Framework Lab · Two levels · Self-paced

Become a Beacon Framework Auditor.

Find every AI. Sign what matters. Hand the auditor a bundle. This lab is for security, platform, architects, governance, legal, audit, privacy, and policy leaders. In two levels — short and long — it turns Beacon from an idea into a hands-on, auditor-ready exercise that works for technical teams and policy teams using the same evidence model.

What you'll doLaunch Beacon, discover AI, inspect a signed receipt, verify a bundle, map a real failure to controls.
How longLevel 100 is 30 minutes. Level 200 is ~90 minutes. Resume any time.
What you'll leave withA signed audit checklist, a verified evidence bundle, and one real-world failure mapped to missing governance evidence.
How verifiedEvery page you build is itself recorded in a cryptographically signed audit log — verify it on the How I Built This page.

Pick a level

Start where you are.

New to Beacon? Start with Level 100 — the same 30-minute flow used in workshops worldwide. Already comfortable with signed receipts and want to ship Beacon yourself? Level 200 takes you through the Suitcase Lab, the 9 lab variants, Policy-as-Code emission, the receipt API, and the full 100-failure deep-dive.

Level 100 · The 30-minute flow Not started

The five-step Studio.

Launch Beacon, walk the five-step Studio (network → discover → pick what matters → pick guardrails → here's your audit), sign a real receipt in your browser, verify it, and map five curated AI failures to the framework controls that would have caught them.

≈ 30 min · 1 live sandbox · 5 cases · Quiz + worksheet

Level 200 · Suitcase Lab + deep-dive Not started

Ship Beacon yourself.

Spin up the Suitcase Lab in 60 seconds with Docker Compose. Walk the nine 20-minute lab variants (first receipt, browser discovery, DNS tail, framework scoring, failure replay, MCP attest, bundle for auditor, offline USB, hosted MCP). Emit Policy-as-Code. Drill into the 100-failure dataset with framework cross-links.

≈ 90 min · 9 lab variants · 100 cases · Policy-as-Code lab

Learning outcomes

By the end you'll be able to —

Launch Beacon in browser or local workshop mode.
Identify what Beacon discovered and what belongs in scope.
Explain what a signed receipt proves — and what it doesn't.
Export and verify an auditor bundle without Beacon itself.
Map one real-world AI failure to controls, frameworks, and missing evidence.

Source material — 30-slide source deck adapted from LAB.md, the Beacon home page, and the 100-case dataset.