16 questions, two from each module. Pass with 80% to clear the playbook. Each question locks on commit — your mistakes are recorded in the result panel so you can re-read the relevant incident.
01 / 16
Question 01 / 16
M.01 · URL Rot — Why does a hardcoded URL fail in GenLayer?
Question 02 / 16
M.01 · URL Rot — What is the best fix for URL rot?
Question 03 / 16
M.02 · Prompt Injection — What is prompt injection?
Question 04 / 16
M.02 · Prompt Injection — Which defense is most effective against prompt injection?
Question 05 / 16
M.03 · API Key Leakage — Why can't you hide API keys in GenLayer contracts?
Question 06 / 16
M.03 · API Key Leakage — What is the recommended pattern for external API calls?
Question 07 / 16
M.04 · Wrong Equivalence — Why does strict_eq fail for live price data?
Question 08 / 16
M.04 · Wrong Equivalence — What equivalence should you use for volatile data?
Question 09 / 16
M.05 · Missing Access Control — What happens if a @gl.public.write method has no access control?
Question 10 / 16
M.05 · Missing Access Control — How do you enforce ownership in GenLayer?