AICASSINDRA · LEARN BY EXPERIMENTING

Security labs

Explore the interactive side of AICassindra. Read a topic, test an idea, and follow the results.

Choose a topic, explore the model, and compare what changes. Each experiment explains its assumptions and limitations.

Browse the collection below.

Security

Access control: identity before permission

Inspect credential claims, policy gates and the resource decision. Change a condition and follow the exact denial reason.

Interactive lab
Security

Agent boundary: enforce action permissions

Inspect credential claims, policy gates and the resource decision. Change a condition and follow the exact denial reason.

Interactive lab
Security

Authentication: inspect a rejected credential

Inspect credential claims, policy gates and the resource decision. Change a condition and follow the exact denial reason.

Interactive lab
Security

Bearer access: audience, expiry and scope

Inspect credential claims, policy gates and the resource decision. Change a condition and follow the exact denial reason.

Interactive lab
Security

Dependency injection: where does this handle point?

Actual shared references, mutable tenant context and returned records.

Interactive lab
Security

mTLS: verify both peers, then authorize the request

Real local cryptographic checks. Separate application permissions. Explicit teaching boundaries.

Interactive lab
Security

OAuth authorization code and PKCE

Real challenge computation. Inspectable request bindings. No real credentials.

Interactive lab
Security

Privacy controls: scope, minimization and recovery

Follow actual fictional records through primary storage, a backup, an export and a restore.

Interactive lab
Security

Purpose notice versus enforced behavior

Follow actual fictional records through primary storage, a backup, an export and a restore.

Interactive lab
Security

Security tracing: locate the denying gate

Inspect credential claims, policy gates and the resource decision. Change a condition and follow the exact denial reason.

Interactive lab
Security

SQL injection: actual query results

Four fictional records. Two ways to construct a query. Inspect what SQLite really returns.

Interactive lab
Security

Tool authorization: scope and role must agree

Inspect credential claims, policy gates and the resource decision. Change a condition and follow the exact denial reason.

Interactive lab