Learning on Web Dev Open is free for all.

AI-Native Products > Trust, cost and visibilityA red-team pass on your own feature
Phase 08Trust, cost and visibility430 of 434

A red-team pass on your own feature

Two hours spent trying to make your own thing behave badly, written up honestly, including what you did not fix.

Solo project120 minAI adversary

Done when

  • At least ten attempted attacks across prompt injection, data access, cost abuse and output handling, each with reproduction steps
  • Every finding classified as fixed, mitigated or accepted, with a reason for each acceptance
  • At least one finding that led to a code change, linked to the commit
  • A statement of what the feature is not protected against and why that is an acceptable risk here

Nobody marks this for you. It goes into your phase checkpoint, where a person does.

You should now be able to

  • Attack your feature systematically across injection, cost and data
  • Report findings with reproduction steps and severity
  • Distinguish a fixed issue from an accepted risk
Ask the community

Loading…

← PreviousAn AI feature in production, with the receiptsTrust, cost and visibilityNext →What you can do nowCheckpoint: AI-Native, and the end of the course