions; test Cloudflare, Alibaba Cloud CDN and direct object storage separately.
Record power-cut hours over one week and any backup power.
Device and payment survey
Learner and school devices: brand and model, Android version, RAM, free storage, sharing.
Shared tablets / computers / projector / speakers; whether an always-on device can act as a local cache point.
Monthly data plan cost and usage; common payment methods (mobile wallet / cash / bank transfer).
Local and teaching languages; learners' reading level in English / French / Kiswahili.
Deliverables
Deliverable
Content
Due
5 personas
Remote teacher, local facilitator, learner (child / adolescent / adult), parent, school administrator; differences noted per country
End of research week 2
3 journey maps
A learner's week (online / weak network / offline), a teacher's week, a school from enrolment to completion
End of research week 2
Three-country field report
Measured network, device, power and payment data with raw records; cross-country comparison table
End of research week 3
Requirements document v1
Functional (MoSCoW), non-functional (weak network, offline, low-end devices, multi-account, scaffolding languages), data and compliance requirements
End of research week 3
Compliance register v1
Law, obligation, owner and evidence per country (§11)
End of research week 3
Research and validation run in parallel: first-week network measurements feed PoC-1 and PoC-2 directly.
05 · Workstream C
Technical validation and Phase 0技术验证与阶段 0
Architecture, the Agent Harness, JE Engine orchestration and TIDAR KAG are described in §06; this chapter defines validation methods and pass criteria. MVP freeze requires all eight cards concluded. Network-related cards run once per country; the others run once.
Reuse and build (summary)
Reused directly (in production, verified)
Go backend, Postgres, Singapore Kubernetes, multi-tenant isolation with row-level security
JE Engine / JE Agent single-turn tool loop; TIDAR KAG sourced Q&A
Knowledge graph and mastery (compute-on-read); Wilson lower-bound judgement
Chinese ASR and pronunciation assessment pipeline (Phase 2); HSK graph subtree and item bank (curriculum engineering)
Eight PoC cards (September–October, 4–5 weeks)
#
What is validated
Method
Pass criteria
If it fails
PoC-1
Cross-border live usability (per country)
A China-side teacher delivers three 30-minute classes on Zoom and three on Tencent Meeting to each pilot school across morning, afternoon and evening slots; five listeners score; drops and degradation events recorded
Subjective audio clarity ≥ 3.5 / 5; ≤ 1 drop per class, recovered within 30 s; three-level degradation triggered and successful
That country moves to recording-first with one weekly audio Q&A
PoC-2
Content delivery (per country)
Download a 50 MB pack over school 4G; compare Cloudflare, Alibaba Cloud CDN and direct OSS, five runs each
Median ≤ 8 minutes; resumable download success 100%
Night-time pre-download + school cache point
PoC-3
Low-end Android
Install the PWA on a 2 GB-RAM Android 9 device; 20 minutes of practice
Cold start ≤ 5 s; no crash; storage ≤ 150 MB; first bundle ≤ 1.5 MB gzip
Cut animation and font packs; plain-text mode
PoC-4
Offline practice and sync
In flight mode complete three practice sets and one mock quiz; reconnect after 24 hours
Zero data loss; sync ≤ 60 s; conflicts resolved by server authority + event merge
Rebuild the sync engine; MVP reduced to offline review cards
PoC-5
Study-companion memory loop
One learner, five sessions; verify profile, mastery and episodic memory write and recall; 50 in-syllabus questions
Sourced rate 100%; error rate ≤ 2% with every error handed off; session 5 correctly references weaknesses from sessions 1–4
Restrict the agent to review and reminders; all Q&A to teachers
PoC-6
Shared-device multi-account
Three learner accounts on one phone; offline data isolated
Switch ≤ 3 s; no cross-contamination; PIN protection; separate local encryption
MVP one account per device; sharing in Phase 2
PoC-7
Local collection ledger
Confirm future payment methods with the school; record and reconcile one mobile-wallet or school-collected payment
One payment recorded and reconciled in the system
Pilot entirely free; payments in Phase 2
PoC-8
Compliance feasibility (three countries)
Counsel issues applicability memos for the three national data laws, Singapore PDPA and China PIPL, plus trilingual consent forms
Memos signed; data schedule complete; no “cannot do” conclusion
Adjust data flows (e.g. teacher data stays in China) before MVP
Figures in the pass criteria are Phase 0 working thresholds, not external commitments; they are revised after measurement.
MVP technical scope (frozen end of October)
Module
MVP (end of October)
Phase 2 (January–March)
Live
Zoom or Tencent Meeting deep links; platform handles scheduling, roll call, recording retrieval, region-based entrance suggestion
Class insight, review queue, alerts, AI proposal inbox (web)
Homeroom agent drafts communication and scheduling
School / enterprise side
Roster import, attendance weekly report, device and consent dashboard
Term report for authorities, HR dashboard, bulk certificate verification
Operations
Reused admin console: tenants, schools, classes, learners, content review, language packs, support tickets
Channel and partner management, settlement, external AgentOps board
Scaffolding languages
Interface in Chinese / English / Kiswahili / French; English Q&A scaffolding
French and Kiswahili explanation scaffolding; Arabic interface
Online library
Web reader for anthologies and Future Academy readers: shelf, progress, highlights, tap-to-define
Teacher-voice read-aloud, shared annotation, auto-listing of new titles, reading data into the graph
Architecture decision records (written within Phase 0)
ADR-1 Tenancy: GACEE is the top-level tenant, each country a region label, each school a sub-tenant; data isolated per school, cross-school aggregation only in the Association view; Postgres row-level security with automated isolation tests.
ADR-2 Live source: MVP uses meeting-tool deep links behind a media adapter; switching to commercial RTC changes no business code.
ADR-3 Offline strategy: PWA first, Service Worker + IndexedDB for packs and practice; the native app reuses the same sync protocol and pack format.
ADR-4 Model routing: all generation, recognition and synthesis go through the Model Gateway; Qwen family by default for Chinese-teaching Q&A, Claude available for review; no on-device models when offline.
ADR-5 Memory storage: profile and mastery structured; episodic memory append-only, exportable, deletable; memory is never treated as fact.
ADR-6 Data residency: core data in Singapore; teacher personal data minimised in China under PIPL; learner data leaves each country only under local law and guardian consent; no media node in China.
ADR-7 Cost guardrails: monthly model and traffic budgets per tenant; over budget degrades to recordings and local review; no silent overspend.
06 · Architecture & technical route
Architecture and technical route技术架构与技术路线
HanQiao's technical base is the JE Engine, the Agent Harness and TIDAR KAG already in production at JurisEdu. This project adds three layers: cross-border weak-network media (live / recordings / content packs), an offline-first client (PWA / app), and per-learner personalised agent orchestration. This chapter specifies component design, interface conventions and acceptance metrics; every latency, bandwidth and accuracy figure is a working assumption to be measured in Phase 0.
Architecture principles
Cloud-neutral (declarative Kubernetes deployment, S3-compatible storage, OpenTelemetry observability, Model Gateway abstracting model vendors); data resident in Singapore; agents propose and never execute writes; every learning artefact carries append-only hash-chain evidence; every network segment has a defined degradation path.
1. Geographic topology: three network segments
China · teacher access
Teacher client (web / desktop): live publishing, board annotation, review queue, class insight
Cross-border access via the meeting tool's mainland nodes or global acceleration; the platform carries only signalling and business data and deploys no media node in China (ADR-6)
Homeroom agent (Phase 2): scheduling, alerts, drafted communication
Core region · Agent Harness (Singapore)
Client gateway: ingress, OIDC authentication, per-tenant rate limits, media signalling
JE Engine · JE Agent hybrid orchestration: Router → specialist agent → tools → Verifier → hand-off
Knowledge and memory: Chinese course graph, mastery, four-layer memory
Data / storage, observability, security, compliance, audit trail
Overseas · learner access (pilot schools)
Edge CDN / school cache point: recordings and packs served nearby
Learner PWA (offline-first): local store, packs, on-device practice and marking
Personal agent roster: companion and review first; pronunciation and conversation later
Shared-device multi-account: separately encrypted local store per account
Real-time and API traffic use the accelerated path; recordings and packs use the CDN; each segment is optimised separately, and degradation of any segment triggers the paths in section 6 of this chapter.
2. The ten-layer Agent Harness
The Harness packages the full agent lifecycle — build, run, evaluate, govern — as ten reusable layers; HanQiao is one vertical instance, and later language or subject programmes reuse the same runtime. Adding an agent requires only a definition manifest, tool bindings and an evaluation set, with no infrastructure change.
Layer
Component specification
Used by HanQiao
Users
Learners · teachers · operations / academic office · schools · enterprises · local facilitators; isolated by tenant and school
Six roles, one interface each (§07)
Entry
PWA / app · web · live / recording clients · REST API · webhooks · workflow triggers; OIDC single sign-on
MVP: PWA + meeting-tool deep links; roster-import API for schools
Model Gateway: routing by slot (generate / review / recognise / synthesise); cost-, latency- and residency-aware selection; circuit breaking and failover; version canaries; response sanitisation. Model Zoo: JE Engine · Qwen / Model Studio · Claude · Gemini · open-source · private
Gateway in production (R4 below)
Data
Chinese course graph · vector store · business database (Postgres, row-level security) · cache (Redis) · object storage (S3-compatible) · personal memory; governance: quality, lineage, access control, audit, de-identification, lifecycle
Identity and permissions (RBAC + tenant scope) · policy management · content safety · compliance audit · de-identification / encryption (AES-256 at rest, TLS 1.3 in transit) · cost and quotas
Tenant budget guardrails (ADR-7)
Infrastructure
Kubernetes · containers · service mesh · autoscaling; CI / CD with immutable images; multi-active, backup and disaster recovery, monitoring; cross-border acceleration, multi-CDN
Singapore cluster and release model reused
Agent lifecycle
Define → build → test and evaluate → canary deploy → monitor → optimise; release gate = no regression on the three evaluation metrics
Every agent has an evaluation set and a canary channel
3. JE Engine and hybrid orchestration: six capabilities verified in production
The six capabilities below are live in JurisEdu production and verified end-to-end; HanQiao inherits them directly. Each is constrained to be grounded, auditable and human-decided.
#
Capability
Implementation
Meaning for HanQiao
R1
Intent / domain routing
Deterministic heuristic routing (no model call, zero latency) sends a request to the learning / account / schedule domain, injects that domain's grounded context, then answers: route → ground → answer
A learner's question is classified first; learning questions automatically carry the learner's calibrated weak points
R2
Cross-capability tool registry
Read-only tools join the coach's tool loop; write tools use native function-calling and always follow propose → approve → execute; approvals are written to an append-only ledger with SHA-256 chained hashes (previous hash + record)
“The agent proposes practice, the teacher approves generation” is the technical form of teacher sign-off
R3
Persistent learner memory
Cross-session memory has only two write paths: observations derived from real mastery snapshots, and goals stated verbatim by the user; repeated observations accumulate salience; insufficient evidence is labelled “few samples”
Memory accumulated per learner cannot be fabricated by construction
R4
Model gateway
Placed before the existing PII de-identification → Singapore residency → failover → metering chain; adds only slot policy and response sanitisation; any gateway error falls back to direct calls
Routes by cost and compliance without bypassing any guardrail
R5
Per-run trace
Each turn records route / ground / recall / tool / verify / end steps, storing safe metadata only, never question or answer text
“Why this answer” can be replayed during the pilot; hand-off rate is measurable
R6
Educational TIDAR KAG
Section 4
Core of low-hallucination Q&A and mastery judgement
Creation chain
Every learning artefact (homework, essay, assessment, certificate) carries an append-only hash-chain record. Models have no tool that writes to the chain; a failed write surfaces as an error rather than being silently ignored. The creation chain is the technical source of trust for HanQiao certificates and learning reports.
Orchestration loop (one turn)
Step
Action
Basis
Latency budget (assumed)
1 Input
Learner's item, question or speech; profile memory and mastery snapshot (as-of now) injected at session start
R3
—
2 Router
Deterministic routing fixes domain and intent; relevant episodic memory recalled (top-k by salience and recency)
R1 + R3
≤ 50 ms
3 Specialist agent
Companion / review / pronunciation / conversation / assessment / homeroom calls allow-listed tools per manifest; Q&A retrieves through TIDAR KAG with sources
R2 registry
≤ 2.5 s (P50)
4 Verifier
Consistency check; grading is written only when the scoring and review agents agree, otherwise the review verdict is taken and the item is downgraded to “for teacher”
Multi-agent grading pattern
≤ 1.5 s
5 Answer or hand-off
Sourced, personalised answer; low confidence, subjective items and write actions go to the teacher queue
TIDAR KAG is the platform's own knowledge-graph, provenance-bound generation, distinct from generic vector RAG. It was validated in the legal domain first, then ported to the educational course graph and is in production. Three pillars provide the technical guarantee against fabrication.
Temporal
Every judgement rests on a real answer snapshot as of a point in time; two points can be diffed per knowledge point — progress, regression, newly assessed, unchanged — and reported as such.
Provenance
Every conclusion is attached to real evidence: answer records, missed items, prerequisite and related neighbourhoods in the course graph; answers carry sources, and without a source there is no answer.
Calibrated
Mastery is not a point estimate but the lower bound of a Wilson confidence interval (z = 1.96); fewer than three attempts is “insufficient evidence” and the agent abstains; zero attempts is “not yet assessed”.
Course graph structure
Hierarchy
System → stage → subject → domain → topic → knowledge point; only structures listed by an authoritative standard are written
HanQiao subtree
“International Chinese HSK 3.0 (three bands, nine levels) / YCT” system: vocabulary, grammar, characters and scenes as four knowledge-point types, each with level, source, examples and prerequisite edges
Edge types
Prerequisite, related, scene-contains, confusable
Evidence nodes
Answer events (item ID, result, time, source client), grading verdicts (two-agent agreement), teacher sign-off records
Mastery
Compute-on-read: aggregate as-of snapshots per knowledge point, output the Wilson lower bound and sample size; conclusions are never cached, avoiding staleness
Mechanism
Rule
Where it lands in HanQiao
Knowledge boundary
Q&A retrieves and generates only within the course graph and textbook; out-of-scope requests return “outside this course, sent to your teacher”
HSK Level 1 subtree + six-week textbook slice
Abstention gate
Low confidence or subjective items abstain and go to a person
Abstentions enter the teacher review queue; the weekly report counts the hand-off rate
Memory is not fact
Memory serves retrieval and personal style only; facts come from the graph and live mastery
Class changes and re-learning correct automatically
Two-agent agreement
Scoring and review agents judge independently; disagreement takes the review verdict and downgrades to unknown; only clear right / wrong is written to the graph
Photo homework and objective items; speaking disagreements go to the teacher
Write separation
Agents only propose; a person approves and the system executes with a hash-chain record
Scheduling practice, adjusting progress and issuing certificates all go through approval
Evaluation set
Every release runs the in-syllabus set: sourced rate, error rate and hand-off rate must not regress
50 items in Phase 0, 200 for MVP, 500 in Phase 2
5. Per-learner agent roster and four-layer memory
Study Companion
Plans the path, adjusts difficulty, explains knowledge points; Q&A via TIDAR KAG with sources; runs pre-packaged tasks when offline.
Review Agent
Schedules spaced-repetition cards by the FSRS forgetting curve and mastery; scheduling runs on device and works offline.
Pronunciation Coach (Phase 2)
ASR + tone / phoneme scoring (GOP), character-level correction, demonstrations in the teacher's voice.
Conversation Agent (Phase 2)
Role play — ordering, asking directions, interviews — with teacher-voice TTS and gentle correction.
Assessment Agent (Phase 2)
Assembles quizzes and mock exams; multi-agent grading and review; speaking items via the pronunciation pipeline; subjective items abstain to the teacher.
Homeroom Agent (teacher side, Phase 2)
Scheduling, progress and risk alerts, make-up suggestions, drafted parent communication; every action goes through proposal and approval.
Memory layer
Content
Storage
Read / write
Data-subject rights
Profile
Target level, mother tongue / scaffolding language, time zone, device and network profile, correction preferences, available slots
Structured (Postgres)
Injected at session start; updated on settings change
Viewable, editable
Semantic / mastery
Mastery and error patterns per knowledge point, word and grammar item
Knowledge graph (compute-on-read)
Updated by events after each answer and assessment
Valid within the session; distilled to episodic memory at close
Not persisted
6. Cross-border weak-network live, recording delivery and offline client
Live option
Key points
Trade-off
A Existing meeting tools
Zoom / Tencent Meeting carry the class; the platform integrates by deep link and handles scheduling, roll call, recording retrieval and classroom-event capture; entrance suggested by learner region
Lowest cost, fastest; limited classroom customisation. Adopted for MVP
B Commercial RTC SDK
For custom classroom / whiteboard / deep embedding, an SDK with a global real-time network (Alibaba Cloud RTC / Agora / Tencent RTC / ZEGO)
Controllable experience; per-minute billing. Evaluated in Phase 2 per PoC-1
Origin → multi-CDN; African edges serve nearby with resumable download; the school cache point is a reverse cache on an always-on device
Content packs per lesson / unit (manifest + version + checksum); Wi-Fi-only download option; revocable on withdrawal
Offline-first client (PWA)
Available locally: downloaded recordings, in-class practice, review cards, stroke order, objective answering and marking, recorded audio
Local store (IndexedDB), versioned packs; outbound event queue with idempotency keys; retry with exponential back-off; resumable transfers
Sync protocol: event-sourced, server monotonic sequence as authority; progress = server authority + event merge; notes = last-write-wins
Storage budget ≤ 150 MB with tiered clean-up; data-saver mode; shared-device multi-account with per-account local encryption keyed from the PIN (Argon2id)
7. Assessment pipeline, model layer and cloud-neutral matrix
Listening · reading · writing · character writing
Objective items auto-marked; photo homework recognised by Qwen-VL → two-agent point-by-point grading → teacher review and sign-off; handwriting recognition checks stroke order and structure; every answer updates the graph by event.
Speaking and pronunciation (Phase 2, selection to be validated)
Chinese ASR (Paraformer / SenseVoice class) transcription; forced alignment (CTC) + GOP goodness-of-pronunciation scoring; tone classified from the F0 contour (pYIN); corrective demonstrations in the teacher's voice; disputed items go to the teacher.
Token authentication, end-to-end TLS, tenant isolation, least privilege; encrypted recordings, encrypted and revocable offline packs, optional watermarking.
Assessment integrity
Randomised item banks, time limits, tab-switch and multi-device detection, live read-aloud for speaking; in-person centres recommended for high-stakes exams.
Agent guardrails
Protection against privilege escalation and prompt injection, output review, memory-write validation, audit trail against memory poisoning; multi-active media and CDN degradation.
8. Non-functional targets (pilot acceptance baseline, revised after measurement)
Cross-border real-time quality from China to the three countries (latency, loss, time of day)
Live-first or recording-first per country
Phase 0
2
Cost, compliance and lock-in of commercial RTC versus self-hosted SFU
Cost structure and engineering load
Phase 0 → 1
3
Actual CDN presence and unit price in the three countries
Recording experience and traffic cost
Phase 0
4
Whether a media or access node in China is lawful and required
Legality of the cross-border path
Decided up front
5
Accuracy of Chinese ASR and pronunciation models
Credibility of speaking assessment
Phase 1 → 2
6
Feasibility of on-device pronunciation scoring on low-end Android
Scope of offline speaking practice
Phase 1
7
Curriculum production capacity (courses, item bank, HSK alignment)
Teachable levels and pace
Throughout
8
Path to official certification and issuance
Credibility of outcomes
Phase 2
07 · Applications & scenarios
Applications and scenarios应用与场景
This chapter describes the interface used by each of six roles and the twelve most frequent scenarios in the pilot. Each scenario lists trigger, participants, system steps, components, success criteria and exception handling, and serves as the common basis for the requirements document, test cases and training. The demonstration environment at learn.gacee.org implements interactive prototypes of all interfaces described here.
1. Interfaces by role
Role
Entry
Core screens
MVP
Phase 2
Learner
PWA (phone / shared device) · learner ID or phone + PIN
Today, courses and recordings, practice and review cards, photo homework, live entry, library, knowledge map, my agents, certificates
All except pronunciation and conversation
Pronunciation coach, conversation, native app
Remote teacher
Web (desktop) · email code
Class insight, review queue, AI proposal inbox, live and recording, scheduling, class library, weekly report
All except homeroom agent
Homeroom agent, voice narration
School (principal / office / facilitator)
Web or mobile browser · email code
Roster import and class set-up, learner and device dashboard, consent coverage, attendance weekly report, term report
Roster, dashboards, weekly report
Authority term report, bulk certificate verification
Enterprise (HR)
Web · email code
Commissioned groups, attendance and progress reports, completion certificates, invoices
—
All
Operations (Association office / platform)
Admin console · two-factor
Tenants and schools, content and publishing review, AgentOps, compliance register, cost and budget, network and delivery, language packs, support tickets
All
Channels and settlement
Public / verifiers
verify.gacee.org
Verify by certificate number or QR; minimum information only
Monday release of recording and practice pack; the Study Companion builds the week's tasks from the learner profile (available slots, power-cut forecast)
Participants
Learner; Study Companion and Review agents; teacher (passive)
Steps
Online: watch recording → in-class practice → review cards. Weak network: audio-first mode + text practice. Offline: local pack + review cards + on-device marking; outbound queue syncs on reconnection
S2 · A cross-border live class (teacher in China, learners in three countries)
Trigger
Scheduled time; the platform suggests Zoom or Tencent Meeting by region and sends trilingual reminders
Participants
Lead teacher, local facilitator, learners, operations on duty
Steps
Teacher starts from the teacher client → platform creates the meeting and captures its ID → learners join by deep link with entry time recorded → level 1 / 2 degradation triggered by network quality → recording retrieved and transcoded after class → replay within 15 minutes → absent learners counted as replay attendance
Components
Meeting-tool adapter, roll call and classroom event log, recording retrieval, transcoding, notifications
Meeting tool unavailable → backup link on the other tool; teacher drops → facilitator hosts + recording substitutes (level 3)
S3 · Offline practice during a power cut and next-day sync
Trigger
Power-cut window in the profile memory (e.g. 19:00–21:00); the Companion packs the day's tasks for offline use and moves the reminder to 17:30
Steps
Learner completes review cards and watches the recording offline → events queued → synced in sequence next day → mastery updated → teacher client shows “completed offline”
Success
PoC-4 criteria; the teacher client distinguishes online from offline completion
Exceptions
Device clock drift → server sequence prevails; duplicate submission → de-duplicated by idempotency key
S4 · Photo homework to teacher sign-off
Steps
Learner photographs and uploads (stored locally first when offline) → Qwen-VL recognises handwriting and layout → scoring and review agents grade independently → agreed items written to mastery; disagreements and subjective items enter the teacher queue → teacher confirms or amends item by item → sign-off → result and comments return to the learner; the whole process is written to the creation chain
Success
Two-agent agreement rate recorded; the teacher sees only disagreements and subjective items; zero undetected errors
Exceptions
Blurred photo → prompt to retake with an example; low recognition confidence → whole submission to the teacher
S5 · Agent Q&A and hand-off
Steps
Learner asks → deterministic routing classifies as learning → weak points injected → TIDAR KAG retrieves within the course graph → sourced answer with citation; low confidence or out of scope → abstain, question enters the teacher queue, answered in Wednesday's live class or in writing; trace stored
Success
Sourced rate 100%; handed-off questions closed with a record; 50 items reviewed by a person weekly
S6 · Three learners on one shared device
Steps
Home screen shows “Who is learning?” → choose avatar and enter PIN → that account's encrypted local store unlocks → study → sign-out locks; packs shared by reference count, practice data isolated
Success
Switch ≤ 3 s; no cross-contamination; forgotten PIN reset after school or parent confirmation
S7 · A teacher's week
Steps
Monday: publish recording and practice pack (reusing past recordings) → Wednesday: 30-minute live class → daily: alerts (absence, mastery regression, power-cut impact) → Friday: clear the review queue (disagreements and subjective items only) → approve AI proposal inbox (practice, progress, make-up) → weekly report generated automatically and signed off
Success
≤ 6.5 teacher hours per class per week; one teacher serves three schools; every write action has an approval record
S8 · School side: roster to term report
Steps
Office uploads the roster (CSV or photo) → agent proposes classes (never invents names) → school approves → accounts and PINs issued → consent dashboard → device and cache-point status → weekly attendance (incl. replay) and practice report → term report for the education authority (English / French)
Success
100% consent coverage before opening; weekly report delivered to principal and facilitator; report exportable
S9 · Corporate commissioned class (Phase 2)
Steps
HR submits roster and goal (workplace scenarios) → class opens → HR dashboard shows attendance, progress and completion only, never answer detail → certificates issued in bulk → settled per class with invoice
Success
Employees hold the same data-subject rights as school learners; HR access limited to report fields
S10 · Library: from competition essay to shared reading
Steps
Winning essays → publisher editing → level tagging → auto-listed in the library → teacher assigns shared reading → learners highlight, tap to define, annotate → new words to review cards → reading data into the knowledge graph → strong class work nominated for the next anthology
Weekly reading time and word-to-card conversion measurable; new titles listed automatically
S11 · Certificate issuance and verification (Phase 2)
Steps
Course ends → system proposes issuance (attendance ≥ 80% and mock exam passed) → teacher signs (creation chain) → Association seal and number → learner receives PDF and QR → a verifier enters the number at verify.gacee.org and sees validity, initials, course and level only
Success
Verification ≤ 2 s; revocation immediate; bulk verification by CSV
S12 · Support and tickets (multi-channel, agent-assisted)
Steps
WhatsApp / in-app assistant / email / school group / phone → one ticket inbox → classify (downloads, account, reports, schedule, data request) → ground (delivery logs, runbooks, policy) → recall same-school history → allow-listed low-risk actions executed automatically and logged (e.g. push the audio pack) → high-risk actions (identity, deletion) to a person → drafted reply; auto-sent when confidence ≥ 90% and allow-listed, otherwise held for review
Success
Median first response ≤ 5 minutes; auto-resolution rate recorded; data requests closed within 48 hours
3. Interface and scaffolding languages
Interface packs cover Chinese, English, Kiswahili, French, Spanish, Dutch and Indonesian, managed centrally by operations (set, review, correct, publish); unreviewed entries never reach production. Scaffolding (explanations) is English in the MVP, with French and Kiswahili added in Phase 2; the three pilot schools default to English, Kiswahili and French interfaces respectively.
08 · Workstream D
Delivery落地实施
This chapter gives the month-based master timeline, work breakdown structure, team, responsibility assignment, budget structure, risk register, quality acceptance and pilot operations manual. All windows are relative to the start month; if approval slips, every window moves with it.
Master timeline (seven months from the start month)
Work item
Sep
Oct
Nov
Dec
Jan
Feb
Mar
A · Approval, school shortlist, LOIs and teacher agreements (4 weeks)
A · Pilot MOU and data schedule (3 weeks)
A · Education authorities, enterprises, channels (rolling)
B · Needs research and field measurement (2–3 weeks per country)
C · Phase 0 PoC (8 cards, 4–5 weeks)
D · MVP build and freeze (6 weeks)
D · Pilot preparation (2 weeks per school)
D · Three-country pilot (6 weeks per school, staggered ≤ 2 weeks)
Weak-network and low-end testing, releases, monitoring
Legal counsel
1
External (local counsel in three countries as needed)
About 8 days in Phase 0, then as needed
Three-country memos, data schedules, consent, contract localisation
Local facilitator
1 per school
Pilot school
4 hours per week
Devices, roll call, on-site support, measurement
Responsibility assignment (RACI)
Item
Association lead
Platform lead
Programme manager
Liu Laoshi (pedagogy)
Ray (Africa)
Platform engineering
Pilot school
Counsel
Approval and budget
A
C
R
C
C
I
I
C
School selection and LOIs
A
I
C
C
R
I
C
C
Pilot MOU and data schedule
A
C
R
I
R
C
C
R
PoC conclusions and MVP scope
C
A
R
C
C
R
I
C
Curriculum, packs and teachers
I
C
I
A/R
I
C
C
I
Data and compliance design
A
R
C
I
C
R
C
R
Pilot operations and weekly reports
I
C
A/R
R
R
C
R
I
Authorities and market partners
A
I
C
I
R
I
C
C
Review and expansion decision
A
R
R
C
R
C
C
I
A accountable · R responsible · C consulted · I informed
Budget structure (cost lines and estimation method; no amounts assumed)
Cost line
Driver
Estimation
Cost lever
Association staff
Teacher hours, curriculum, operations
Hourly rate × hours + half-time salaries
Recording reuse; one teacher serves three schools
Platform staff
Person-months (table above)
Recorded per person-month as programme input
Reuse existing capabilities; strict MVP scope
Meeting tools
Host seats
2–3 paid seats per month
Existing tools first; no RTC minutes purchased
CDN and storage
Pack size × learners × downloads × countries
Modelled after PoC-2 unit prices in three countries
Low bitrate, school cache points, night downloads
Model calls
Sessions per learner per week × tokens per session
Modelled after PoC-5; per-tenant budget
Gateway cost routing; cache frequent answers
Legal
Countries × instruments
Per day; one local counsel per country
Templated consent and data schedules
School support
Device and data subsidies, facilitator stipends, cache-point device
Per school per month
Shared devices, offline packs
Travel
School visits, opening days
Per trip; video interviews preferred
One trip by Ray covers several schools
The review produces a measured cost per learner per month for each country, the sole basis for later pricing discussions with education authorities, employers and foundations.
Risk register
#
Risk
Likelihood
Impact
Response
Owner
R1
Cross-border live quality below threshold (one or all countries)
High
High
Architecture is recording-first; PoC-1 decides emphasis per country; live keeps audio only
Platform lead
R2
Insufficient curriculum capacity; nothing to teach at MVP
High
High
Start in September with the first six weeks of HSK Level 1; reuse existing courseware; AI-assisted generation with teacher review
Liu Laoshi
R3
MVP timeline too tight; quality suffers
High
Medium
Scope frozen per this plan; native app deferred; weekly demonstrable increments
Programme manager
R4
A candidate school in one country cannot sign on time
Medium
Medium
One alternate per country; staggered opening ≤ 2 weeks; worst case two countries proceed first
Ray
R5
Inadequate devices or power at a school
Medium
High
Research first; shared devices and multi-account; offline packs; cache point
Ray
R6
Cross-border data or minors' compliance not closed
Medium
High
PoC-8 up front; trilingual consent; data minimisation; no class without compliance
Counsel
R7
Undetected agent errors damage trust
Medium
High
Sourced answers + hand-off when uncertain; 50 items reviewed weekly; errors recorded openly
AI engineering
R8
Teacher resistance or attrition
Medium
Medium
Teachers co-design; tools reduce load rather than monitor; hours and voice licences are paid
Liu Laoshi
R9
Model and traffic costs run away
Medium
Medium
Tenant budgets and degradation; monthly cost report
AI engineering
R10
“HanQiao” name confused with the “Chinese Bridge” competition
Medium
Medium
HanQiao remains an internal code name; the external education brand is named separately after trademark search
Association lead
R11
External figures cannot be verified
Medium
Medium
Fact-sheet regime; unverified figures never published
Association content lead
R12
Single-vendor dependency for cloud or models
Low
Medium
Cloud-neutral matrix and Model Gateway; every third party has an alternative
Platform lead
R13
Local legal review delays signing in three countries
Medium
Medium
Non-binding LOI first; MOU with a common English master text and country schedules
Counsel
Quality and acceptance
Weekly demonstration: Friday, 30 minutes, real learner accounts under simulated weak network (256 kbps, 5% loss), showing the week's increment.
Low-end baseline: two 2 GB-RAM Android phones on the team; every learner feature accepted on them.
Agent evaluation set: 200 in-syllabus items run at every release; sourced rate, error rate and hand-off rate must not regress.
Security: one penetration test and dependency scan before MVP freeze; automated tenant-isolation tests.
User acceptance: signed acceptance sheets from teacher, learners and school, on whether a week of teaching and learning can be completed independently.
Pilot operations manual (per school)
Two weeks before opening
Roster and grouping (by age and level); 100% consent collected
Accounts and PINs issued; devices installed and packs pre-downloaded; cache point deployed
Two hours of training each for teacher and facilitator, including a degradation drill
Support channels: WhatsApp group + in-app assistant + tickets; duty roster
Weekly rhythm
Monday: recording and practice pack released
Wednesday: 30-minute live (or audio) class; absentees watch the replay
Daily: 15 minutes of agent-led practice and review cards
Per learner per month: model, traffic, meeting tools, staff allocation (per country)
Monthly cost table
Compliance
Consent coverage, data-request response time, security incidents
Register
09 · MOU & contracts
Memoranda and contracts备忘录与合同
This chapter lists every external legal instrument required for delivery, the key clauses of each, and reference samples. Samples use an English master text with Chinese as the working translation, for use by the Association's counsel and local lawyers during localisation; this chapter is not legal advice. Every signatory is marked “to be confirmed” until execution.
1. Instruments and signing sequence
#
Instrument
Parties (TBC)
Nature
Timing
Language
C1
Letter of Intent
Association ↔ pilot school
Non-binding (except confidentiality)
September, after shortlist
English / French
C2
Pilot MOU
Association ↔ pilot school (and governing body where applicable)
Binding: confidentiality, data protection, IP, termination; otherwise intent
October, before opening
English master + local translation
C3
Data Protection Schedule
Signed with C2; the platform provides a processor undertaking
Binding
With C2
English
C4
Guardian / learner consent form
Guardian (minor) or learner (adult) → Association
Binding
Before opening, 100% coverage
English / French / Kiswahili
C5
Teacher Services Agreement
Association ↔ individual teacher
Binding
From September
Chinese
C6
Voice Licence
Teacher → Association (platform as technical executor)
Binding, separate instrument, separately revocable
With C5 or Phase 2
Chinese
C7
Local Facilitator Agreement
Association or school ↔ facilitator
Binding
Before opening
English / French
C8
Corporate Programme Agreement
Association ↔ enterprise
Binding
Phase 2
English / Chinese
C9
Framework of Cooperation
Association ↔ education authority
Mainly intent
After pilot data
English / French
2. Contract management process
Templates: the samples here are the common templates; the Association's counsel finalises the English master text.
Localisation: one local lawyer per country reviews data-protection, minors, labour and tax clauses and produces a localisation variance table.
Signatory confirmation: Ray confirms the school's legal entity and authorised signatory; the Association lead confirms the Association's signatory.
Execution: electronic signature by default (DocuSign or equivalent); where paper is required locally, scans govern and originals are retained.
Register: the programme manager maintains the contract register (instrument, version, signing date, term, renewal reminder, data-schedule version).
Changes: changes to scope, term or data purposes are made by supplementary agreement and mirrored in the compliance register.
3. Key clauses and reference samples
C2 · Pilot MOU (structure and sample clauses)
1 Purpose and scope
A six-week Chinese-learning pilot for 20–40 learners at [School]; content is the first six weeks of HSK Level 1; delivered through the learn.gacee.org platform.
2 Term
From signature until completion of the pilot review; either party may terminate on 30 days' written notice; termination does not affect Clauses 7, 8 and 10.
3 Association obligations
Provide course content, remote teachers, platform access, training and support; charge no fee during the pilot; issue learning reports and completion certificates.
4 School obligations
Organise learners, provide a fixed timetable and venue, appoint a facilitator, assist with consent collection, permit on-site network measurement.
5 Fees
Free during the pilot; the School bears no system cost; the Association charges learners and guardians nothing.
6 Intellectual property
Course content, materials and brand belong to the Association; learner work belongs to the learner and may be used by the Association for teaching and non-commercial display with consent; platform software is owned by the Association's technology service provider and licensed to the School for the pilot.
7 Data protection
Per Schedule C3; the Association is controller, the School joint controller of its own learners' data; cross-border transfer only with guardian consent and in compliance with local law.
8 Confidentiality
Both parties keep unpublished pilot data, content and commercial information confidential for two years after termination.
9 Publicity
Prior written consent for any public reference to the pilot; separate consent for learner images and work.
10 Liability and disputes
Except Clauses 6–9, this MOU creates no binding obligations; disputes go to negotiation, then [SIAC / local court, to be fixed by counsel].
11 After the pilot
The parties may enter a formal agreement after the review; the School may request export or deletion of its learners' data.
Sample clause · Purpose and non-binding nature
This Memorandum of Understanding records the intention of the Global Association of Cultural and Educational Exchange (“the Association”) and [School] (“the School”) to conduct a six-week Chinese-language learning pilot for 20 to 40 learners using the Association's learning platform. Except for Clauses 6 (Intellectual Property), 7 (Data Protection), 8 (Confidentiality) and 9 (Publicity), this Memorandum does not create legally binding obligations. No fee is payable by the School, the learners or their guardians during the pilot.
C3 · Data Protection Schedule (key points)
Clause
Content
Roles
The Association is controller; the School is joint controller of its own learners' data; the technology platform is processor acting only on the Association's written instructions
Data items
Learners: name, age band, school and class, learning records, homework and audio; guardians: name and contact; facilitators: name and contact. No ID numbers, precise addresses or biometrics
Purposes
Teaching delivery, learning assessment, reports and certificates, pilot research (de-identified aggregates); no advertising; no learner data used to train any general model during the pilot
Storage and transfer
Core data in Singapore; encrypted in transit and at rest; cross-border transfer under a lawful route in local law and guardian consent
Retention
Deleted 12 months after the pilot or 30 days after account closure, whichever is earlier; the School may request earlier export and deletion
Sub-processors
Listed (cloud, CDN, meeting tools, model services); 30 days' notice of changes
Data-subject rights
Access, rectification, export, deletion, withdrawal of consent; acknowledged within 48 hours, completed within 30 days
Security incidents
Notification to the School and regulator within 72 hours of discovery, as required locally
Audit
The School may request an annual summary of isolation and security testing
Data items and purposes; storage in Singapore; explanation and legal basis of cross-border transfer.
Live classes are recorded and speech practice is stored for teaching and assessment; never for advertising or training general models.
How to withdraw consent and request deletion at any time; contact and response times.
A separate, unticked option for use of photographs, recordings and work in the Association's publicity or publications.
Adult learners sign for themselves; guardians sign for minors; the school keeps a copy.
Sample clause · Consent to recording
I understand that live classes are recorded and that my child's voice recordings from pronunciation practice are stored securely in Singapore and used only for teaching and assessment. I may withdraw this consent at any time by contacting [email], after which the recordings will be deleted within 30 days. ☐ I additionally agree that my child's photographs or written work may be used in the Association's non-commercial publications (optional).
C5 · Teacher Services Agreement (key points)
Clause
Content
Services
Recording, live classes, review queue, sign-off of key judgements, curriculum participation; weekly hour cap and preparation hours
Remuneration
Hourly rate + one-off recording fee + per-item review; monthly settlement; tax per the teacher's jurisdiction
Recording copyright
Copyright in recordings vests in the Association with attribution to the teacher; playable to learners within the platform, not sold externally; after termination, recordings may continue to serve classes already opened until they close
Pedagogical judgement
The teacher has final authority over grading, sign-off and certificates; platform tools only advise
Personal data
Teacher data minimised; storage and transfer under China's PIPL; contact details never published
Confidentiality and conduct
Learner data confidentiality; child-safeguarding code of conduct; no private charging
Termination
30 days' notice by either party; hand-over of classes in progress
C6 · Voice Licence (key points)
Scope limited to course narration, pronunciation demonstrations, library read-aloud and correction feedback; no other use.
Revocable at any time; generation stops and the voice model is deleted within 30 days; generated course audio is deleted once classes already opened close.
Separate consideration; the voice model is stored only in Singapore and never shared externally.
C8 · Corporate Programme Agreement (key points)
Clause
Content
Services
Class format (size, weeks, target scenarios), delivery (recordings + live + agent practice), HR report frequency, completion certificates
Fees and settlement
Per-class pricing (TBD); 50% before opening, balance on completion; invoiced by the Association
Data
Employee learners hold the same data-subject rights as school learners; HR sees attendance, progress and completion only; no answer-level detail
Service level
Best-effort during the pilot with availability recorded; 99.5% monthly availability and 24-hour response in formal operation
Intellectual property
Course content belongs to the Association; enterprise-specific content (glossaries, scenarios) belongs to the enterprise with a teaching licence to the Association
Termination
30 days' notice; classes in progress settled pro rata
C9 · Framework of Cooperation with an education authority (key points)
Scope: curriculum alignment, expansion to further schools, certification pathway, teacher training.
Data sovereignty: national learner data handled under national law; the authority receives de-identified aggregate reports.
Fees: the inclusive tier is free for public schools; other terms agreed separately.
Nature: framework, non-exclusive; specific projects contracted separately.
4. Use of the samples
Legal notice
The samples in this chapter are for reference by the Association's counsel and local lawyers when drafting and do not constitute legal advice; data-protection, minors, labour and tax clauses must be reviewed by local counsel in each country before signature. All amounts, percentages and terms are completed in the executed text according to negotiation.
10 · Pedagogy & content
Pedagogy and content教研与内容
Course content cannot be generated by technology in place of curriculum work. Curriculum is the effort most likely to become the bottleneck and must start in parallel with engineering. All three pilots use the same content; only the scaffolding language differs.
Stage
Content goal
Output
Review
MVP (end of October)
First six weeks of HSK Level 1: pinyin and tones, 150 words, basic sentence patterns, six everyday dialogue scenes
Six weeks of courseware and recordings, 300 objective items, 400 review cards, six photo-homework tasks, English scaffolding
China-side teacher first review → Liu Laoshi final review → entered
Pilot (November–December)
All of HSK Level 1 + Level 1 mock exam
Twelve weeks of content, two mock papers; first drafts of French and Kiswahili scaffolding
As above, revised with teacher and facilitator feedback
Standards alignment: anchored to HSK 3.0 (three bands, nine levels) and YCT; every knowledge point carries level and source in the graph; platform certificates are strictly separate from official certification.
Production method: teachers write the syllabus and key explanations; AI drafts exercises and variants; teachers review item by item before entry; unreviewed content never enters the graph.
Publishing and Future Academy: modules coded to the Academy's four strands; strong lecture notes and learner work become publishing material; competition prompts serve as writing practice; new titles are listed in the library automatically.
Local systems: the pilot collects the three countries' curriculum standards and term rhythms in preparation for certification discussions in Phase 3.
11 · Compliance
Compliance and data合规与数据
The compliance register records law, obligation and evidence per country and becomes a design input only after confirmation by counsel. The table lists boundaries to be confirmed and is not legal advice; applicability in each country follows the PoC-8 legal memos.
Scope
Law (applicability to be confirmed)
Main obligations
System implementation
Status
Singapore (Association and core data)
PDPA
Consent, purpose limitation, protection, retention, transfer, data protection officer
Privacy policy, consent management, Singapore residency, export and deletion endpoints
Platform aligned; the Association appoints a DPO
Nigeria (learners)
NDPA 2023 and NDPC rules
Lawful basis, guardian consent for minors, transfer conditions, possible registration
Guardian consent, minimisation, transfer records, school sub-tenant isolation
Legal memo pending
Kenya (learners)
Data Protection Act 2019 (ODPC)
Controller / processor registration, protection of minors, transfers with ODPC-recognised safeguards
As above; registration status in the register
Legal memo pending
Côte d'Ivoire (learners)
2013 personal data protection law (ARTCI)
Declaration or authorisation of processing, protection of minors, transfer authorisation
As above; filings archived
Legal memo pending
China (remote teachers)
PIPL and cross-border transfer rules
Minimisation, notice and consent, transfer assessment thresholds
Teacher data minimised; recording and voice licences; no media node in China
Legal memo pending
European community schools (Phase 3)
GDPR
Data processing agreement, data-subject rights
DPA template, export and deletion
Phase 3
Content and child protection
National online child-protection requirements
Content moderation, reporting and appeal, recording notice
Review queue, reporting entry, recording notice announced in three languages at every class
Built into MVP
AI governance
Singapore AI governance framework (voluntary)
Transparency, human oversight, traceability
Sourced outputs, hand-off, audit trail, errors recorded openly
Covered by design principles
Data flows and sovereignty (written into the data schedule)
The Association is controller, the technology platform processor, and each school joint controller of its own learners' data; recorded in the MOU and schedule.
Core data in Singapore; learner-side local data encrypted; episodic memory append-only, exportable and deletable; deleted within 30 days of account closure.
Genuine isolation between schools: tenant-isolation tests are part of the release gate.
No commercialisation of data during the pilot; no learner data used to train general models.
One local data contact per country (the facilitator may serve) receives data-subject requests in the first instance.
12 · Governance
Governance and communication治理与沟通
Joint programme office
Association lead, platform lead, programme manager, pedagogy lead (Liu Laoshi) and Africa business lead (Ray); 45-minute meeting every Monday; the programme manager keeps the single plan, risk table and contract register.
Decision rights
Scope and timing: programme office; budget and external agreements: Association board; architecture and technology: platform lead; curriculum and teachers: Liu Laoshi; pilot schools and local relations: Ray.
Document system
One shared drive: plan, PRD, ADRs, compliance register, contract register, weekly reports, minutes, acceptance sheets. All external material draws on the brand manual and fact sheet.
Communication
Frequency
Participants
Format
Programme meeting
Every Monday
Programme office
Progress, risks, decisions; 45 minutes
Friday demonstration
Every Friday
All + school representatives (optional)
Real accounts under weak network; 30 minutes
Pilot weekly report
Every Friday
Board, three schools, teachers
One page: metrics, issues, next week; per school
Board report
Once at each of M1–M4
Board
Gate conclusions and decision requests
School communication
Every two weeks
Principal, facilitator, parent representatives
Call or visit
Change control
As needed
Programme manager
Change note; changes affecting timing, cost or compliance need programme-office approval
13 · Decisions
Decision list决策清单
#
Decision
Recommendation
Decider
By
D1
Approval and authority to contract
Board resolution authorising the Association lead to sign C1–C7
From the four-dimension shortlist, recommended by Ray
Association lead
September, week 4
D4
MVP scope (native app deferred)
Per the table in §05
Programme office
M1
D5
Live / recording emphasis per country
Per PoC-1 conclusions
Platform lead
M1
D6
Media or access node in China
None during the pilot
Platform lead + counsel
M1
D7
Unified education brand name
“Tongwen” or “Shuqiao”, fixed after trademark search; “HanQiao” remains a code name
Association board
End of September
D8
Pilot fees
Entirely free; seats and corporate classes charged from Phase 2
Association lead
M1
D9
Governing law and forum
Singapore law + SIAC, enforceability confirmed by local counsel
Association lead + counsel
October, before C2
D10
Expansion list and countries
Per cross-country conclusions and the four-dimension score
Association board
M3
14 · Appendix
Appendix · Templates附录 · 模板
A. Principal interview guide (60 minutes)
School profile: grades, enrolment, current Chinese provision, weekly hours and slots.
Devices and network: number and condition of school devices, operator and tariffs, power-cut frequency, shared classrooms and projector, room for a cache-point device.
Teachers and facilitators: who organises the class; share of mother tongue versus English / French / Kiswahili.
Parents: channels, payment habits and capacity, attitude to children's data.
Outcomes: what parents and the school value most (certificate, exam, speaking); awareness of HSK / YCT.
Concerns: about AI, about data, about time and cost.
Cooperation: what the school will provide, what it expects from the Association, expectations of the free pilot and afterwards.
B. PoC record fields
Card number · country and school · date and time slot · location and operator · device · executor · steps · raw measurements · pass / fail · evidence files (screenshots / logs / audio) · conclusions and recommendations · reviewer.
C. Pilot weekly report template (one page, per school)
This week's numbers (active, attendance incl. replay, practice, homework, accuracy, hand-off, cost) · three things that went well · three issues and owners · next week's plan · decisions needed from the board or the school.
D. School scoring sheet
Country · school · contact · network and power (1–5) · demand and organisation (1–5) · partner maturity (1–5) · compliance feasibility (1–5) · total · visit date · conclusion (sign / alternate / exclude).
E. Contract register fields
Instrument ID · type · parties · country · version · signing date · effective date · expiry · data-schedule version · localisation variance table · storage location · renewal reminder.
F. Glossary
PoC
Proof of concept: the smallest experiment that answers one risk question
MVP
Minimum viable product: the smallest feature set that lets a real class complete a full cycle
PWA
Installable web application that runs offline
RTC
Real-time audio and video
TIDAR KAG
The platform's provenance-bound knowledge-graph generation, used for low-hallucination Q&A and mastery judgement
Agent Harness
The base for building, running, evaluating and governing agents
MOU / LOI
Memorandum of understanding / letter of intent
DPA
Data processing agreement or data protection schedule
ADR
Architecture decision record
HSK / YCT / HSKK
Chinese Proficiency Test / Youth Chinese Test / HSK Speaking Test