AICASSINDRA · LEARN BY EXPERIMENTING

Security labs

Explore the interactive side of AICassindra. Read a topic, test an idea, and follow the results.

Choose a topic, explore the model, and compare what changes. Each experiment explains its assumptions and limitations.

Browse the collection below.

Security

Access control: identity before permission

Inspect credential claims, policy gates and the resource decision. Change a condition and follow the exact denial reason.

Interactive lab
Security

ADK plugin ordering and short-circuit lab

Inspect policy, cache, local callback, and backend paths to see how a returned result can skip later checks and release private data.

Interactive lab
Security

AFP detector thresholds and review-capacity lab

Explore synthetic prevalence, true-positive and false-positive rates, precision, missed cases, and the review workload they create.

Interactive lab
Security

Agent abuse budgets and retry-amplification lab

Inspect how child-task fan-out and retries multiply work, then compare request-only admission with atomic job and tenant budgets.

Interactive lab
Security

Agent boundary: enforce action permissions

Inspect credential claims, policy gates and the resource decision. Change a condition and follow the exact denial reason.

Interactive lab
Security

Authentication: inspect a rejected credential

Inspect credential claims, policy gates and the resource decision. Change a condition and follow the exact denial reason.

Interactive lab
Security

Bearer access: audience, expiry and scope

Inspect credential claims, policy gates and the resource decision. Change a condition and follow the exact denial reason.

Interactive lab
Security

Delegation boundaries: trace privileges across three agents

Follow synthetic credentials through concierge, research, and operations agents, and see which checks stop unauthorized actions.

Interactive lab
Security

Dependency injection: where does this handle point?

Actual shared references, mutable tenant context and returned records.

Interactive lab
Security

mTLS: verify both peers, then authorize the request

Real local cryptographic checks. Separate application permissions. Explicit teaching boundaries.

Interactive lab
Security

OAuth authorization code and PKCE

Real challenge computation. Inspectable request bindings. No real credentials.

Interactive lab
Security

Privacy controls: scope, minimization and recovery

Follow actual fictional records through primary storage, a backup, an export and a restore.

Interactive lab
Security

Prompt injection: inspect the trust boundaries

Compare synthetic cross-tenant reads and data exports while changing model behavior, authorization, egress, and final-output checks.

Interactive lab
Security

Purpose notice versus enforced behavior

Follow actual fictional records through primary storage, a backup, an export and a restore.

Interactive lab
Security

Refund authorization, replay, and ledger-race lab

Compare approval binding, expiry, tenant ownership, idempotency, and atomic reservations using a synthetic 100-unit refund ledger.

Interactive lab
Security

Secure retrieval: permissions, caches, and citations

Revoke synthetic document permissions, then compare retrieval filtering, cache keys, propagation, and citation checks.

Interactive lab
Security

Security tracing: locate the denying gate

Inspect credential claims, policy gates and the resource decision. Change a condition and follow the exact denial reason.

Interactive lab
Security

SQL injection: actual query results

Four fictional records. Two ways to construct a query. Inspect what SQLite really returns.

Interactive lab
Security

Tool authorization: scope and role must agree

Inspect credential claims, policy gates and the resource decision. Change a condition and follow the exact denial reason.

Interactive lab

Views are my own and do not represent any employer, past or present.