Skip to main content
hubtechnical-review

Engineering reference projects and assessment

Start with evidence​

This is the implementation track for the S-level blueprint. S-level is our proficiency target, not an industry credential. New material is available as an explicitly unreviewed preview; automated checks do not confer human approval. Read the concepts, reproduce a failure, inspect the fix, and defend an alternative.

The eight product scenarios share a workbench so identity, persistence and protocol rules stay consistent. Separate Next.js and Cloudflare projects exercise their actual runtimes. Local fixtures deliberately avoid real credentials and paid model calls. They are educational reference implementations, not production deployments.

Learning sequence​

DomainLessonRequired evidence
1Architecture judgment under changing constraintsRevised ADR after partner constraint changes
2TypeScript, runtime contracts and deterministic stateDeterministic replay and malformed-event rejection
3Browser runtime, resource ownership and native capabilitiesResource lifetime investigation
4Rendering placement, RSC and Cache ComponentsStreamed shell and account-switch isolation
5Streaming bytes, messages and recoverable progressByte-split parsing and reconnect recovery
6Cache correctness across browser, server and CDNTenant keys and in-flight invalidation race
7Cloudflare delivery, Turnstile and abuse-resistant formsSiteverify negatives and stable receipt
8State ownership, conditional writes and lost acknowledgementsLost response and conditional-write conflict
9Pattern selection and dependency lifetimesSwappable adapter with correct lifetime
10Effect: typed failures, services and resource cleanupTyped failure and cleanup on interruption
11Design systems as versioned behavioral contractsToken graph and consumer compatibility
12Styling at scale: native CSS, Tailwind and StyleXEquivalent styling builds with honest measurements
13Performance and accessibility as one user journeyTrace plus keyboard journey
14Identity, authorization and privacy at every operationDirect endpoint denial without side effect
15Toolchains, package contracts and reproducible deliveryClean builds, lockfiles and package contract
16Offline work, distributed boundaries and operationsRetained offline conflict and restart recovery
17AI applications: retrieval, safe output and evaluationAuthorized retrieval and explicit baseline limits
18Agentic workflows, durable approvals and generative UIExact approval, revocation and durable terminal state

Eight reference scenarios​

ProductExecutable locationFailure exercise and reference behavior
Public lead funnellabs/cloudflare-funnel and workbench lead viewNegative/replayed challenge produces no write; fresh challenge with same operation recovers receipt
Multi-tenant SaaS dashboardlabs/next-dashboard and workbench dashboardSwitch identity during loading; never reuse another account's data
Design system / partner SDKworkbench packages/ui, token compiler, two consumersAlias cycles fail; packaged exports and styles resolve; dialog restores focus
Secure account portalworkbench account viewDrop response after commit; retry returns one receipt
Offline field appworkbench offline viewReload retains pending IndexedDB work; conflict is not discarded
Data-heavy editorworkbench editor viewUndo/redo is bounded; a new edit discards redo; remote change exposes conflict
Source-grounded copilotworkbench copilot viewPermission and deletion filtering precede ranking; malicious text stays data
Agent operations consoleworkbench agent viewDisconnect/reconnect, stale hash, revocation and restart retain one authoritative outcome

The editor is a bounded state/history kernel, not a full collaborative document product. The copilot is a deterministic retrieval baseline, not a evaluated production LLM. Cloudflare global cache behavior, real-provider quality, screen-reader review and learner pilots require their corresponding external/manual evidence. This distinction prevents local demonstrations from being presented as completed production validation.

Run the reference implementation​

Use Node 24. From frontend-architect/labs/engineering-workbench:

npm ci
npm test
npm run build
npx playwright install chromium
npm run test:browser
npm run dev

The server listens on loopback port 4173. Select the local demonstration identity and one of the eight views. Data persists under .data during normal development. Tests use isolated or in-memory stores. Never expose this fixture identity selector publicly.

For Next.js, build the workbench UI package first, then run npm ci, npm run build, and npm test in labs/next-dashboard. For Cloudflare, use the project README to initialize local D1 and test secrets, then npm run validate and npm run dev. No deployment is required by the tests.

Assessment and reference answers​

Submit a working journey, an injected failure, the failing and passing assertion, and one rejected alternative. Explain the transaction or lifetime boundary that establishes correctness. A screenshot, ADR alone, or passing text-length validator cannot substitute for runtime evidence.

Score each axis from 0 to 3: 0 absent, 1 happy path, 2 handles the declared failure with evidence, 3 defends tradeoffs and survives a changed constraint. Axes are correctness, security, user recovery/accessibility, operations, and explanation. Graduation requires at least 2 on every axis and no unauthorized side effect or silent loss of accepted work. Human reviewers should challenge the weakest assumption rather than count pattern names.

A reference answer for the lost-response exercise uses a scoped operation key, payload hash and unique database constraint; it does not allocate a new key merely because the first fetch rejected. For the cache exercise it prevents late pre-invalidation reads from republishing. For the agent exercise it reauthorizes and binds approval to the exact proposal, while distinguishing a local ledger from an external tool's idempotency contract.

Review and evidence status​

The implementation manifest links every domain to source and a meaningful test file. The validation report records commands actually run. Human technical review, editorial review and a learner pilot are pending and must be recorded independently before final approval. Existing illustrative case-study metrics are not benchmark results from these applications.