IDEALIT Passport
Menu

Passport search

Find a lesson or fix

Type at least two characters.

    Browse help by symptomBrowse all references
    How to start
    Public course previewThis is not your assigned passport. No identity, answers, or completion progress are stored here.How to start your passport
    Guided lesson
    01 / 02About 20 minutes

    Set Up One AI Coding Tool Safely

    An AI coding tool can inspect project files and request actions. Configure one for a read-only check on fictional files; no paid purchase is required to pass.

    Where you will workOn the laptop or desktop in front of you
    1. 1Understand
    2. 2Try it yourself
    3. 3Check and submit

    Before you start#

    An editor is the application where you read and change code. Its coding agent requests tools; a model generates text in response. A provider or gateway supplies model access and billing.

    Chosen setup Access/cost owner Permission for this test
    VS Code/Copilot student route Intended verified GitHub account and current included benefit Read fictional practice files only
    Optional Zed/OpenRouter route Your personal account and charges Same read-only boundary; no purchase obligation

    An extension is an add-on inside the editor. An application programming interface (API) key is a secret authorizing service use and spending. Keep API keys private and use only the supported secret store. The official questions include one gateway distinction: OpenRouter is a provider/gateway, not the coding agent. You do not need to configure a tool protocol such as MCP or ACP for this test.

    The tool is configured, but its first response asks to install a package. Would approving that satisfy this read-only request? Decide before acting.

    What a successful read-only check establishes

    The response names files actually present, no edit or command was attempted, and the independent limited Git status check is empty. This checks the exercise's scope, not the whole computer. Use the intended verified account and stop at a paid checkout. Unavailable access leaves this AI lesson pending while non-AI work continues; a manual alternative is not an AI completion.

    Review permission before approving a proposed action. Keep keys in the supported secret store.

    Start the practice

    Practice

    Try it in your practice folder

    Follow in order

    Steps

    Choose one setup. Use fictional practice files, approve no paid purchase for onboarding, and keep the request read-only.

    Optional: using the terminal

    A command is a line of text that tells a computer to do one task. You paste it into a terminal, the text application used for commands. A shell is the part inside that application that reads the command. PowerShell, zsh, and Bash are shells. Open only the application named for your computer below; it starts its configured shell. Follow the shell named below. You do not need to install a separate Bash or zsh application.

    Your computer or local means the laptop or desktop in front of you. Remote means another computer reached through the network. A command affects whichever computer the step names, so check that label before pasting.

    • Windows: press the Windows key, type PowerShell, and open the result named PowerShell. Do not use Command Prompt, Git Bash, or WSL for a block labelled PowerShell.
    • macOS: press Command+Space, type Terminal, and press Return. Terminal normally starts the zsh shell. If it uses another shell, run zsh for this session.
    • Linux: open the app named Terminal from the applications menu. It normally starts the Bash shell. If it uses another shell, run bash for this session.

    The prompt is the text beside the blinking cursor. For each card, check the named computer, choose Copy, paste only the command after the prompt, press Enter once, and wait for the prompt to return.

    If you have never done this before, first run the harmless terminal-ready practice on the start page. It lets you practise copying, pasting, pressing Enter, and reading output before a setup command.

    Practise one harmless command firstHow to open a terminal and run a command
    1. 01

      Identify the components

      Read and answer on this web page

      Use the chosen setup table above. The editor is where you review work; the agent can request tools; the model generates a response; its provider or gateway supplies access and billing. No tool protocol setup is required.

      Read agents and interfaces

      Look forYou can name the role of every component in the chosen setup.

      Explanation and help
      What this means
      Choose one setup option.
      Safe recovery
      Do not configure credentials until the billing path and agent are clear.
    2. 02

      Choose one setup option

      Read and answer on this web page

      Choose one complete setup. Eligible students use VS Code/Copilot. Zed/personal OpenRouter is an optional paid alternative, not a purchase to pass. Other tools need written owner-approved data, cost and permission rules. If access is unavailable, leave this AI lesson pending and continue non-AI lessons; manual work does not award an AI pass.

      Compare supported AI setup options

      Look forYou have selected one option and can name its account owner, payer, editor, and agent interface.

      Explanation and help
      What this means
      Follow only the selected option below.
      Safe recovery
      Leave this lesson pending and continue manually. Do not create a paid account merely to pass.
    3. 03

      Copilot option: activate the Student benefit

      Read and answer on this web page

      Do this step only for the Copilot option. After GitHub Education approval, open Education benefits. If Copilot Student is already active, keep it. Otherwise select the Copilot Student activation offered by GitHub. If GitHub asks for payment or a payment method, stop; payment is not required for this option.

      Open Education benefitsRead Copilot Student setup

      Look forGitHub identifies the Student benefit without a paid checkout.

      Explanation and help
      What this means
      Continue to the Copilot VS Code step. Zed users skip to the Zed step.
      Safe recovery
      Continue manual onboarding while verification is pending; do not purchase access to pass.
    4. 04

      Copilot option: connect VS Code

      On your computer

      Do this step only for the Copilot option. VS Code is the editor used here. An extension is an add-on installed inside the editor; GitHub Copilot is the coding-agent extension. Install or open VS Code. Open Extensions, install GitHub Copilot from publisher GitHub if it is absent, then select the Copilot icon, choose Use AI Features, and sign in with the same GitHub account used for the Passport. If more than one GitHub account is present, use the Accounts menu to select the intended account for Copilot.

      Download VS CodeFollow the IDEAL Lab VS Code setup

      Look forVS Code shows the intended GitHub account and opens its Chat or Agent interface.

      Explanation and help
      What this means
      Continue to Prepare the fictional practice repository.
      Safe recovery
      Use the Accounts menu to select the intended account. Do not purchase a plan or grant unexplained access to pass this mission.
    5. 05

      Zed option: follow the personal OpenRouter procedure

      Read and answer on this web page

      Only for the deliberately selected Zed alternative: follow the linked optional procedure, then return to Prepare practice folder here. Copilot users skip this step. Personal spending, loss and liability remain yours; the lab provides no credits or reimbursement. Enter a key only through the supported secret store, never a project file or prompt.

      Optional paid alternative only: Zed/OpenRouter setup

      Look forFor the Zed option, a dedicated limited key is stored outside files and Git. For the Copilot option, this step is skipped.

      Explanation and help
      What this means
      Continue to Prepare the fictional practice repository.
      Safe recovery
      Revoke an exposed key and stop requests until account activity is understood.
    6. 06

      Open the fictional practice repository

      On your computer

      Press Prepare practice folder, run the displayed enter-folder command, and open that exact folder in the editor configured above. Check the editor title or file tree before opening the agent. Do not use a research repository for this test.

      Practice folder

      The launcher creates or reuses the exercise folder for this course. It does not change another folder.

      Open this lesson from your local Passport to prepare the folder.

      Look forThe editor is open at the Passport practice repository and the terminal is at its root.

      Explanation and help
      What this means
      Run the read-only prompt.
      Safe recovery
      Run gh passport doctor; do not substitute another repository or create a second clone.
    7. 07

      Run a read-only agent check

      On your computer

      Start a new agent chat for the open practice repository and paste the prompt below. Do not approve an edit or terminal command.

      Paste into agentAgent message
      Read the repository instructions and list the top-level files and folders you can see. Do not edit files, run terminal commands, install software, or access anything outside this repository. Tell me when you are finished.

      Look forThe response refers to files that exist in the practice repository and no edit or command was attempted.

      Explanation and help
      What this means
      Verify the working tree yourself.
      Safe recovery
      Stop the agent and inspect every action it attempted.
    8. 08

      Verify that configuration changed no project file

      On your computer

      Run the existing limited Git status command at the practice repository root. An empty result means the named practice and common settings paths did not change; it is not an audit of every secret or service on your computer. Inspect any output before continuing.

      RunPowerShell on Windows
      git status --short -- workspace/agent_task .vscode .zed .env .env.local
      RunTerminal on macOS (zsh)
      git status --short -- workspace/agent_task .vscode .zed .env .env.local
      RunTerminal on Linux (Bash)
      git status --short -- workspace/agent_task .vscode .zed .env .env.local

      Look forThis limited Git status prints nothing for the named paths; independently confirm the response attempted no edit or command.

      If this differsStop and inspect the named change; preserve intended manual work. If a credential was exposed, use the private incident procedure.

      Explanation and help
      What this means
      Confirm the read-only result you observed, then answer the two questions.

    Practise

    One practice question. It does not affect your progress.

    01The read-only request makes an agent propose a terminal install. Which action stays inside the lesson?
    See an explanation

    The request authorized reading fictional files, not installing software or running commands. Reject the extra action and inspect state independently. A model suggestion does not expand your permission.

    Finish the lesson

    Questions to submit

    Answer these 2 questions, then confirm the work you checked.

    To pass: 100% and every safety question. Completion appears after the automatic GitHub check passes.

    01What is OpenRouter in this stack?
    02Where may an API key be stored?Safety-critical
    Confirm the result you personally observed

    These values are processed only by the local launcher. Private paths are not written to the public submission.

    Before submitting
    Open my real passport first

    You can check sample answers here. Open your local Passport to check your practice files and submit the lesson.

    Preview onlyYou can try the questions here. This page does not store or submit your answers.
    Need help?Open recovery steps and AI-review guidance