Set up the development environment

Application foundations, model trust, and first local assistant · interview focus: HTTP/REST lifecycle, structured output validation, tool calls vs. text generation, and pre

S0 S1 M1R06 R39

0/111 days complete

0 evidence records

Open day 1 →Week 1 overview

Concepts

60 min

Build

120 min

Security lab

60 min

Evidence

30 min

Socratic

30 min

Coming up

all 111 days →

The 19 weeks

0/111 complete

W1Application foundations, model trust, and first local assistant0/6

W2Tools, prompt injection, and authorization boundaries0/6

W3Streaming, reliability, cost controls, and memory foundations0/6

W4Embeddings, model artifact integrity, and retrieval foundations0/6

W5RAG evaluation, privacy, and training-data security0/6

W6Agent foundations, MCP, and protocol security0/6

W7Agent state, identity, delegation, and approval0/6

W8Background jobs, SSRF, economic abuse, and privacy0/6

W9Observability, AI-SDLC, secure release, and red-team automation0/6

W10Output security, model extraction, IP protection, and governance0/6

W11Browser/computer-use agent security and end-to-end attack chains0/6

W12Mechanistic interpretability, robustness, and research literacy0/6

W13Security teardown, CVEs, responsible disclosure, and architecture review0/6

W14Project 1 hardening: assistant as a secure product0/6

W15Project 3 hardening: agent/workflow as a secure product0/6

W16Cross-project red teaming and security evaluation0/6

W17Reliability, incident response, and operational security0/6

W18Advanced labs and targeted remediation0/6

W19Final integration, portfolio evidence, and competency assessment0/3

Where everything lives

12 security deliverables

D1–D12, each with a primary home, build days and hardening days inside the three products.

13 security stages

S0–S12, from web appsec foundations to CVE teardowns and disclosure.

10 added domains

Supply chain, training poisoning, multimodal, serving, economic abuse, memory, privacy, AI-SDLC, browser agents, misuse.

12 agentic capabilities

C1–C12 mapped to project homes, priorities and the days that build them.

45 reading assignments

The official reference library, with the exact section to read and the days that use it.

Evidence log

0 records started. The 9-point standard is what makes a lab count.