a friendlier way to become an ai engineer

From student to AI Engineer.

For students ready to build. Nine stages, from your first Python script to deploying AI products people actually use. No textbook marathons, no jargon walls.

9 stages 3 to 4 months mostly free build real things progress saved
print("hello") RAG & embeddings AI agents shipped 🚀

Two paths. This is the building one.

AI engineering is broader than it looks. There are two paths, and here's the one you're on.

Path 01

The Researcher

Building and training models from scratch. Deep math, theory, and years of specialization.

train from scratch deep math ML theory
Covered in a separate roadmap →
★ this roadmap Path 02

The Builder

Shipping products with existing models: RAG, agents, LLM integrations, deployed APIs. Real things real users use.

RAG AI agents deployed APIs real products
Your goal: production-ready AI, job-ready.
A reality check

This takes time: about 3 to 4 months of consistent work.

Anyone promising you'll be job-ready in two weeks isn't being honest with you. The good news: the path is clear, the tools are mostly free, and demand is genuinely high right now, especially in the region.

Nine stages, one path

Ready when you are. Let's get walking. 0 / 9 complete
00
Stage 0 · Python Foundations

Speak the language of AI

Python is the language of AI. Before anything else, you need to feel comfortable writing Python code. You don't need to be an expert, you need to be functional.

Your LU background

You already studied programming fundamentals in Year 1 through C++ and Java, so loops, conditions, functions and OOP won't feel foreign.

What you'll cover
  • Variables, data types, loops, conditionals, functions
  • Lists, dictionaries, file handling
  • Object-Oriented Programming (OOP) basics
  • Virtual environments and pip: keeping each project's packages separate
Choose how you'll learn it
★ Recommended

AI Python for Beginners, by Andrew Ng

If you want to learn Python with AI in mind from day one, this is the better option. Four short courses take you from the basics all the way to working with data and calling APIs, which gives you a head start on Stage 1 too.

  • Course 1, Python basics: variables, loops, functions, conditionals
  • Course 2, automating tasks with Python
  • Course 3, working with data using Python
  • Course 4, using AI APIs in Python (directly relevant to Stage 3)
Course, 4 partsVideos freeCertificate $30/mo

Good to know The videos and labs are completely free. You only pay if you want the graded assignments and a certificate: that's a $30/month DeepLearning.AI plan (7-day free trial), and it unlocks every course on the platform. For this roadmap, the free videos are enough.

Milestone

Build an expense tracker. A small app you run from the terminal that keeps track of what you spend. You should be able to add an expense, change one, delete one, see them all, and get a total for the month.

If you want to take it further, the brief also suggests sorting expenses into categories, setting a monthly budget that warns you when you go over it, and saving everything to a spreadsheet file.

You build on this same project in Stage 1, so none of it is wasted.

Looking for other things to build? Project Based Learning has a long Python list.

01
Stage 1 · Core Developer Tools

The tools around the code

Most students rush straight into AI and skip this stage. That's the mistake that keeps projects stuck on laptops and never in front of real users. AI lives inside software, so there are tools you must learn. They are rarely taught properly at university, but you will need them on every real project.

Your LU background

Git, GitHub and APIs are new ground, rarely taught at university, so start fresh. SQL is the exception: if you took DB1 and DB2 you already have the theory, so this is about practice, not relearning concepts.

What to learn, and how

Git & GitHub

Imagine you are working on a project and accidentally break everything. Git lets you go back to when it worked. GitHub is where you put your code online so others can see it, and so it doesn't die on your laptop.

  • Version control: commits, branches, merging
  • Working with GitHub: push, pull, pull requests

SQL

The language you use to ask a database questions and get answers back. Almost every application stores its data in a database, so querying one is a baseline skill. Focus on writing real queries against real data, practice over theory.

  • Querying data with SELECT, WHERE, and filters
  • Joining data across tables
  • Grouping and aggregating results

APIs, the request and response mindset

You open a weather app and it shows today's forecast. That app didn't collect the weather itself, it asked another service through an API. That's all an API is, two programs talking to each other. Every AI model you build will need one so people can use it.

  • What an API is: a request and a response
  • How two programs talk over the web
  • Reading a JSON response

Good news: you already met APIs back in Stage 0. For now you only need the mental model, two programs talking by sending a request and getting a response. The hands-on work comes later: calling LLM APIs in Stage 3, then building your own in Stage 7.

RecapOptional read

Things you'll pick up as you build

These are not things you study from a course. They come naturally as you write more code and work on real projects. Keep them in the back of your mind:

  • Clean code
  • Modularity and good project structure
  • Logging and error handling
Milestone

Upgrade the expense tracker. Do not start from nothing: take the app you built in Stage 0 and give it the three things this stage taught you. The only new parts are the API call and the SQL.

  • Move it into SQLite. One row per expense, and the summaries rewritten as SQL queries with GROUP BY instead of Python loops.
  • Give it a second currency. Dollars and Lebanese lira: pull the rate from a currency API like Exchange API (free, no key needed) and store it with each expense, so old totals stay right when the rate moves.
  • Put it on GitHub properly. Real commits, one merged branch, no API key in the repository, and a README that lets a stranger clone the project and run it.

Currency is only the example. You can build the same project around any API you would actually use: weather for your commute, football results, prayer times, movie ratings. The Public APIs directory lists hundreds of free ones sorted by subject.

Rather build something new instead? roadmap.sh has other briefs that use an API and a database.

02
Stage 2 · Getting to Know LLMs

Know what you're working with

Before writing a single line of AI code, understand what you are working with. This stage is purely conceptual, no coding yet. By the end you'll know how large language models work, what's happening under the hood, and what all those settings mean before you start using APIs.

Your LU background

None of this is covered in the LU curriculum. Start fresh.

What to learn, and how

How LLMs work

Before you use a model, it helps to know roughly what it is and how it produces text. You are not here to become a researcher, so don't worry about understanding every detail or the math. A rough, working intuition is plenty, just enough that the rest of the roadmap makes sense, and you can always come back to this once you've built a few things.

  • What a Large Language Model is
  • The Transformer architecture, the backbone behind every major model today
  • How a model generates text, predicting one token at a time
Learn it with
YouTube, 3Blue1BrownInteractive toolFree

Start here. Watch Large Language Models explained briefly first: it's under 5 minutes and gives you the mental model of what an LLM actually is. Then watch chapters 5, 6, and 7 of 3Blue1Brown's Neural Networks series in order, covering the Transformer, attention, and how models store facts. That's all you need on the architecture side.

Then play with

Spend 10 minutes here. You type something, it tokenizes your text in real time and shows how the model picks the next word. It runs a real GPT-2 model in your browser; built at Georgia Tech, used by 330,000+ learners.

Core LLM elements

These are the knobs you'll meet the moment you start working with a model yourself. Knowing what each one does is what separates someone who copies settings from someone who controls them.

  • Tokens, the units a model reads and generates, not words, not characters, something in between
  • Context window, how much the model can see at once in a conversation
  • Sampling parameters, the settings that control how it generates a response
  • Temperature, controls randomness: low is predictable, high is creative
  • Top-K and Top-P, control which words the model considers at each step
  • Max tokens, the cap on how long a single response can be
  • Repetition penalties, stop the model from repeating itself
Learn it with
GuideFree

The single most useful read for the rest of the roadmap. It walks through every element above, in order, then shows how they come together when a model generates a response. Read it once, properly.

Milestone

No project this time. This stage is conceptual on purpose, so the milestone is that the ideas stuck. You are ready to move on when you can explain each of these out loud, in your own words, without looking anything up:

  • What a token is, and why models count in tokens rather than words
  • What the context window is, and what happens to a long conversation when it fills up
  • What temperature, Top-K and Top-P each change about how the next token gets picked
  • What max tokens and repetition penalties are for
  • How an LLM turns your prompt into a response, one predicted token at a time
03
Stage 3 · Building with LLMs

Your first real AI code

This is where you write your first real AI code. You'll connect to a model through an API, send it instructions, and get useful responses back. By the end you'll have built something that actually uses AI, not just read about it.

Your LU background

None of this is covered in the LU curriculum. Start fresh.

What to learn, and how

Prompt engineering

Writing a good prompt is a skill, not magic. How you structure your instructions directly affects the quality of what you get back. It comes first because you can practice it right now with no code, just type into a chat box or playground.

  • Zero-shot and few-shot, an instruction with no examples, versus a couple of examples that show the pattern
  • Elements of a prompt, instruction, context, input data, output indicator
  • System prompting, defining who the model is, how it behaves, and its boundaries
Learn it with
Guide + optional courseFree

A short, friendly walkthrough of the essentials, made for this stage so you don't have to wade through the bigger references yet. Prefer to learn by doing? DeepLearning.AI's free one-hour course (Andrew Ng and OpenAI's Isa Fulford) covers the same ground and has you build a chatbot.

Using LLM APIs

Now that you can write a solid prompt, it's time to send one from code. You already met APIs in Stage 1; an LLM API works the same way, you send a request and get a response, but the request is shaped for language models. You send it messages and pass the sampling parameters from Stage 2, and it sends back generated text, which is how most AI products are built. Any model works the same way, so don't overthink the choice: Google's Gemini API has a generous free tier with no credit card.

  • Making your first call to an LLM API
  • Managing API keys safely
  • The request structure: system prompt, user prompt, message history
  • Passing model parameters (temperature, max tokens, and the rest from Stage 2)
  • Reading the response you get back
Learn it with
Video, ~12 minFree

Start with Patrick Loeber's video to get the basics clearly: getting a key, sending your first prompt, and chatting using the Python SDK. Gemini-centered, but other providers work the same way.

Want to experiment with parameters and settings? Google AI Studio lets you play with the system prompt, temperature, max tokens and more in a visual playground, then writes the exact Python for you with Get code.

Gemini API tutorial

Function calling & structured output

These take prompting further, but they are API features: you use them through code, once you're already making calls. That's why they come after your first call.

  • Function calling, the model decides to call a function you defined: searching a database, sending an email, fetching live data
  • Structured output, the model returns data in a specific format like JSON, much easier to use in your app
Learn it with
Official docsFree

Function calling is the bigger idea, so start with this short Google video that explains the concept and the information flow, then run the official Colab lab to build it yourself. Structured output is the simpler sibling: you just define a JSON schema. Both are provider-specific, so the Gemini docs are your reference for the exact syntax.

Both labs run on the free API key.  Reference docs: function calling · structured output

Pydantic: the standard way to define structured output in Python

Pydantic lets you describe the shape of your output as a typed Python class. You hand that class to the SDK as the response schema and get back a validated, typed object instead of raw JSON, with no manual parsing. The same classes also declare tools for function calling, so it is worth learning early.

Learn Pydantic: models (official docs) · crash course video (covers LLM structured output)

Showing your work

You won't learn real deployment until Stage 7, but you don't need it to let someone try what you built. A lightweight UI tool wraps your script in a simple web interface in a few lines, enough to demo a project or drop it in your portfolio.

  • Streamlit or Gradio, either turns a Python script into a shareable web app; pick one, keep it simple
  • Save real deployment (FastAPI, Docker, cloud) for Stage 7
Learn it with
Official docs, hands-onFree

Streamlit's own tutorial builds a basic LLM chat app step by step with a few Python functions (st.chat_message, st.chat_input). Gradio is an equally good alternative.

Milestone

Build a Text-to-SQL app, then point it at your tracker. Follow the tutorial to build a Streamlit app where you ask a question in plain English, Gemini writes the SQL, and the app runs it and shows the answer. Then swap the demo database for your Stage 1 expense tracker, and you can finally just ask.

  • Build the tutorial app. The video is a little older, so write your version with the newer google-genai library from this stage’s API lesson instead of the one on screen. It works when you type a question and see the SQL the model wrote, plus real rows from the database. And keep the API key out of your code, the same habit from Stage 1.
  • Connect it to your own tracker. The tutorial uses a demo database. Swap in the SQLite file from your Stage 1 expense tracker, and describe your real tables in the system prompt, the setting from Stage 2 that tells the model who it is and what it knows. You are done when “How much did I spend on food last month?” comes back with the right number.
  • Make it read-only. Your app should only ever read data, never change it: check that the SQL starts with SELECT before running it. And when a question cannot be answered from your data, a good system prompt makes the model say so instead of inventing a number.

Rather build something else? This written step-by-step guide builds and deploys a Streamlit chat app with memory, and if you would rather work with OpenAI, the OpenAI API in Python brief comes with community solutions to compare against. Want more ideas with their code? The Streamlit LLM gallery is full of apps at exactly this level, each with its source.

04
Stage 4 · The AI Ecosystem

Know the landscape, choose well

You've made your first API call, but so far you've used one model. The ecosystem is much bigger. Here it is on one screen: four layers, and every tool you meet from here on sits on one of them. Picking the wrong model, for cost, capability, or licensing, is one of the most common mistakes junior AI engineers make.

Your LU background

None of this is covered in the LU curriculum. Start fresh.

The four layers

Open a layer to see what lives there. Everything you meet from here on sits on one of them.

Milestone

Run a model on your own machine, then plug your app into it. So far every model you have used lived on someone else’s servers. This time the model lives on your laptop: no API key, no internet, nothing leaves the machine. Then you connect the app you built in Stage 3 and see both sides of the ecosystem with your own eyes.

  • Chat with a local model. Install Ollama, pull a small open model like Llama or Gemma, and talk to it in the terminal. Turn the Wi-Fi off mid-chat: it keeps answering, and that is the whole point.
  • Point your Stage 3 app at it. Ollama speaks the same API format as OpenAI, so the swap is two lines: the base URL becomes http://localhost:11434/v1 and the model name changes. Your Text-to-SQL app now runs free, with no key. Notice what got worse too: a small local model is slower and misses more, and that trade-off is what this stage is about.

Want to go further? Open WebUI turns your Ollama into a private ChatGPT with a real interface, and this setup guide walks through it. Same engine underneath, models side by side.

05
Stage 5 · RAG

Ground the model in your data

LLMs only know what they were trained on. Ask about your company's internal documents or anything private and specific, and the model will make something up or say it doesn't know. RAG solves this. It gives the model access to your data at the moment it needs it, without retraining anything.

Your LU background

None of this is covered in the LU curriculum. Start fresh.

The path, step by step

Work through these in order. Each one answers the question the last one leaves open, so by the end the whole pipeline fits together in your head before you build it.

1
Start here

What is RAG, and why

RAG stands for Retrieval Augmented Generation. Instead of relying on the model's general knowledge, you retrieve relevant information from your own data and pass it to the model as context, so it answers from what you gave it. Every RAG system is three pieces working together: a data source, a retrieval system, and a language model.

A few things people build with it:

  • A chatbot that answers from a company's internal documents
  • A support assistant scoped to your product's docs
  • A legal tool that searches contracts and summarizes findings
2
The how behind retrieval

Embeddings

You just saw that RAG works by retrieving the pieces of your data that are relevant to a question. But there is a catch: computers don't understand words the way we do. To a machine, "car" and "automobile" are just two unrelated strings of letters, so how could it ever tell which pieces are relevant?

That is the problem embeddings solve. Text is turned into a list of numbers (a vector) that captures its meaning, so pieces of text that mean similar things land close together. That closeness is exactly what searching "by meaning" (semantic search) measures. The video below explains it with single words; in RAG the same trick is applied to whole sentences and document chunks.

3
What you actually embed

Preparing your data: loading and chunking

So meaning lives in embeddings, and the text you embed is your own. But you can't embed an 80-page PDF in one shot. First you get the raw data in (PDFs, Word docs, web pages, databases, and it rarely comes clean), strip the noise, then split it into chunks: pieces small enough to embed and retrieve precisely. How you chunk decides what the model can and can't find later, so it matters more than it looks.

Read, then play

Read the Pinecone guide for the why and the main strategies, then open ChunkViz and watch how different chunk sizes cut the same text.

4
Where the embeddings live

Storing and searching: vector databases

Now every chunk has an embedding. Where do thousands of these vectors go, and how do you search them in an instant? That is the job of a vector database. It stores all those embeddings and finds the closest ones to a query by meaning, not exact keywords. Popular options (Pinecone, Chroma, Weaviate, FAISS) trade off cost, hosting, and ease of use. You index your chunks once, then run a similarity search on every question to pull the most relevant ones.

5
Now connect every piece

Build the full pipeline

You now have the three pieces from step 1: your data (prepared and chunked), a retrieval system (embeddings in a vector database), and the model. The pipeline is the loop that ties them together on every question, and its name spells out the three steps:

  • Retrieval, turn the question into an embedding and find the closest chunks
  • Augmentation, add those chunks to the prompt as context
  • Generation, the model reads them and answers, grounded in what came back

Because the answer is built from real documents, tell the model to use only the provided context, so every answer traces back to a source.

One thing to watch: retrieval quality is the biggest lever. If the wrong chunks come back, the answer is wrong no matter how capable the model is, which is why the re-ranking and query techniques in the playlist matter. The playlist builds all of this in LangChain, the most widely used framework (LlamaIndex is the main alternative, strong for document-heavy apps).

Build along · 15 short videos
6
Build it, then trust it

Evaluating your RAG system

You have a working pipeline. But how do you know it is actually any good? A RAG system can fail in two places, so you check two layers. Retrieval: did the right chunks come back for the question? Answer faithfulness: is the response actually grounded in those chunks, or did the model add things? (A fluent, confident answer can still be wrong.)

Keep a small test set of questions paired with the passage that should answer them, and use an LLM-as-judge to score faithfulness and relevance across many questions at once, so you can tell whether a change helped or hurt.

Milestone

Build a chatbot that answers from your own PDFs. This is the whole stage in one project: load a document, chunk it, embed the chunks, store them in a vector database, and answer questions grounded in what came back. Follow the video, or the written guide if you learn better by reading; both build the same thing on the free Gemini key.

  • Build the tutorial chatbot. Upload a PDF in Streamlit, ask a question, and get an answer that comes from the document. Every piece you wire up has a name from this stage: chunks, embeddings, the vector store, retrieval. If an import in the video looks dated, same trick as Stage 3: keep the idea, use the current library.
  • Load your own lecture notes. Swap the demo PDF for the course notes you actually study from and ask real revision questions. If an answer looks off, look at which chunks came back: that is retrieval, the biggest lever from step 5.
  • Test it like an engineer. Write five questions you already know the answers to and score the bot on each: did the right part of the document come back, and did the answer stick to it? That is the two-layer check from the evaluation lesson, done by hand.

Rather build a different idea? Alejandro AO builds a bot that chats with any website from its URL (code), the same pipeline pointed at web pages. And when you want more to build, the AI Engineering Hub keeps 22 beginner projects with full code, RAG included.

06
Stage 6 · AI Agents

From answering to doing

An agent takes everything you've learned and adds something new: the ability to make decisions, take actions, and handle multi-step tasks on its own. This is where AI stops being a question-answer machine and starts being something that actually does work for you.

Your LU background

None of this is covered in the LU curriculum. Start fresh.

The path, step by step

Eight parts, in order, each building on the last. The single best way through all of them is Andrew Ng's course below; every part also links a short free resource of its own.

Do this course

The whole stage is essentially one course: Agentic AI by Andrew Ng (DeepLearning.AI). It covers the agent loop, the four patterns, tool use, evals, and multi-agent systems, hands-on in Python, roughly 80% of everything below.

The video lessons are completely free. You only pay if you want the graded labs, assignments, and a certificate: that's a $30/month DeepLearning.AI plan (7-day free trial), and it unlocks every course on the platform. Would rather not take the course? Every step below links its own short free resource too.

1
Start here

What is an agent

An agent is not a prompt, it is an architecture. A well-designed agent decides what to do next, uses tools to get information or take actions, checks its own work, and keeps going until the task is done. A prompt tells the AI what to do once; an agent figures out how to do it across multiple steps.

2
How it works, step by step

The agent loop

So an agent works across multiple steps, but how does it decide each one? Underneath every agent is a simple cycle that repeats until the task is done. This loop is the key mental model for everything else in this stage.

  • Reason, the model decides what needs to happen next
  • Act, it takes an action, usually by calling a tool
  • Observe, it reads the result of that action
  • Repeat, it uses what it observed to decide the next step, stopping once complete
3
What the loop is made of

Core agent components

That loop needs machinery to run. Every agent is built from four parts:

  • The model, the reasoning engine that drives every decision
  • Tools, how the agent acts: APIs, search engines, databases, code, even other models
  • Memory, short-term (this conversation) and long-term (across sessions)
  • Error handling, when an action fails it recognizes the failure, adjusts, and tries a different approach
Explore

Our interactive walkthrough of all six parts, including memory, the piece the course skips.

4
Proven designs

Agentic patterns

With those parts in place, a few designs for how agents think and act keep recurring. You'll see these four everywhere.

  • Reflection, the agent reviews its own output and revises before returning it
  • Tool use, letting the model decide when to reach for a tool rather than answering from memory
  • Planning, breaking a complex task into ordered steps
  • Multi-agent collaboration, specialized agents working together toward a shared goal; this is where things get genuinely powerful
Read

Then a short letter on each pattern: Reflection · Tool use · Planning · Multi-agent.

5
Is it any good?

Evaluating your agent

Once your agent runs, how do you know it works? This is the hardest thing to evaluate, because you're judging a whole sequence of decisions, not a single answer.

  • Task success, did it accomplish the goal end to end? The measure that matters most
  • Trajectory, did it take a sensible path with the right tools in a reasonable order?
  • Efficiency, how many steps, tool calls, and tokens did it take?
  • Agent test cases + LLM-as-judge, score both the result and the steps
6
A reality check

When to use an agent

Before you commit to all this, a check: not every problem needs an agent. If a task is a fixed, predictable sequence, a simple workflow is cheaper, faster, and more reliable. Reach for an agent only when the steps can't be known in advance. Knowing when not to build one is part of the skill.

7
Tools to build with

Frameworks

You won't wire the loop by hand forever. Frameworks handle the plumbing so you can focus on the logic.

  • LangChain, the most widely used framework, a great starting point
  • LangGraph, built on LangChain for multi-step and multi-agent workflows
  • MCP (Model Context Protocol), a growing standard for connecting agents to external tools

Always start with the official documentation. The people who built the tool are the best teachers.

Official docs

Start with the official docs; these are the frameworks the course does not cover.

Milestone

Two projects: learn the loop, then ship a real agent. First a guided build to feel how an agent thinks, then a project of your own that you will actually use every day.

Follow freeCodeCamp’s video and build a small coding assistant in pure Python. The model loops through reason, act, observe, calling tools that read, write and run files until the task is done: the agent loop from this stage, built by hand. No framework, and the free Gemini key you already have.

Want more agent projects with their code? The AI Engineering Hub’s intermediate section is where the agent projects live, 48 of them.

07
Stage 7 · Deployment

If it's not live, it doesn't count

A model that lives on your laptop is not a product. This stage is about making everything you've built accessible to real users, what separates a demo from something that ships. From here on, every project should go live. And the evaluation habit doesn't stop at launch: watching real inputs and outputs is just evaluation done online.

Your LU background

None of this is covered in the LU curriculum. Start fresh.

The path, step by step

Five steps that turn a script on your machine into something real users can reach: wrap it, package it, host it, secure it, and keep it affordable.

1
Start here

FastAPI

Before you deploy anything, wrap it in an API so other systems and users can interact with it. FastAPI is the most popular Python framework for this, and the one most AI engineers reach for first.

  • Building API endpoints
  • Handling requests and responses
  • Adding basic authentication
  • Documenting your API automatically
Watch · 15 min

FastAPI is the go-to; Flask is a solid, simpler alternative if you prefer it. The official FastAPI docs are the clearest reference once you start building.

2
Now make it portable

Docker

Your API runs on your laptop; now make it run anywhere. Docker packages your entire application, code, dependencies and configuration, into one container that behaves the same on every machine. No more "it works on my machine."

  • What containerization means and why it matters
  • Writing a Dockerfile
  • Building and running containers
  • Deploying a containerized application
3
Put it online

Cloud

A container still needs somewhere to run around the clock; that somewhere is the cloud. There are two moves here: get your first project live fast on a beginner-friendly platform, and, separately, learn one big cloud deeply for your career. The concepts transfer, so you only ever need to go deep on one.

Learn one cloud deeply

For a job, pick one and go deep; the concepts carry over.

Or ship it fast

To get a first project live in minutes, point one of these at your repo or Dockerfile. The two lists overlap, and there are many more; pick whatever fits.

4
Keep it affordable

Token cost awareness

You are live; now keep it from quietly draining money. Every call to an LLM API costs money based on how many tokens you send and receive. Think about this from day one.

  • How token pricing works
  • How to estimate the cost of your application
  • Strategies to keep costs under control without hurting quality
Milestone

Deploy a real AI app, start to finish. Two guided paths to the same milestone: an app of the kind you have been building, live on the internet. Pick the path that fits your situation, then repeat the same moves on your own Stage 3 or Stage 5 app.

Ship a RAG app to AWS. pixegami takes a RAG app like your Stage 5 chatbot and walks it into production: wrap the logic with FastAPI, build the Docker image, and deploy it serverless on AWS. It is this stage’s three steps end to end, on the cloud you are most likely to meet at work.

One honest note: AWS asks for a credit card even on the free tier. If that is a blocker, the second tab ships without one.

Want a third road? Hugging Face Spaces runs Docker containers free, no card, on the platform you met in Stage 4. And your Stage 6 Telegram agent deserves a home too: host it the same way, switched to webhook mode, and it answers while your laptop sleeps.

08
Stage 8 · AI Safety & Ethics

Build it safe, build it trustworthy

Building AI systems that work is one thing. Building systems that are safe, fair, and trustworthy is another. A model that passes every test can still fail in the wild, so safety here is an engineering problem, not just an ethics conversation. This stage is not optional: every system you ship will face these challenges.

Your LU background

None of this is covered in the LU curriculum. Start fresh.

What to learn

Security & privacy

The moment your app handles real user data you take on serious security and privacy duties, and LLMs add a whole new class of attacks on top of the usual ones. The OWASP Top 10 for LLMs is the standard map of what can go wrong.

  • The main LLM risks: prompt injection, data leakage, excessive agency, and more
  • Keeping user data out of model inputs and logs when it should not be there
  • Respecting privacy expectations even when regulations do not force you to

Prompt injection

The number one risk on that OWASP list, and the one you will meet first. A user crafts input designed to override your system prompt and make the model misbehave, directly, or indirectly through content it reads (a web page, a document, an email).

  • What prompt injection looks like in practice, direct and indirect
  • Defending through input validation, output checks, and prompt design
  • Why no single defense is perfect, so you layer them

Guardrails

The practical defense: programmable checks that sit around the model and enforce what it can and cannot do.

  • Input guardrails, filtering and validating what goes into the model
  • Output guardrails, checking what comes out before it reaches the user
  • Frameworks built for this, plus red-teaming: evaluation pointed at safety with adversarial inputs
Milestone

No project, the milestone is awareness. Every system you ship from here should have safety built in from the start: be transparent that it is AI, design it to fail gracefully rather than confidently wrong, and know when not to use AI at all.

↑ top