Gateway AI in EDU Summit  /  23 July 2026

AI Governance Is Not
a Policy Document.

The distance between the rules a district writes and what actually happens the moment a student or staff member hits Enter.

Caleb Vail  Founder, TenetInteractive working sessionApprox. 50 minutes
The problem

AI is already everywhere. The policy is the only thing standing still.

Students and staff use AI every day, on district devices and their own. One in ten teens now do all or most of their schoolwork with a chatbot. Most districts answered with a written policy, and almost none can say whether it changes anything the moment someone opens a chat.

Teens using AI chatbots for schoolwork
13%
26%
54%
202320242025
Doubled, then doubled again. Pew Research, 2023 to 2026.
53%

of teachers now use AI for school as well.

RAND, 2025
60%

of U.S. schools have no guidance for generative AI use.

RAND, 2025
The plan

How this session works

Part 1

The tradeoffs

The real tensions in writing an AI policy, and the nuance most rules ignore.

Part 2

The test

In groups of three, we run a reasonable policy through a normal school day, live.

Part 3

The break, and the cost

Where these policies fail, how districts try to enforce them, and what that enforcement costs in reliability and in people.

This is not only about students

Governance has two arenas

Exhibit 1
Arena 1

The classroom

Students using AI for the work itself: academic integrity, safety, and the personal data they paste into a prompt.

Arena 2

The back office

Staff and the program you are building: teachers, counselors, and administrators putting rosters, IEPs, and records into AI, plus the internal tools a district stands up on its own data.

A program that covers one arena and forgets the other is not a program. Most policies forget the second.

Self-assessment

Three levels of AI control

Exhibit 2  /  click your level
Most districts live at Level 1, believe they are at Level 2, and need Level 3.
Before we write a single rule

Good policy has to hold real tensions

For discussion
Teacher autonomyvsDistrict consistency
Teachers advocate for their own judgment and academic freedom, and the best classroom use is often the one a teacher invented. A blanket rule can override the professional closest to the student.
UsablevsSafe
Too restrictive and students leave for ungoverned tools. Too open and the guardrails are gone. The rule has to keep AI worth using on the governed path.
OversightvsPrivacy
To govern use you have to see it, and seeing it creates its own surveillance risk. Governance has to act without hoarding what students and staff type.
The open question

Should the rules change by grade? A second grader and a graduating senior are not the same user, yet most policies treat them as one.

K-56-89-12
Working session

Test a policy against
a normal day.

Find two people near you. Each takes one role and plays it honestly, pressures and all. The goal is not to design a perfect policy. It is to watch a reasonable one meet reality.

Groups of three  /  assign now

The three roles

Protects the district / builds the program

The Administrator

"I answer for everyone, and I cannot be everywhere."

  • Owns FERPA, COPPA, and reputation
  • Is standing up the internal AI program
  • Has authority, but no view into the chat
Protects the learning

The Teacher

"I want them to think, not outsource the thinking."

  • Cares about learning and integrity
  • Also a daily AI user with student data
  • Little visibility into what is typed
Protects their time

The Student

"I am not trying to cheat. I am trying to be done."

  • Path of least resistance wins
  • Has a phone, home wifi, personal login
  • Treats friction as a thing to route around
How it works

Three short rounds

1

Write good rules  ·  5 min

As a trio, agree on three AI rules you genuinely believe are smart and fair. Write them down.

2

Take a situation  ·  2 min

Choose one everyday situation from the next exhibit. Your district on an ordinary day.

3

Play it out  ·  10 min

Run it through each role, then mark each rule: held, ignored, or could not tell.

Round 1

Write your three good rules

Do not overthink it. The rules already in your handbook are perfect. Three that come up constantly:

01 Only district-approved AI tools may be used.
02 Never put student or staff personal information into AI.
03 AI may assist as a tutor, but the work must be the person's own.
Round 1 timer
05:00
Round 2  /  choose one

Everyday situations

Exhibit 3
01Student

It is 11pm. An essay is due at 8am. The approved tool is slow tonight. The phone is on the desk.

02Teacher

Before reteaching, a teacher wants the common mistakes across a stack of graded, named essays, fast.

03Student

The assignment allows AI "as a tutor." A student opens a chat to draft the introduction.

04Staff

An office staffer pastes a student's records into AI to draft a letter home to the family.

05Student

A help bot appears inside a trusted, approved website and offers to "write this for you."

06Program

A department stands up an internal AI assistant trained on district files, with no review.

Round 3

Play it out

Run it like a real Tuesday. Be honest about what each role can actually do with the tools they have today.

S Student: comply, or route around the friction.
T Teacher: notice it, prevent it, or prove it.
A Admin: watch the three rules and mark each.

The finding: when a rule was ignored, who would have known, and how? If the honest answer is "no one," write it down.

Round 3 timer
10:00
Compare notes

Which rule broke first?

01 What did the situation do that the policy never anticipated?
02 Could anyone actually see it happen?
03 Was the rule wrong, or simply impossible to enforce?
A distinction that changes everything

Policy is not governance

Exhibit 4
PolicyGovernance
FormA documentA system
LifecycleWritten once, then staticRuns continuously
TestedRarely, until an auditEvery prompt, in real time
Visible at point of useNoYes
Covers staff and internal useSeldom addressedBy design

We keep purchasing the first and reporting it as the second.  Source: Tenet, 2026.

The pattern, nearly every time

The rules were not bad. They were undefended.

Exhibit 5

Invisible

Most use is never seen at all: personal accounts, phones, and AI that appears inside sites you already allow.

Unenforced

What you do see, nothing acts on in the moment. The policy is a request, and the prompt has already been sent.

Unmanageable

Flag-only tools bury staff. 5,500 alerts in two days is not oversight, it is a backlog no one can clear.

The landscape

Four ways districts try to enforce

Exhibit 6
Before, at the door

Web filters

Block known sites. Miss embedded AI, new tools, phones, and what gets typed.
During, if watched

In-class monitoring

A teacher watches screens. Blind after the bell, at home, and inside the prompt itself.
After the fact

Assignment review

Inspect the final product. Catches the essay, not the process or the data already shared.
Every prompt, everywhere

Point-of-use governance

Sees, enforces, and protects as it happens, on device. Where Tenet works.

Each earlier method guards one slice of time. Only point-of-use governance covers the moment the prompt is sent.

Why each approach falls short

Visibility versus enforcement

Exhibit 7  /  advance to plot

Two axes decide whether a rule survives a normal day: can you see what is happening, and can you act on it the moment it happens.

01 A written policy sees nothing and enforces nothing.
02 A web filter adds a little visibility, still no enforcement of use.
03 Only point-of-use governance reaches the top right.
Enforcement at point of use →
Real governance
All intent,
no control
Written policy
Web filter
Point-of-use governance
Visibility into actual use →
Blocking cannot keep up

AI now appears inside the sites you already trust

Exhibit 8

Blocklists chase domains. But AI assistants now spawn inside approved sites: a help bot in your student system, an AI tab in a search engine, a writing assistant inside a document tool. The domain is allowed. The AI is not governed.

× A trusted, allowlisted site that just added an AI chat
× A brand new AI tool the blocklist has not met
× A personal phone or login, off the network
× Home wifi, where the filter does not reach
The takeaway

The answer is not to block harder. Lock everything down and students simply leave for ungoverned devices. The goal is to make district AI usable and safe, so the governed path is the easy path. For off-network use, we partner with a home solution.

Field evidence

The filter was on. The gaps were still there.

Exhibit 9

A district already running an AI-governance web filter surveyed its high school teachers before adding point-of-use governance. With the filter live:

92%
of teachers do not trust students to use AI appropriately without direct human supervision
Rated 1 or 2 of 5. 70% chose the lowest rating. Not one teacher strongly agreed.
70%

say AI misuse is already a problem in their own classroom.

78%

say it is a problem at home, where the filter does not reach. 61% strongly agree.

Baseline teacher survey, n = 23, grades 9 to 12, 2026. AI-governance web filter and transparency tooling already in place.

Not all "monitoring" is the same

Transparency, flagging, and governance

Exhibit 10
Posture 1

Transparency

You can see the logs. Useful, but after the fact, and only if someone reads them.

Posture 2

Flagging

You get alerts. Still after the fact, and the volume can bury the people meant to act.

Posture 3

Active governance

It acts in the moment, at the point of use: redact, block, or hold the line as it happens.

After the factIn the moment

Most tools stop at flagging and call it safety. Seeing a problem is not the same as preventing it.

From a real district

Guess the number

Exhibit 11

One school we worked with switched on a monitoring tool that flags risky chats. In its first two days, across more than 1,500 student conversations, how many flags did it raise?

?flags in 2 days
across 0+ conversations

On paper, this is maximum visibility, a flag every thirty seconds. But with no realistic resources to act on them, it is as good as tracking nothing at all. Flagging told them it happened. Nothing stopped it. Visibility you cannot act on is not safety. It is noise.

The cost of staying in control

Control is manual, and it is wearing teachers down

Exhibit 12
Who feels in control
43%
of teachers feel in control of AI use in their classroom.
Fewer than half. And the ones who do are not relaxed about it.
What that control runs on
90%
of those in-control teachers still do not trust students to use AI unsupervised.
70% rate that trust at the very lowest, and only 10% trust them. 30% say monitoring AI already eats meaningful class time. Their control is vigilance, not the tool.
The human cost

The teachers who feel in control are the ones watching every session. The rest may simply not see what they are missing. Either way, a policy that runs on teacher vigilance is borrowing against the people you can least afford to burn out. Governance should carry that weight, not the teacher.

Baseline teacher survey, n = 23, grades 9 to 12, 2026.

For the ones building the program

The same gap, inside your own walls

Exhibit 13

An internal AI program is not a vendor list and a training day. The same failures appear the moment staff start working, and they carry record-level data.

Define the approved lane, then defend it

An allowlist no one enforces is the Level 1 policy again, just for adults.

Protect the data at the moment of paste

Rosters, IEPs, and personnel files leave through staff prompts, not student ones.

Govern what you build, not only what you buy

An internal assistant on district data needs the same guardrails you ask of any vendor.

In one line

A policy without enforcement
is a suggestion.

Where this leads

The gap we built Tenet to close

Governance inside the AI conversation, on the device, in real time, for students and staff.

Prompt
A student or staff member types or uploads.
Tenet, on device
Redacts personal data, applies policy, checks safety, before anything leaves.
AI tool
Receives only what is allowed. Response rewritten on screen.

Sees the prompt

Redacts names and personal data before anything reaches the AI, typed or uploaded.

Enforces the rule

District, classroom, and staff policy applied live across every major AI tool.

Catches the crisis

On-device safety detection surfaces self-harm and bullying as it appears.

Selected evidence

What the research shows

Sources

26% of U.S. teens now use ChatGPT for schoolwork, double the 2023 share.

Pew Research Center, 2025

7 in 10 teens have used a generative AI tool; 40% used it for school assignments, and 46% of those did so without the teacher's permission.

Common Sense Media, 2024

About 6 in 10 teens say their school has no rules for generative AI, or they are unsure whether it does.

Common Sense Media, 2024

Teacher generative-AI use reached 83% in 2023-24, up 32 points in a year, while most schools still give minimal guidance on responsible use.

Center for Democracy & Technology, 2024

With student-monitoring software, 78% of teachers said students were flagged for discipline and 44% said a student was contacted by law enforcement from an alert.

Center for Democracy & Technology, 2022

OpenAI retired its own AI-text detector over a "low rate of accuracy"; such detectors also disproportionately misflag non-native English writers.

OpenAI / TechCrunch, 2023
Thank you

Governance is not what you
wrote. It is what you enforce.

Caleb Vail  Founder, Tenetcaleb@truemadeai.comtruemadeai.com773.766.5694
AI Governance Is Not a Policy Document1 / 22