Lesson 1: The security baseline, traced through one claim

Module 7 · Lesson 1 · About 50 minutes · Needs: Module 1 Lesson 4 (TLS, secrets), Module 4 Lesson 3 (redaction), Module 5 Lesson 1 (prompt injection), Module 6 Lesson 1 (roles, service accounts)

The situation

Wednesday 1 April 2026, week 3. Viktor Hale's 140-question security questionnaire arrives, and he phones. "Before you answer any of it, take one real claim and show me where it goes, what can go wrong, what is encrypted, what is logged, what you ship, and who you call when it breaks."

You pick MSG-3102: Ravi Shah at Atlas Office Furniture, reporting bent desk frames on HF-88207, declared value £6,500, with his postal address in the body and photos attached. This lesson follows that one email; Lesson 2 answers the questionnaire.