SecureSeniorBackendAuto-graded
Software Engineer: Ship a security-critical access change
Change who can see which documents in an internal tool, following rules the team agreed in a chat.Use your coding agent to change who may open which document in DocVault, a company's internal document service. Security and Legal partly overruled the product ticket in a chat thread. Work out the rules that were finally agreed, have the agent implement them, check its work on the edge cases, prove it with tests and explain your decisions.45 min
python
You're done when
- Team sharing, admin visibility and restricted documents behave exactly as finally agreed: no looser and no stricter.
- Account status and malformed records are handled exactly as the team finally agreed, and nothing in the data crashes the service.
- Delegated access works as finally agreed, including when it ends, and never opens anything the agreed rules keep closed.
- The API and the sidebar enforce the same decision as the policy, and what a refused caller learns is what the team finally agreed.
- Every document fetch is audited the way Legal asked.
- Your tests pass against a correct implementation of the agreed rules and fail against broken ones.
- ACCEPTANCE.md states the rules you implemented, and PR.md explains the logic, trade-offs, risks and how you verified it.
What it measures
Requirements clarificationReading a ticket against a chat thread where the people who decide overrule requests and their own earlier calls, and working out whose word is final.
Specifying precisely to an AI agentTurning resolved rules into instructions exact enough that the agent's code carries every boundary, not just the headline behaviour.
Security verificationFinding where a wrong 'allow' could hide in the service and its data, and writing tests that would catch it.
Explaining and defending decisionsWriting acceptance criteria and a PR description a Security reviewer can check: what the rules are, what was left out on purpose, and what could still go wrong.
Your environment
Terminal + editorA full shell in the browser
Claude CodePre-authenticated, no key setup
Isolated microVMYours alone, wiped afterwards
Start this lab
45 min
Start labYou'll sign in to Anthropos to start. The lab opens in a private cloud workspace with Claude Code ready to use.AI Labs is part of Anthropos Workforce. Not on your plan yet? Book a demo