Governed Agentic Infrastructure Architect
A professional certification for the architect who designs, builds, secures and governs AI as infrastructure — from the software and cloud architecture to the deterministic gates that decide what an agent may actually do.
The blueprint and the exam format are defined. Registration is not open yet: it will happen here, on aisac.global, once the program's regulation is published. See the status.
Assessed competence in governed agentic infrastructure.
The AISAC-AR assesses whether a professional can take AI from a prompt to an operable system: choose and defend the architecture, work with coding agents, tools, MCP and agent SDKs, defend the system against the OWASP risk categories, move business rules out of the prompt into deterministic gates, and design Governed Agentic Workloops that conform to the Workloop Spec.
Professional certification
Competence assessed in an exam. The AISAC-AR is the first credential of the AISAC Certification Program, issued by AISAC.
Founding Credential
Records participation in the Founding Cohort. It is not an assessment of competence and does not replace the AISAC-AR.
System conformance
A claim about an implementation, not a person, declared against the spec's conformance classes (CONF-L, CONF-S, CONF-D). The AISAC-AR certifies people; it does not certify systems.
Seven domains, from fundamentals to governed operation.
Part 1 of the exam covers all seven domains. The hands-on lab assesses four of them, D3 to D6. Agentic development is the largest domain, at 20%, and the three governance domains add up to 45%.
Weights: D3 is 20% and D4, D5 and D6 add up to 45%. The individual weights of the other domains are a v0 proposal that the Certification Council has yet to approve.
Two parts: judgement on scenarios, then work in a lab.
Scenarios
Items built on company scenarios, in multiple-choice and multiple-response formats.
- Items
- 60
- Time
- 120 minutes
- Weight
- 60% of the final score
- Domains
- All seven, D1 to D7
Hands-on lab
Three tasks in a sandbox with a coding agent and a cost ceiling. Local documentation is available, and the results are verified by automated checks.
- Tasks
- 3
- Time
- 90 minutes
- Weight
- 40% of the final score
- Domains
- D3 to D6
You pass with a final score of at least 720, on a scale of 100 to 1000, and at least 600 on the lab. A strong Part 1 does not make up for a weak lab.
Certification and training are kept apart.
These rules come from the regulation of the AISAC Certification Program.
Open to anyone
The exam is open to anyone, with or without a course, and is taken separately, here on aisac.global.
Training is optional
No course is a prerequisite for the exam. Completing a course does not grant the certification, and passing is never promised.
A frozen reference
The exam is tied to a fixed version of the Workloop Spec: AR-01 assesses version 0.1.0-rc5, so later changes to the spec are not tested in AR-01.
Weights set by a council
Domain weights are approved by the Certification Council. D3 (20%) and the governance domains (45% combined) are set; the other individual weights are still a v0 proposal awaiting that approval.
Vendor-independent
The program is not affiliated with or endorsed by Anthropic, OpenAI or any other vendor whose tools appear in the blueprint.
What the exam is built on.
Workloop Spec 0.1.0-rc5
Definitions, invariant, corollaries, requirements and conformance criteria of Governed Agentic Workloops.
OWASP Top 10 for LLM Applications 2025
The ten risk categories LLM01 to LLM10.
OWASP Top 10 for Agentic Applications 2026
The ten agentic risk categories ASI01 to ASI10.
Where the program stands.
Name and code, the seven-domain blueprint, the two-part exam format and the passing score.
Reference version for exam AR-01: Workloop Spec 0.1.0-rc5.
Publication of the program's regulation on aisac.global.
Approval of the remaining domain weights by the Certification Council.
Registration and exam dates. They will be announced on this page.
Frequently asked questions
What does AISAC-AR mean?
AISAC-AR is the code of the Governed Agentic Infrastructure Architect certification, issued by AISAC — Artificial Intelligence System As Code.
Do I need to take a course first?
No. The exam is open to anyone, with or without a course.
Does finishing a course give me the certification?
No. Completing a course does not grant the AISAC-AR, and no course promises a pass.
How is the exam scored?
On a scale of 100 to 1000. Part 1 is worth 60% of the final score and the lab 40%. You pass with a final score of at least 720 and at least 600 on the lab.
What happens in the lab?
You get three tasks to complete in 90 minutes, in a sandbox with a coding agent and a cost ceiling. Local documentation is available and the results are verified by automated checks.
Which version of the Workloop Spec is assessed?
Exam AR-01 uses version 0.1.0-rc5, frozen for that exam.
Is the AISAC-AR the same as the AISAC Community Founding Credential?
No. The Founding Credential records participation in the Founding Cohort. The AISAC-AR is competence assessed in an exam.
Is the program affiliated with Anthropic or OpenAI?
No. The AISAC Certification Program is not affiliated with or endorsed by Anthropic, OpenAI or any other vendor named on this page.
When can I register?
Registration is not open yet. It will be announced on this page once the program's regulation is published.
Start with the specification.
D6 is assessed against the Workloop Spec 0.1.0-rc5 — public, versioned and open for comment.