Injection through a tool result
Build the attack, watch it work, then try to detect it and find out why detection is a mitigation rather than a fix. The useful output of this lesson is knowing what your detector misses.
Not yet
This one opens once you have finished Memory and RAG.
Progress is kept against your account, so finishing a module needs one. Everything up to here is open without.