Week 8: Security

This week asks whether text an agent reads is data or authority. You run an inert local injection chain, repair the boundary so that a refused request leaves no effect and the permitted request still works, and then scan, triage and reproduce: each scanner finding and each agent claim about it gets an observation before a decision.

Start with the notes, then use the second session, the self-check and the readings. The slide source follows the same sequence. The second session is a guest session or a studio. Contribution 2 is due this week.

The fixture guide lists the course-made files the lesson runs.