
An agent answers a support ticket instantly, with total confidence, and gets it wrong. Why an agent that sounds right is not the same as an agent you can trust, and a tour of the finished agent this course builds toward.
The simplest agent that can plausibly work: one model, one system prompt, one tool. Graded by hand against 25 real support tickets for a baseline: 56 percent task success.
Four least-privilege account tools, enforced read-only at the data layer, plus MCP in practice. Task success moves from 56 to 68 percent with no change to the model underneath.
Why hand-grading doesn't scale and drifts. Building an eval harness with a fixed golden set and receipts (tools called, tokens spent, real dollar cost), and the racy bug it catches that a green exit code missed.
A context pack: four budgeted markdown files covering product facts, tone, escalation policy, and known failure modes. Task success moves from 68 to 84 percent, and cost per ticket drops.
Memory that survives across sessions inside an 800-token compaction budget, and a coherence judge whose first version scored a memory-less agent 5 out of 6 by mistake.
A narrow "investigator" subagent for digging through logs, isolated in its own context window. A focused A/B test: it tied the single agent 5 out of 5 to 5 out of 5, at 1.9 times the cost.
Caching, model routing, and a hard budget ceiling, added and measured honestly. The bill goes up, not down, and the lecture explains exactly why, lever by lever.
8 attacks, including prompt injection through the agent's own tools, run against a baseline and a hardened agent: 16 runs, zero compromises. Least privilege, a PreToolUse hook, and human-in-the-loop escalation as the actual controls, not the model's good behavior.
Making the self-hosted versus managed decision on purpose, then shipping the agent headless: one pure entrypoint, ticket in, reply and telemetry out. Median ticket time 16.1 seconds, p95 at 40.3 seconds.
Turning structured run records into a trace and reading a real 70-second ticket through it. Only 19 of those seconds were tool calls; the other 51 was the model thinking and writing.
A real incident, run the way you'd run an on-call shift: alert, trace, root cause, fix, regression. The root cause: a permission gate that never checked a single thing, the entire time it was live.
The full scorecard journey from 56 to 92 percent and back to a stable 88. The complete reference architecture, walked layer by layer, and how to cold-start a second, completely different agent from the same kit.
This course builds one real production AI agent, start to finish, using the Claude Agent SDK. You watch a single support agent get built, measured, and shipped, lecture by lecture, with every number pulled from actual run receipts instead of slides.
It starts honest. The first version is a one-evening agent that answers real support tickets and gets 56 percent of them right. From there, each lecture changes exactly one thing: tools, an eval harness, context, memory, a subagent, cost controls, security, deployment, and observability. Then it measures what that change was actually worth.
Most lectures report a win. At least one reports that the fix everyone recommends made the bill worse. Both get shown on screen, with the receipts, because a course that only shows wins is not teaching you how production actually works.
The course also maps to the Claude Certified Developer (CCDV-F) certification blueprint. The agentic loop, tool design, evals, context engineering, memory, subagents, cost, security, and deployment are covered in the order the exam expects, built as working code instead of slides.
What makes this course different:
- Every metric on screen comes from a graded run against a fixed set of support tickets, never typed in by hand
- One companion GitHub repo with a checkpoint branch per lecture, so you can run every version of the agent yourself and check the numbers against your own receipts
- At least one lecture shows a popular best practice failing, with the real numbers, instead of only showing what worked
- A full working eval harness, cost guard, and security layer you can reuse to cold-start a second agent from day one
- Built for developers who already know basic TypeScript. No prior agent-building experience assumed
By the finale the agent holds steady at 88 percent task success, with a working eval harness, a cost guard, a security layer that has been attacked on camera and held, and a full architecture you can reuse for your next agent.
You need TypeScript and a terminal. Everything is built from the public companion repo, branch by branch, so you can run every version of the agent yourself instead of taking my word for any of it.