Module 07
Building the User System
Assemble the six modules into one architecture, then answer the question 2026 added: what authority may an AI agent exercise on behalf of this specific user, on this specific resource?
5 lessons · 10 videos · 5h 25m
- 07.01
The Architecture of a User System
Lay out identity, authorization, profile, notification and support as separate components with named boundaries, and say which of them you should not build yourself.
- 07.02
When the User System Breaks
Degrade gracefully when the identity provider, the mail provider or the authorization service is down, instead of logging everybody out.
- 07.03
Security Boundaries & Failure Modes
Locate every place your system decides 'may this actor do this', and confirm the decision is made on the server, on every path.
- 07.04
Agents Acting on Behalf of Users
Give an AI agent an identity of its own and a delegated, scoped authority, so that 'the agent did it' and 'the user did it' are different facts in the log.
- 07.05
Directing & Auditing an Agent That Builds Auth
Specify a user system to a coding agent precisely enough to be built, then review what it wrote for the four failures this course names.