Identity and secrets
Zero secrets in the sandbox, short-lived sessions, access that ends with the work, default-deny egress.
What you will build
By the end you will have an agent sandbox that holds no secrets. A gateway attaches credentials by alias, grants are scoped to one task and expire on their own, and the sandbox can reach only the hosts on its allowlist.
Why it matters
If the agent can read a secret, a prompt injection can ask it to print one. The only secret an agent cannot leak is one it never had. The same goes for access: a token that outlives the task is a token waiting to be misused.
Inside this module
- 1.A credential gateway
The sandbox calls APIs by alias. The gateway adds the secret and scrubs it from responses. - 2.Short-lived, scoped grants
Every grant covers one task, one alias, some methods, for a limited time. - 3.Default-deny egress
The sandbox can reach only allowlisted HTTPS hosts.
Every step comes with the exact code diff, a run command, the expected output, a common mistake, a production note and a checkpoint. Then 2 graded exercises (callWithGrant, activeGrants) checked by npm test, a solution branch, and a 3-question quiz. TypeScript, scripted model, no API key.
This lesson unlocks with the full course
The full course is delivered as private GitHub repos with the lessons, exercises and solutions. After you buy, you get a read-access invite, so you need a GitHub username.
Checkout opens soon. The waitlist gets first access at the $149 founding price (regular $199), for the first 50 buyers or through Nov 8. No spam, only course updates.