Sixteen modules across eight weeks. Each module has learning objectives, an assigned reading list cross-linked into the reference docs, a lab title, a project deliverable title, and three quiz topics. The capstone in Week 8 ships an end-to-end Tenant Yoke.

Syllabus

Companion lectures. Short narrative explainers per module live at /docs/training/lectures. Read the lecture before the lab; consult after.

Quizzes. 10-question self-check banks per module at /docs/training/quizzes. Take the quiz the same day you finish the lab.

Starter code. A small set of working scripts and JSON templates lives at /docs/training/starter-code. Parachute, not template — clone only when a step genuinely blocks you.

Certification. Capstone acceptance issues a sealed-PDF completion cert via the M14 e-sign trust model. Details at /docs/training/certification.

Every module follows the same five-section shape:

Learning objectives — 3–5 verbs you'll be able to perform after the module.
Assigned reading — cross-links into the reference docs.
Lab — hands-on exercise title. (Lab materials ship in a follow-on PR.)
Project deliverable — what you push to your sandbox tenant by the end of the module.
Quiz topics — three bullets you should be able to answer cold.

Week 1 — Foundations

Module M1 — Platform architecture & multi-tenancy

Learning objectives

Explain the single-binary Rust monolith + SPA admin shell architecture.
Articulate the Fleet-of-Files model: one SQLite database per tenant, LiteFS replication.
State the prime directive: every tenant-scoped query scopes by tenant_id.
Identify the three platform-scoped tables that are the documented exceptions (audit, platform_admins, marketplace_entitlements).

Assigned reading

Lab — Trace a tenant-scoped query through the backend handler stack and identify each tenant_id checkpoint.

Project deliverable — A one-page diagram of your target tenant's data-flow path, annotated with the tenant_id checkpoints.

Quiz topics

Why does every tenant get its own SQLite database?
What happens if a handler forgets to scope by tenant_id?
Name two platform-scoped tables and why they're exceptions.

Module M2 — Auth & token layers

Learning objectives

Enumerate the seven auth-token layers the platform ships.
Distinguish session JWTs from fy_pat_ tokens from the one-hour admin test JWT.
Configure WorkOS AuthKit SSO at the tenant level (conceptual).
Mint, rotate, and revoke a fy_pat_ PAT.

Assigned reading

Lab — Mint a one-hour test token, hit /auth/me, then mint a fy_pat_ token and compare behavior.

Project deliverable — A curl-only authentication walkthrough script that hits three tenant-API endpoints with three different token types.

Quiz topics

What scope vocabulary are extension and PAT scopes drawn from?
What does the WorkOS SSO callback resolve a user's tenant by?
Why is the one-hour test JWT not subject to the fy_pat_ "hard refusals"?

Week 2 — Core primitives I

Module M3 — Entities

Learning objectives

Author a JSON-payload schema for a domain entity.
Apply field-level annotations (labels, options, constraints).
Use the entity REST surface for create / read / update / delete.
Understand the schemaless storage contract and what it means for migrations.

Assigned reading

/docs/entities

Lab — Author a vehicle entity with annotations and exercise the full REST surface.

Project deliverable — A two-entity domain (e.g., patient and appointment) with cross-referenced fields.

Quiz topics

How does the platform validate entity payloads without a column schema?
What's the difference between a label annotation and an option annotation?
What does deleting an entity do to historical FSM job rows that referenced it?

Module M4 — Forms

Learning objectives

Compose a multi-field form with branching logic.
Validate submissions against a zod-mirrored schema.
Wire a public-link submission flow.
Configure anti-abuse defenses on a public form.

Assigned reading

Lab — Build a public-link patient intake form with file-upload validation and rate-limit protection.

Project deliverable — A submitted form that feeds into an FSM job created at submit time.

Quiz topics

Why are form schemas zod-mirrored and not raw JSON Schema?
What's the anti-abuse threshold before a public form rate-limits?
How does a public-link form authenticate the submitter?

Week 3 — Core primitives II

Module M5 — FSM authoring

Learning objectives

Author an FSM schema with states, transitions, and JSONLogic guards.
Explain the sandboxed evaluator and why no host syscalls leak through.
Detect and remove orphan states in a schema.
Read and write deterministic-replay-safe guards.

Assigned reading

/docs/workflows

Lab — Author a 5-state lifecycle for a service ticket with JSONLogic guards on each transition.

Project deliverable — An FSM schema with three guard expressions and a hand-traced sample run.

Quiz topics

Why is JSONLogic the guard language and not a host function?
What's an orphan state, and how does the validator catch it?
What does the guard sandbox refuse?

Module M6 — Jobs

Learning objectives

Drive an entity through an FSM via job transitions.
Use the admin cancel override correctly (and know when not to).
Author a self-loop transition for retries or counters.
Read the immutable event log for one job.

Assigned reading

/docs/jobs

Lab — Override one job to a terminal state using the admin endpoint, then inspect the resulting event_log row.

Project deliverable — A job lifecycle screenshot including a self-loop transition and a successful admin override, with the matching event_log rows shown.

Quiz topics