Streaming, Budgets & Load Resilience

1. 01

   Concepts & system design

   60 min· read · map the mechanismtimer

   R03 — Resource limits

   R08 — SSE cancellation

   R16 — Presidio

   R17 — NIST Privacy

   R27 — OpenTelemetry redaction

   Read the assigned sections; map the mechanism, threat model and trade-offs.

2. 02

   Project implementation

   120 min· build · integrate · debugtimer

   Audit P1 SSE cancellation, token/cost quotas, and concurrency caps. Run adversarial load/abuse tests and verify bounded resource usage.

   Audit D4 PII UUID-Swapping Gateway across prompts, tool calls, C10 memories, C8 logs/traces, and SQL storage. Run synthetic sensitive-data leakage and deletion verification tests.

   Build, integrate, debug and improve the increment in the active project.

3. 03

   Security lab

   60 min· attack your own systemtimer

   No separate task text for this block on day 78 — the sourced work sits in the block above. Keep the time box.

   Test the abuse case, failure path, authorization bypass or resource limit.

4. 04

   Verification & evidence

   30 min· test · record evidencetimer

   P1 load/quota report + D4 zero-leakage and deletion verification report.

   Add or run regression tests; record the 9-point evidence record.

5. 05

   Deliberate practice & Socratic review

   30 min· explain aloud · update gapstimer

   Answer the 8 Socratic questions without notes: What? Why? How? What if? Why not? How can I prove it? Where can it break? What have I learned?

   Re-explain the hardest concept aloud, inspect one edge case, update the gap log.

6. total5 h

• R03OWASP API Security Top 10↗ owasp.org

  BOLA (API1), Broken Auth (API2), Unrestricted Resource Consumption (API4), SSRF (API7), Misconfiguration (API8).

• R08MDN: Server-Sent Events (SSE)↗ developer.mozilla.org

  EventSource interface, event stream wire format, connection lifecycle, cancellation, and reconnection.

• R16Microsoft Presidio↗ microsoft.github.io

  Analyzer, anonymizer, custom PII recognizers, and probabilistic detection false-positive/negative limits.

• R17NIST Privacy Framework↗ nist.gov

  Identify-P, Govern-P, Control-P, Communicate-P, and Protect-P lifecycle controls.

• R27OpenTelemetry Documentation↗ opentelemetry.io

  Traces, spans, context propagation, semantic conventions, and redacting sensitive attributes.

Read only the named sections needed for today's task. Reading sits inside the 60-minute concepts block; it is not extra time.

• docsMDN Web Docs · reference
  Server-sent events

  Documents the event-stream wire format, EventSource reconnection, and connection lifecycle including abort, which is what the SSE cancellation audit is measured against.

  R08checked 2026-11-11
• videoTechno Pain
  Streaming in React the Simple Way: Server-Sent Events (with FastAPI)

  Shows EventSource state and cleanup on the client plus an sse-starlette endpoint, including end events and error handling — the cancellation path that leaks tokens when it is missing.

  R08checked 2026-11-11
• videoM&M Tech
  Data Anonymization With Microsoft Presidio - Full Step By Step Tutorial

  Demonstrates analyzer, custom recognizers, and custom anonymizer operators end to end, which is the D4 gateway's detect-then-replace pipeline before prompts hit the model or logs.

  R16checked 2026-11-11
• articlePrompt Security · blog post
  Denial of Wallet in AI: When Cost Exhaustion Becomes Downtime

  Breaks down how one request fans out into model calls, retrievals, and tool invocations to exhaust quota, which is the abuse pattern your concurrency caps and token budgets must bound.

  R03checked 2026-11-11
• labMicrosoft Presidio · notebooks
  Presidio samples

  Runnable anonymizer notebooks covering replace, redact, hash and encrypt operators so you can demonstrate restoration boundaries with synthetic PII.

  R16checked 2026-11-11

A lab is complete only when it produces evidence. Installing PyRIT, Garak, Presidio or TransformerLens is not completion. Saved on this device only.