Coalfire In partnership with Teleport
RAMPCon 2026 · AI Agent Building Lab

Build and evaluate practical AI agents

A hands-on lab for designing, running, and judging AI agents. Everything you need lives in the lab repository. Clone it, register your agent identity with the prefix below, and follow the guides.

At the start

You must bring your own access to a model provider. We recommend a Google Cloud (GCP) project with billing enabled. Confirm your access at the start of the lab; the exact configuration is in SETUP.md.

1 · Get the lab code

All setup steps, walkthroughs, and reference material live in the repository. Start there.

Open the lab repository

2 · Your agent identity prefix

Use this prefix plus your secret suffix to register your agent identity with Teleport.

dish-slow-beige
Append your secret suffix after the prefix. Do not share the full value.

Start here

Get your environment ready before you dig into the agents. The repository guides are the source of truth; the steps below are just the path through them.

  1. Clone the repo and read SETUP.md.
  2. Run the setup script at scripts/attendee-setup.sh to install dependencies and configure your environment.
  3. Register your agent identity with the prefix above plus your secret suffix.
  4. Confirm everything works with the preflight check at scripts/preflight.py before the build hour.

Work through the lab

Each area below links to the primary, source-controlled material. We keep the detail in the repo so it stays versioned and current, rather than restating it here.

Learn

Tools, skills, and agentic systems

Build the shared vocabulary: what a tool is, what a skill is, and what makes a system agentic rather than scripted. The audit agent is a compact example of the core patterns: structured output, tools, and a well-defined system prompt.

Evaluate

Judge agent behavior with discipline

A repeatable way to assess outputs and vendor claims: the decision loop and the vendor-claim rubric.

Concepts & reference

Stability, controls, and the scanner

How output stability is measured, the control knowledge base behind the agents, and the compliance scanner they call.

Leaving with more than a demo