capstone5–8 weeks~4h mentor timeLive defense
Zero-Trust Access Gateway
Build an identity-aware proxy: short-lived credentials, per-request authorization, and a tamper-evident audit log.
gooidcpostgres
The brief
Build an identity-aware proxy: short-lived credentials, per-request authorization, and a tamper-evident audit log. The brief is deliberately incomplete — you make and justify the tradeoffs.
Deliberately ambiguous — you make and justify the tradeoffs. Your work is checked against a held-out evaluation you can't see in advance.
Milestones & mentor checkpoints
1Identity & sessionsweek 1mentor review
2Policy engineweek 3mentor review
3Audit & threat modelweek 6mentor review
How you're graded
Correctness
40% weight
Scalability
30% weight
Code quality
30% weight