A version number printed
You are set. Help a neighbour, then we start Screen 2 together.
Not installed yet? That is expected. Setup happens together in Meeting 2, Route B earns the same credit, and nobody has to pay.
claude --version. Hold up what you see. Keep any error on screen — the message is the diagnostic.A version number printed
You are set. Help a neighbour, then we start Screen 2 together.
An error printed instead
Keep it on screen and sit with the TA during the first activity.
Sign-in refused your account
Claude Code needs a paid plan on your own account. Take Route B — same credit — and email Dr. Qu if cost is the barrier.
You have not found where to type it
Normal on day one. Raise your hand — you are not behind, you just need the terminal opened once. Same credit.
Which of A, B, C or D are you in right now?
Real links on the real course site. Come back to this tab after each one.
What do we know for certain — and what are we only guessing?
What we know. Announcements returned 404 — the web server’s code for “there is no page at this address”. Its address ends in announcements.html. The other two opened.
What we do not know. Why. Missing, misspelled, moved — nobody has looked at the files yet.
This one broken link is the case for all of Topic 2.“Find out why the Announcements link fails. Do not edit or publish anything.”
Paste the request into any AI chatbot. Give it nothing else. Read the answer to your neighbour.
No device? Write what you think it would say.
We collect three answers aloud, then move on.
“The link is probably pointing at a file that was renamed or moved. Try correcting the href to the current filename.”
An href is the address inside a link: the page or file the link opens.
Yours probably said something like this — and sounded sure.
Can we tell whether this is right?
Read the words. Drew on what it had read before. Wrote the likely answer.
Nothing was checked. It never opened the page. Status: unverified.
Why: the request gives it no address. Give the same product a URL with browsing on and it becomes the next screen’s case — that is where the line actually sits.
From likely to supported, something has to look. Next screen.
Goal: see what changes when it can look — and learn what we call that.
“Find out why the Announcements link fails. Do not edit or publish anything.”
Screen 3, LLM alone: guessed “renamed or moved.” Never looked.
You are the model. New ability: you may read any file on the site. Still no editing, no publishing.
Write the moves you would make, in order. Three or four. Start each with a verb.
Find out why the link fails. Do not edit. Do not publish.
Same as the LLM so far. The difference starts next.
“May I open the course page?”
The software around it answers: yes to reading, no to editing.
The LLM alone could never ask.
The link points to announcements.html.
That file does not exist.
course-announcements.html does.
A guess has become something seen.
“Point the link at course-announcements.html. Here is what I saw.”
Then it stops and waits for a person. It could have edited. It was not allowed to.
A model that can look, whose next move depends on what it saw, and that can decide to look again, is an agent.
The LLM did Move 1 and guessed. The agent did Moves 2, 3, 4 — so its answer is supported.
Short, bounded, stopped by itself. That is a normal agent.
Write your reply. One sentence is enough.
Write your reply. Same rule: no looking.
Write something even if it feels wrong.
Text one: the answer was in your head. Everyone could reply.
Text two: the answer is in the world. Nobody could — and knowing more would not have helped. Only looking helps.
An LLM sits exactly where you sat: fluent on the first, stuck on the second — and it still replies confidently.
An agent is a model that has been given a way to look.
Who wrote a confident reply to text two anyway? Read it out.
Different link, different page, different filename. No second chance to explain.
On paper, in pairs. Then compare with the next pair — where the order differs, say why.
Do not advance until every pair has something.
Most pairs write:
1 Find what the link points at.
2 Check that target exists.
3 Propose the smallest fix.
4 Show evidence, stop for a person.
That is a skill. A procedure written once, for a link nobody has seen yet.
“Check that target exists” does nothing by itself. Something has to go and look — that is a tool.
Tool: one action, one result.
Skill: your steps — which actions, what order, when to stop.
Swap the tool tomorrow. Your steps still stand.
A gets you a filename — announcements.html — but not whether it exists. Look spent; question still open.
B cannot even be asked yet. Which file? You do not know until A comes back.
C cannot be asked until B says the file is missing.
It takes three looks — and you could not plan them in advance. Each one is chosen by what the last one returned.
That is a loop. Next screen: tell the agent how to run one.
The question: why does the Announcements link fail? The limit: no editing.
Line 3 is the hard one. Most pairs leave it blank.
1 Look at what the link points to.
2 If that file exists → stop, report “not the link.” Otherwise → look for the right file.
3 Repeat until you can name the cause or you have run out of things to look at.
What you just wrote is a loop: a look-and-decide that repeats until a stop rule says stop. Without line 3 it either never ends, or it ends by doing something nobody asked for.
This is the loop inside the tool you installed, mapped from its source — eleven steps, animated.
Find your three lines in their eleven. Which of the eleven is your line 3, the stop rule?
Next screen: act it out, one role each.
Diagram structure: the goal keeper gives a bounded request to the model role. The model proposes a read. The host and tool role checks permission and returns an observation. The recorder carries the observation back to the model. When the model proposes a change, the human reviewer enforces the stop boundary. The four rounds are frame, observe, revise, and stop.
Goal keeper reads: “Diagnose why the Announcements link fails. You may inspect course files. Do not edit or publish. Stop with evidence and a proposed next step.”
Listen for one thing: where does it put the line? Same place you just did?
Something this instruction allows that the person who wrote it would not want.
Be concrete: an action, not a worry.
Fix — how? Edit the page? Rename a file? Publish? All of them count as fixing.
Based on what? Nothing says look first.
Done when? Nothing says stop. So it may not.
Outcome — report why the link fails; propose one fix.
Evidence — from course files you may read, not from what usually happens.
Limits — read only; no edit, rename, publish.
Stop rule — return evidence and proposal, then stop for a person.
Those four headings are an Agent Brief. Next screen, you write one.
No account? Use the exercise’s simulated draft.
Next: what does an agent’s report actually prove?
“Fixed the Announcements link and verified it works. ✓”
Accept it and move on — yes or no?
Seven words, two claims: something was fixed, something was verified.
Six things happened to make that sentence. You saw one.
Two are problems: it edited a page it was told not to touch, and “verified” has nothing behind it.
Neither shows in the report. Both show in the steps.
That record is a trace. Next screen, you find the two problems.Entries 5 and 6.
Entry 5 changed the page; the brief allowed a proposal, not an edit. It could write, it was not allowed to — capability is not authority.
Entry 6 claims “verified” with no check in the record.
Entry 3 is the only real evidence: it names the broken link.
Next: you write the permission that would have made that edit legal.Two defensible answers.
Grant it narrowly: change that one href in a working copy, run the link check, stop before publishing.
Keep it read-only: the instructor owns the page — return the evidence and the proposed change, a person applies it.
Both name a scope, a check and a stop. Neither says “it seemed right.”
Next: a different agent, a job you ran yourself.The folder was visible, so it used them.
“Quiz Friday.” No page says so.
It had a send tool and thought it helpful.
How many of the three did the brief allow?
None was allowed — and no single rule stops all three.
1 input: it could reach what it should not.
2 evidence: a claim no source supported.
3 action: it reached other people without asking.
“Be careful” prevents none. Each needs its own boundary, set before it runs.
Next screen: you write the four boundaries your own agent needed.System diagram: the study-guide agent you ran sits at the center. Four safeguard layers are added in order. Context limits inputs to approved course pages and excludes sensitive data. Tool permissions allow reads and local drafts but no shared edits or external messages. Evidence checks require citations and verification. Human hand-off occurs before edit, send, or publish actions.
These four boundaries are the brief you would give it next time — where Screen 11 started.
Diagram before reveal: an unlabeled system shows a central model, reusable guidance, tool operation, returned observation, host gate, and human boundary. Students first explain the relationships in their own words.
An LLM contributes ___, but that does not prove ___.
A tool differs from a skill because ___; the agent uses them by ___.
The system must stop and ask a human when ___.
Today: setup together, then one shared demonstration. Use the workshop for the 25-minute setup and 17-minute demo; individual practice comes later.
Open Git setup and demo →Save a file you can reopen.
For this exercise, give the next agent session the saved file and next-step note instead of relying on chat memory.
Today you put the guide in a file, record a checkpoint, and send it somewhere you can reopen it.
First: where does that file live?1 · The filestudy-guide.txt and next-steps.txt
2 · The folder
where those files sit
3 · The history
your checkpoints, on this computer
4 · GitHub
a copy you can reopen anywhere
save writes the file · commit records a checkpoint · push sends
Push — and only push.
Save and commit both happen in places 1–3, on this computer. You can commit all day and place 4 still shows nothing.
Git performs all three moves. GitHub is the site holding place 4.
Watch for these four places in the demonstration.In a few minutes you do two separate things: install a program called Git, and create a GitHub account.
Neither one installs the other. You check them separately.
Which one becomes impossible?
Opening it somewhere else.
Git is a program on your computer. It records checkpoints and reopens old versions — no account, no internet needed.
GitHub is a website holding a copy, so another computer or another person can reach your work.
Git gives you history. GitHub gives you reach. Tonight you set up both.
Next: open the practice project.The actual setup steps, repository access, and prompts are here. The private repository link is for the instructor; students watch the projected result.
Open Git setup and demo →The destination and the contents.
A success message is the agent’s claim. Meeting 1 taught you what those are worth without evidence.
So you approve the destination, push, then open GitHub in the browser and find both files and your checkpoint. The page is the evidence.
Next: change one sentence — without losing this version.Two lines, side by side: that comparison is called a diff.
Read it before approving. It should show your sentence changed and nothing else.
Then a second checkpoint, with its own message, and an updated next-steps.txt. The first version is still there.
Still the first one.
A commit changes your computer. Only a push changes GitHub. This is the same line you drew on Screen 4.
Push again, refresh, and find both checkpoints. Open the earlier one and read the old sentence — without deleting the new one.
Next: can a brand-new session pick this up?next-steps.txt — because memory is not a file.
A fresh session has none of your conversation. What it can read is what you saved and sent.
Copy the project into a new folder, let it read the guide and the note, and have it tell you the next task — then stop. No edits during retrieval.
Next: say the whole workflow in your own words.Save updates the file.
Commit records a checkpoint on your computer.
Push sends it to GitHub.
You have two checkpoints, an online copy you can reopen anywhere, and a note a stranger could act on.
Bookmark the repository. Bring the note to the next class.