01 / PLATFORMOPEN
Kubernetes from first principles
Move from a clean environment to a resilient, observable production workflow with the reasoning intact.
OPEN PATH ↗ LEARNING SYSTEM ONLINE
Build knowledge.
Ship capability.
Hands-on technical courses designed as operational runbooks: focused, rigorous, and built for the work that happens after “hello world.”
- ACTIVE_PATHS
- 24
- LESSONS_SHIPPED
- 186
- SYSTEM_STATUS
- NOMINAL
// FEATURED_PATHS
VIEW CATALOG →Learn systems by building them.
02 / DELIVERYOPEN
Build a production CI pipeline
Move from a clean environment to a resilient, observable production workflow with the reasoning intact.
OPEN PATH ↗03 / SECURITYOPEN
Threat modeling that ships
Move from a clean environment to a resilient, observable production workflow with the reasoning intact.
OPEN PATH ↗“No infinite feeds. No passive playlists.
Every lesson ends with a system you understand.”
01
READ THE SIGNAL
Concise explanations with the context behind every decision.
02
RUN THE SYSTEM
Exercises grounded in production-shaped environments.
03
TRACE PROGRESS
A clear path, resumable state, and no engagement theater.
// ROLE_CAPABILITIES
SERVER AUTHORIZATION ACTIVEOne platform. Three operational views.
01 / LEARNER.SYSAVAILABLE
A learning loop that remembers.
Browse and filter published paths, enroll once, move through ordered Markdown and video lessons, resume the last position, and watch completion update from real lesson records.
- catalog --search
- enroll --idempotent
- resume --last-position
- progress --verified
02 / INSTRUCTOR.SYSAVAILABLE
Author structured capability.
Create owned drafts, arrange explicit modules and lessons, edit Markdown, preview the learner experience, resolve concurrent edits, and publish only complete paths.
- course create --draft
- module order --explicit
- lesson preview
- publish --validate
03 / ADMIN.SYSAVAILABLE
Govern without erasing history.
Manage users and allowlisted roles, suspend access without deleting learning records, moderate course visibility, configure safe platform settings, and trace sensitive mutations.
- users --status
- roles --allowlist
- moderate --audit
- events --immutable
// PLATFORM_CONTROL_PLANE
Production behavior is part of the product.
Identity, authorization, persistence, observability, and deployment are designed as visible guarantees—not infrastructure footnotes.
$ inspect-learning-paths01 / AUTH.GATE
External OIDC
Authorization Code, discovery, PKCE, state, nonce, secure sessions, and a short-lived signed Next.js-to-Go trust boundary.
02 / API.V1
Versioned Go API
Validated REST operations, stable errors, request IDs, bounded pagination, idempotency, optimistic concurrency, and authoritative permissions.
03 / DATA.CORE
PostgreSQL record
Normalized UUID records, explicit ordering, unique enrollment and progress constraints, versioned SQL migrations, and transactional audit events.
04 / OBS.STACK
Observable runtime
Structured logs, liveness, database-aware readiness, Prometheus metrics, request correlation, and graceful termination.
05 / K8S.NATIVE
Kubernetes operation
Non-root read-only workloads, migration Jobs, probes, resource limits, HPAs, PDBs, NetworkPolicies, and environment-specific Helm values.
06 / A11Y.MODE
Accessible by design
Semantic landmarks, Radix focus management, keyboard navigation, visible focus, reduced motion, responsive layouts, transcripts, and two themes.
Choose a path.
Build the system.
The catalog is public. Progress, authoring, and governance begin through your configured identity provider.