# Safe AI Tutoring for Minors: Guardrails and Escalation > K-12 · AI Course · K12-2 > Source: https://ibl.ai/solutions/k-12/course/safe-ai-tutoring-for-minors > Last updated: 2026-08-25 **Building a tutoring agent for children — content moderation, self-harm escalation, grooming-pattern detection, and the mandatory-reporter workflow behind it.** ## The Short Answer **A tutoring agent for children needs safety layers an adult-facing one never triggers — crisis escalation, boundary design, and a mandatory-reporter workflow. ibl.ai runs these guardrails inside district infrastructure where you own all the code and the data, so safety logs and student disclosures stay under district control rather than a vendor's moderation queue.** On ibl.ai you own all the code and the data, run it model-agnostic across any LLM, and pay with no per-seat pricing — so you can deploy anywhere, from your own cloud to a fully air-gapped network. [Request Access](https://ibl.ai/contact) · [Explore K-12](https://ibl.ai/solutions/k-12) ## Course facts - **Level:** Intermediate - **Duration:** 6 hours across 8 modules - **Format:** Cohort workshop with red-team labs - **Modules:** 8 - **Catalog code:** K12-2 - **Frameworks covered:** COPPA, FERPA, Mandatory reporting statutes, NIST AI 600-1 ## What is this course about? Everything changes when the user is twelve. This course covers the safety requirements a tutoring agent for minors must meet that an adult-facing one never triggers: layered moderation, tested crisis escalation, boundary design that prevents the agent becoming a confidant, and the mandatory reporting workflow that has to sit behind a disclosure. ## Who is this course for? - Directors of student services and counseling - District technology leaders deploying student-facing AI - School counselors and social workers - Curriculum and instruction leaders ### What do I need before starting? - Familiarity with your district's mandatory reporting procedures - Recommended: The K-12 AI Compliance Stack (K12-1) ## What will I be able to do afterwards? - Specify the safety requirements that apply because the user is a minor - Design layered moderation across input, output, and conversation level - Build and test a crisis escalation path end to end - Connect agent disclosures to the district's mandatory reporting workflow - Red-team a student-facing agent against a child-safety test suite ## What does each module cover? ### Module 1 — What changes when the user is twelve? The safety requirements that apply to minors and do not exist for adult users. _(40 min)_ **Objectives** - Enumerate minor-specific safety requirements - Distinguish developmental appropriateness from content filtering - Set the risk posture before design begins **Topics:** Minor-specific requirements · Developmental appropriateness · Duty of care · Risk posture **Activity:** List the requirements your district would apply to a human tutor and map each to the agent. ### Module 2 — How do you layer moderation? Input filtering, output filtering, and conversation-level review, and why any single layer fails. _(55 min)_ **Objectives** - Design moderation at three distinct layers - Explain why single-layer moderation fails predictably - Tune thresholds against false positives that block legitimate learning **Topics:** Input filtering · Output filtering · Conversation-level review · Threshold tuning **Activity:** Configure three moderation layers and measure the false-positive rate on real student questions. ### Module 3 — What happens when a student discloses self-harm? Crisis escalation designed, implemented, and actually tested rather than assumed. _(55 min)_ **Objectives** - Design the crisis escalation path with named human recipients - Implement immediate response behavior that does not abandon the student - Test the full path end to end including after hours **Topics:** Crisis detection · Immediate response design · Named escalation recipients · After-hours coverage **Activity:** Run a full end-to-end escalation test including the after-hours path and time it. ### Module 4 — How does mandatory reporting work when an agent receives the disclosure? The reporting obligation and how the workflow has to be built for an agent-mediated disclosure. _(45 min)_ **Objectives** - Determine reporting obligations for agent-received disclosures - Design a workflow that preserves the record and the timeline - Train staff on their role in the agent-mediated path **Topics:** Reporting obligations · Record preservation · Timeline requirements · Staff training **Activity:** Map the reporting workflow from agent detection to filed report with timestamps. ### Module 5 — How do you stop the agent becoming a confidant? Boundary design that keeps a tutoring agent tutoring rather than substituting for human relationship. _(50 min)_ **Objectives** - Design boundaries that redirect toward human support - Detect relational drift in conversation patterns - Handle loneliness disclosures without cruelty or overreach **Topics:** Boundary design · Relational drift detection · Redirection to humans · Compassionate limits **Activity:** Design and test the agent's response to five escalating relational prompts. ### Module 6 — How do you log for safety without building surveillance? Retention and access design that supports safety review without monitoring every child. _(45 min)_ **Objectives** - Specify minimal logging sufficient for safety review - Design access controls on safety logs - Set retention that meets obligation without indefinite storage **Topics:** Minimal sufficient logging · Access control · Retention limits · Surveillance avoidance **Activity:** Write the logging specification and defend each retained field. ### Module 7 — What do families get to see and control? Parent transparency, opt-out, and communication that builds trust rather than triggering alarm. _(40 min)_ **Objectives** - Design family-facing transparency about the agent - Implement opt-out that works across systems - Communicate deployment to families proactively **Topics:** Family transparency · Opt-out mechanics · Proactive communication · Trust building **Activity:** Draft the family communication and opt-out process for an agent launch. ### Module 8 — Red-teaming your tutor with a child-safety suite The hands-on module: adversarial testing against a structured child-safety test suite. _(60 min)_ **Objectives** - Execute a structured child-safety red-team - Document and triage every failure found - Establish a re-test cadence tied to model changes **Topics:** Red-team methodology · Failure triage · Regression testing · Re-test cadence **Activity:** Run the full suite, log every failure, and remediate the highest-severity three. ## What is the capstone project? **Child-safety review package for a student-facing agent.** Produce the complete safety package for a student-facing agent: moderation architecture, tested escalation path with timings, mandatory reporting workflow, logging specification, family communication, and red-team results with remediation. _Deliverable:_ A safety package a superintendent could present to a board and a counselor would trust. ## How are learners assessed? - Escalation path must pass a timed end-to-end test including after hours - Red-team results reviewed for coverage against the standard suite - Logging specification defended field by field ## What ships with the course? - **Facilitator guide.** Session-by-session running order, discussion prompts, and the questions that reliably derail a room. - **Learner workbook.** Exercises, checklists, and the templates each module's activity produces. - **Hands-on lab environment.** A sandboxed ibl.ai deployment so exercises run against real agents, not screenshots. - **Assessment bank.** Scenario questions and rubric criteria mapped to each stated learning outcome. - **Source bibliography.** Every primary regulation and standard cited on this page, linked and dated. ## Which AI agents does this course use? - [Tutoring Agent](https://ibl.ai/solutions/k-12/agent/tutoring-agent) - [Student Safety Agent](https://ibl.ai/solutions/k-12/agent/student-safety-agent) - [Family Communication Agent](https://ibl.ai/solutions/k-12/agent/family-communication-agent) - [Special Education Agent](https://ibl.ai/solutions/k-12/agent/special-education-agent) ## Where does the course material come from? Every module is grounded in primary sources — the regulation, standard, or research itself, not a summary of it. Each was resolved at authoring time. - [Children's Online Privacy Protection Rule](https://www.ftc.gov/legal-library/browse/rules/childrens-online-privacy-protection-rule-coppa) — Federal Trade Commission. Governs data handling for the under-13 users this course centers on. - [OWASP Top 10 for LLM Applications](https://owasp.org/www-project-top-10-for-large-language-model-applications/) — OWASP. Red-team methodology basis for Module 8, adapted to child safety. - [Student Privacy Compass](https://studentprivacycompass.org/) — Future of Privacy Forum. District practice guidance on student-facing tool deployment. - [NIST AI 600-1, Generative AI Profile](https://nvlpubs.nist.gov/nistpubs/ai/NIST.AI.600-1.pdf) — NIST. Generative-AI risk taxonomy underpinning the moderation design. ## Delivery notes Binding guidance for anyone preparing and delivering this course: - Module 3 must involve an actual school counselor in design and delivery. An escalation path designed only by technologists routes to people who are not there and cannot act. - The red-team suite in Module 8 is the course's most valuable artifact. Build it with counselors and ship it as a standalone, versioned asset districts can re-run after every model change. - Handle the self-harm content carefully in delivery. Warn facilitators in advance, provide participant support resources, and do not use real student disclosures as examples under any circumstance. - Module 5's relational drift material is genuinely difficult and under-researched. State the uncertainty explicitly rather than presenting a confident framework the evidence does not support. - Do not let Module 6 slide into a monitoring product pitch. The stated design goal is minimal sufficient logging, and every retained field must be individually justified. ## Why run AI training on a platform you own? - **You own the course, not a licence to it.** Course content, learner data, and the platform run inside your perimeter — you own all the code and the data. - **Model-agnostic delivery.** Run the course's AI components on any LLM — Claude, GPT, Llama, Gemini, Command — and switch anytime. - **No per-seat training licences.** Usage-based or self-hosted, so cost tracks actual use rather than headcount. - **Deploy anywhere.** Cloud, private VPC, on-premise, or fully air-gapped — including for cohorts that cannot use public AI tools. ## Frequently asked questions ### What does the Safe AI Tutoring for Minors: Guardrails and Escalation course cover? Everything changes when the user is twelve. This course covers the safety requirements a tutoring agent for minors must meet that an adult-facing one never triggers: layered moderation, tested crisis escalation, boundary design that prevents the agent becoming a confidant, and the mandatory reporting workflow that has to sit behind a disclosure. It runs 6 hours across 8 modules across 8 modules, at intermediate level, and closes with a capstone: Child-safety review package for a student-facing agent. ### Who should take Safe AI Tutoring for Minors: Guardrails and Escalation? It is written for Directors of student services and counseling, District technology leaders deploying student-facing AI, School counselors and social workers, Curriculum and instruction leaders. Prerequisites: Familiarity with your district's mandatory reporting procedures; Recommended: The K-12 AI Compliance Stack (K12-1). ### Can we run this course on our own infrastructure? Yes. ibl.ai is model-agnostic and deploy-anywhere — cloud, private VPC, on-premise, or fully air-gapped — and you own all the code and the data. Cohort data, submissions, and any material learners upload stay inside your perimeter, which matters for k-12 teams that cannot send work to a public AI tool. ### How do we get access to Safe AI Tutoring for Minors: Guardrails and Escalation? Request access and we will set it up for your cohort — hosted by ibl.ai, or running against your own deployment. Tell us the group size and timing you need, and whether it should run inside your own perimeter. ### How much does AI training for k-12 cost on ibl.ai? There is no per-seat pricing — you pay for usage or self-host and pay only for the infrastructure, so a 5,000-person rollout does not cost 5,000 licences. 1.6M+ users across 400+ organizations run the platform this way, including NVIDIA, MIT, and Syracuse University. ## More K-12 courses - [The K-12 AI Compliance Stack: FERPA, COPPA, and CIPA](https://ibl.ai/solutions/k-12/course/k12-ai-compliance-stack): The three federal rules governing AI in a district, what each requires of a vendor, and the deployment architecture that satisfies all three at once. - [AI Lesson Planning Aligned to State Standards](https://ibl.ai/solutions/k-12/course/ai-lesson-planning-standards-aligned): Generate standards-aligned lessons that survive a curriculum audit — grounded on your state's standards, your adopted materials, and your scope and sequence. - [AI in the IEP Process: Drafting, Compliance, and the Human Signature](https://ibl.ai/solutions/k-12/course/ai-in-the-iep-process): Cut IEP paperwork without ceding a legally binding decision — drafting present levels, goal writing, and the IDEA requirements no agent can satisfy for you. - [Academic Integrity and Assessment in K-12](https://ibl.ai/solutions/k-12/course/academic-integrity-and-assessment-k12): What to do when every student has a writing machine — grade-band policy, assessment redesign, and why detection tools create more problems than they solve. - [Teaching AI Literacy: A K-12 Scope and Sequence](https://ibl.ai/solutions/k-12/course/k12-ai-literacy-scope-and-sequence): A vertically-aligned AI literacy progression from elementary through high school — what to teach at each band, and the activities that make it concrete. - [District AI Procurement: Evaluating Vendors and Contracts](https://ibl.ai/solutions/k-12/course/district-ai-procurement): A procurement process a school board will approve and a privacy officer will sign — evaluation rubric, contract clauses, and the questions vendors dodge.