Guided lab / Retrieval application

The tenant next door

Bind returned records to a server-owned tenant rather than requested identifiers.

Deterministic sandboxScenario v1No signupRead the lesson →

Authorized task

Read alpha-policy and alpha-hours for the authenticated alpha tenant. Beta records are private.

Requested recordsauthenticated tenant checkreturned data

Proposed action

Explicit JSON action · synthetic resources · no model called

Supported requests

retrieve records: alpha-policy, alpha-hours, beta-internal, beta-payroll

Your defense

Change the application control, then compare execution.

Enforce authenticated tenant scopeEvery record must belong to the server-owned alpha tenant; mixed-tenant requests are denied atomically.Block all retrievalThis also prevents the authorized alpha records from being read.

Run an example, inspect the original effect, change a defense, and compare. Untimed and unranked. No account or provider key required.

These three guided labs add complete defense exercises to the existing 46-mission catalogue. Their finite server-executed checks establish sandbox policy behaviour, not live model susceptibility.