CAFA AIG²
Open the app

AI proposes. Code decides.

Write the knowledge behind an item family once — the variables, their values, and which answer options each value allows. CAFA AIG² enumerates every valid item, verifies each one, and certifies the set. Any domain.

The numbers on the right are computed in this page by the same code the app runs. Switch the domain to see another example counted live.

Loading examples…
–usable items
–answer-changing combinations
–contradictions dropped
–all combinations

How it works

Three artefacts. The first two you write; the third is generated and checked by code, so the correct answer of every item is decided by logic, never by a language model.

1

Item Model

The stem with variable positions, and the fixed answer options.

2

Ontology Model

For every variable: its values, and the options each value is compatible with.

3

Generated, verified item

One of the valid combinations, with its answer — and every generated item is checked, not sampled.

The intersection rule: the answer to a combination is the intersection of its values' compatibility sets. A combination is a usable item only when exactly one option remains; an empty intersection is a contradiction and is dropped.

Try it

The rule only checks that the answer is unique. It cannot know that two values never occur together in the real domain. Untick a combination and watch the counts change — this is exactly what an author does in the app.

Usable items –Excluded by you 0Model fingerprint –
Generated here from the model above with seed "landing-demo". No account needed.

The fingerprint changes when you exclude a combination: an exclusion is part of the model, and every generated set records the fingerprint it came from.

What the certificate proves — and what it does not

When an author asks for a certified set, the server regenerates it from the stored model with the same deterministic core the browser runs, fires three positive controls on a deliberately corrupted copy (a leftover placeholder, a duplicate, a bad answer position — each must be caught, or the verdict is refused), verifies every item, and records the certificate. The browser has no permission to write one.

Proved, over all items

  • No unresolved placeholders
  • No duplicate conditions
  • Every answer position valid
  • Regenerated on the server from the exact model version, and the set's hash matches what the author saw

Not verified — and said so on every certificate

  • Domain accuracy of values and options
  • Curriculum fit and item difficulty
  • Equivalence of items that differ only in surface-only variables

A certificate that hides its limits is worth less than none. The human review stays where it belongs.

Verify this certificate — anyone can, with the delivery id printed on every export.

A real certificate, issued 2026-09-29 for the nursing COPD family:

Checked all 10 of 10unresolved [placeholders] 0duplicate conditions 0answer position errors 0
Seed "workshop-2026-10-24" · CAFA AIG² v4.1 · Ontology Model of 4 variables, 5 options · model f1921f41d977 · set fe2af11cdc41
Not verified: domain accuracy of values and options · curriculum fit · item difficulty · equivalence of items that differ only in surface-only variables
Server certificateverdict pass · controls fired · findings 0 · artifact matches this page's set
delivery 281c7a20-22cb-4f96-bea4-1eb3a4c8737d · artifact fe2af11cdc41 · cert 7b2c51ec0fbc · model f1921f41d977 · cafa-aig2-core@v2 · cafa-aig2-certify@1.0

For institutions

Licensing bodies, certification programs, and universities need more than generated items: they need to know who wrote what, from which version, and what was checked.

Separate workspaces
Every organization's models, sets, and certificates are isolated at the database level. A member of one workspace cannot read another's.
Immutable versions
A saved model is a version with a fingerprint. It is never edited in place; a change is a new version that points to its parent.
Server-issued certificates
Certificates are written only by the server, after positive controls. The database refuses a "pass" whose controls did not fire.
Reproducible sets
Same model version, same seed, same settings: the same items, years later. Every export carries the seed and the fingerprint.
Standard exports
Every set exports as an IMS QTI 2.2 package for item banks and LMSs, and as CSV, JSON and Word — each carrying the seed and the model fingerprint.
Audit trail
Every certificate is mirrored to an audit table the moment it is issued, with the author, the version, and both hashes.

Pricing

Training Account
Included with a course or workshop. 10 AI drafts a day. Contact your instructor.
Professional Account
USD 1,200 per year. Your own workspace, 100 AI drafts a day, unlimited generation and certificates.
Institutional Account
Workspaces per program, roles, audit trail, drafting sized to the program or your own key. Contact support@cafalab.com.

See the plans in full