capstone58 weeks~4h mentor timeLive defense

Zero-Trust Access Gateway

Build an identity-aware proxy: short-lived credentials, per-request authorization, and a tamper-evident audit log.

By Sentinel Labs

gooidcpostgres

The brief

Build an identity-aware proxy: short-lived credentials, per-request authorization, and a tamper-evident audit log. The brief is deliberately incomplete — you make and justify the tradeoffs.

Deliberately ambiguous — you make and justify the tradeoffs. Your work is checked against a held-out evaluation you can't see in advance.

Milestones & mentor checkpoints

1Identity & sessionsweek 1mentor review
2Policy engineweek 3mentor review
3Audit & threat modelweek 6mentor review

How you're graded

Correctness
40% weight
Scalability
30% weight
Code quality
30% weight