Interactive technical labs
Safe simulations and runnable local examples that turn engineering explanations into testable behavior. Lab scenarios are synthetic, not live attack targets or customer assessments.
Lab 01 · Browser walkthrough + Node.js, SwiftUI and Kotlin sources
Choose an identity, resource and handler. Compare a deliberately vulnerable BOLA read with a guarded tenant/object policy, then reproduce the result using tested public Node.js source or the buildable native iOS and Android development clients.
Lab 02 · Session and identity model
A deterministic browser model of session states, token-family invalidation and server-side tenant authorization.
Run session modelLab 03 · Release decision model
Try five pre-release checks with a clear distinction between evidence readiness and human release authorization.
Run release modelThis page lists labs that actually have material available today. We add new exercises only after the code, instructions and verification work. For design simulations and scoping, visit the interactive engineering studio. For a synthetic code-review exercise, inspect the vulnerable and guarded handlers.
