Practice, build, break, debug

Lab Catalog

Every mission includes guided and independent work; integration labs appear where the roadmap contract crosses services.

IN PROGRESS
Week 1 · Linux

Linux Orientation

Guided · Independent · Integration where relevant · Failure Injection

Open mission labs
NOT STARTED
Week 1 · Linux

Files, Permissions & Environment

Guided · Independent · Integration where relevant · Failure Injection

Open mission labs
NOT STARTED
Week 1 · Linux

Processes, Logs & Resources

Guided · Independent · Integration where relevant · Failure Injection

Open mission labs
NOT STARTED
Week 1 · Networking

Networking Fundamentals

Guided · Independent · Integration where relevant · Failure Injection

Open mission labs
NOT STARTED
Week 1 · Networking

HTTP, curl & Local Server

Guided · Independent · Integration where relevant · Failure Injection

Open mission labs
NOT STARTED
Week 1 · Git/Open Source

Git, GitHub & Open Source

Guided · Independent · Integration where relevant · Failure Injection

Open mission labs
NOT STARTED
Week 1 · Docker/Compose

Docker & Compose Operational Baseline

Guided · Independent · Integration where relevant · Failure Injection

Open mission labs
NOT STARTED
Week 2 · Docker

Docker Image, Container & Dockerfile

Guided · Independent · Integration where relevant · Failure Injection

Open mission labs
NOT STARTED
Week 2 · Docker Compose

Compose Service Contracts

Guided · Independent · Integration where relevant · Failure Injection

Open mission labs
NOT STARTED
Week 2 · Docker Network

Docker Network, Service DNS & localhost Trap

Guided · Independent · Integration where relevant · Failure Injection

Open mission labs
NOT STARTED
Week 2 · Persistence

Volumes, Bind Mounts & Persistence

Guided · Independent · Integration where relevant · Failure Injection

Open mission labs
NOT STARTED
Week 2 · Configuration

Environment Contracts, Secrets & Validation

Guided · Independent · Integration where relevant · Failure Injection

Open mission labs
NOT STARTED
Week 2 · Operations

Healthchecks, Logs & Dependency Readiness

Guided · Independent · Integration where relevant · Failure Injection

Open mission labs
NOT STARTED
Week 2 · HTTP/API

HTTP, REST, JSON & OpenAPI Support

Guided · Independent · Integration where relevant · Failure Injection

Open mission labs
NOT STARTED
Week 2 · PostgreSQL

PostgreSQL, SQL, Migration & Seed Support

Guided · Independent · Integration where relevant · Failure Injection

Open mission labs
NOT STARTED
Week 2 · Reverse Proxy

Reverse Proxy & Multi-layer API Integration

Guided · Independent · Integration where relevant · Failure Injection

Open mission labs
NOT STARTED
Week 3 · Identity

Identity: Authentication, Authorization & OIDC Map

Guided · Independent · Integration where relevant · Failure Injection

Open mission labs
NOT STARTED
Week 3 · Keycloak

Keycloak Realm, Client, Users & Roles

Guided · Independent · Integration where relevant · Failure Injection

Open mission labs
NOT STARTED
Week 3 · OIDC Flow

Authorization Code + PKCE & SSO

Guided · Independent · Integration where relevant · Failure Injection

Open mission labs
NOT STARTED
Week 3 · JWT

JWT Claims, JWKS & Backend Validation

Guided · Independent · Integration where relevant · Failure Injection

Open mission labs
NOT STARTED
Week 3 · Authorization

RBAC: Roles, Claims, Mappers & Backend Guard

Guided · Independent · Integration where relevant · Failure Injection

Open mission labs
NOT STARTED
Week 3 · Troubleshooting

Identity Incident Triage: 401, 403 & Expiry

Guided · Independent · Integration where relevant · Failure Injection

Open mission labs
NOT STARTED
Week 3 · Identity Operations

Realm Export/Import, Security Review & Reproducibility

Guided · Independent · Integration where relevant · Failure Injection

Open mission labs
NOT STARTED
Week 4 · System Integration

System Integration Contracts & Ownership Map

Guided · Independent · Integration where relevant · Failure Injection

Open mission labs
NOT STARTED
Week 4 · n8n

n8n Workflow Foundations & Backend Boundary

Guided · Independent · Integration where relevant · Failure Injection

Open mission labs
NOT STARTED
Week 4 · Integration Network

Webhooks, Reverse Proxy, CORS & Browser-vs-curl

Guided · Independent · Integration where relevant · Failure Injection

Open mission labs
NOT STARTED
Week 4 · Observability

Correlation IDs, Business IDs & Audit Trace

Guided · Independent · Integration where relevant · Failure Injection

Open mission labs
NOT STARTED
Week 4 · Reliability

Retry, Timeout, Idempotency & Duplicate Safety

Guided · Independent · Integration where relevant · Failure Injection

Open mission labs
NOT STARTED
Week 4 · HITL

Human-in-the-Loop Approval & State Boundaries

Guided · Independent · Integration where relevant · Failure Injection

Open mission labs
NOT STARTED
Week 4 · Integration QA

Workflow E2E, Export & Integration Incident

Guided · Independent · Integration where relevant · Failure Injection

Open mission labs
NOT STARTED
Week 5 · Operations

Operations: Service Health Matrix, Logs & Resources

Guided · Independent · Integration where relevant · Failure Injection

Open mission labs
NOT STARTED
Week 5 · BI

Metabase, Read-only Reporting & KPI Boundary

Guided · Independent · Integration where relevant · Failure Injection

Open mission labs
NOT STARTED
Week 5 · Data Operations

KPI Data Validation & Reporting Incident Triage

Guided · Independent · Integration where relevant · Failure Injection

Open mission labs
NOT STARTED
Week 5 · Backup

Database Backup, Checksum & Protection

Guided · Independent · Integration where relevant · Failure Injection

Open mission labs
NOT STARTED
Week 5 · Recovery

Restore Drill on a Separate Target

Guided · Independent · Integration where relevant · Failure Injection

Open mission labs
NOT STARTED
Week 5 · Incident Response

Operations Failure Drills: DB, Keycloak & n8n

Guided · Independent · Integration where relevant · Failure Injection

Open mission labs
NOT STARTED
Week 5 · Operations QA

Operations Runbook, Recovery Review & Weekly Gate

Guided · Independent · Integration where relevant · Failure Injection

Open mission labs
NOT STARTED
Week 6 · RAG Architecture

RAG Architecture & SV1/SV3 Boundary

Guided · Independent · Integration where relevant · Failure Injection

Open mission labs
NOT STARTED
Week 6 · Qdrant

Qdrant Deployment, Collections & Persistence

Guided · Independent · Integration where relevant · Failure Injection

Open mission labs
NOT STARTED
Week 6 · Ollama

Ollama Service, Models & Resource Awareness

Guided · Independent · Integration where relevant · Failure Injection

Open mission labs
NOT STARTED
Week 6 · RAG Service

RAG Service Configuration, Health & Dependency Contract

Guided · Independent · Integration where relevant · Failure Injection

Open mission labs
NOT STARTED
Week 6 · Troubleshooting

RAG Infrastructure Incident & SV3 Handoff

Guided · Independent · Integration where relevant · Failure Injection

Open mission labs
NOT STARTED
Week 6 · AI Operations

Corpus Safety, RAG Evaluation & Infrastructure Release Evidence

Guided · Independent · Integration where relevant · Failure Injection

Open mission labs
NOT STARTED
Week 7 · Agent Architecture

Agent, Tool Calling & Security Architecture

Guided · Independent · Integration where relevant · Failure Injection

Open mission labs
NOT STARTED
Week 7 · Agent Tools

Read Tools: Schema, Limits, Auth & Audit

Guided · Independent · Integration where relevant · Failure Injection

Open mission labs
NOT STARTED
Week 7 · Agent Write Security

Write Tools: Pending-only State & HITL

Guided · Independent · Integration where relevant · Failure Injection

Open mission labs
NOT STARTED
Week 7 · Agent Security

Agent Service Authentication, RBAC & Permission Boundary

Guided · Independent · Integration where relevant · Failure Injection

Open mission labs
NOT STARTED
Week 7 · Agent Operations

Agent Audit, Limits, Timeout & Resilience

Guided · Independent · Integration where relevant · Failure Injection

Open mission labs
NOT STARTED
Week 7 · Agent Red-team

Agent Red-team: Injection, Privilege & Secret Defenses

Guided · Independent · Integration where relevant · Failure Injection

Open mission labs
NOT STARTED
Week 7 · Agent QA

Agent E2E, Security Closure & Configuration Freeze Prep

Guided · Independent · Integration where relevant · Failure Injection

Open mission labs
NOT STARTED
Week 8 · Release QA

Regression Strategy & Quality Gates

Guided · Independent · Integration where relevant · Failure Injection

Open mission labs
NOT STARTED
Week 8 · Release Configuration

Configuration Freeze & Change Impact Analysis

Guided · Independent · Integration where relevant · Failure Injection

Open mission labs
NOT STARTED
Week 8 · Fresh-machine

Fresh-machine Installation & Reproducible Bootstrap

Guided · Independent · Integration where relevant · Failure Injection

Open mission labs
NOT STARTED
Week 8 · Release Engineering

Release Package, Integrity & Rollback

Guided · Independent · Integration where relevant · Failure Injection

Open mission labs
NOT STARTED
Week 8 · Documentation & Handoff

Documentation Governance, Handoff & Peer Verification

Guided · Independent · Integration where relevant · Failure Injection

Open mission labs
NOT STARTED
Week 8 · Demo & Oral Defense

Timed Demo, Oral Defense & Operations Q&A

Guided · Independent · Integration where relevant · Failure Injection

Open mission labs
NOT STARTED
Week 8 · Final Integration

Final Go/No-Go, Team Readiness & Unknown Incident

Guided · Independent · Integration where relevant · Failure Injection

Open mission labs