ENGINEERING CASE STUDY / Security
Programming Exam Platform
Examinations with deliberate trust boundaries.
Explore the source01 / THE PROBLEM
Problem & objectives
Create a structured desktop foundation for academic programming examinations, authentication, grading, and authoritative timing.
Secure-by-design WPF foundation for academic programming exams with SQLite persistence, authentication/lockout, dashboards, examinations, audit logs, grading primitives, timer logic, and a fail-closed execution boundary.
02 / THE SYSTEM
Architecture & technology
A WPF/MVVM UI calls application contracts and policies. The domain remains independent of infrastructure; EF Core adapters implement persistence and authentication.
- WPF / MVVM
- Application & domain
- EF Core / SQLite
03 / THE BUILD
Implementation & key features
- Authentication and lockout flows
- Exam dashboards and timer logic
- Grading primitives
- SQLite persistence
04 / THE BOUNDARIES
Security & reliability
Design notes and review considerations documented alongside this project:
- Secure-by-design foundation
- Audit logging
- Fail-closed execution boundary
05 / THE DECISIONS
Challenges & trade-offs
The local code runner is disabled by default and is not a sandbox. Production execution requires a separately isolated service. Instructor authoring and remote sandbox integration remain roadmap items.
06 / THE RESULT
Outcome & engineering takeaways
A working foundation with authentication, role-aware navigation, objective exam delivery, answer persistence, timers, grading primitives, and audit models.
The engineering takeaway is to make the system’s capabilities and limits explicit. The repository documents the implementation and its current scope.
Read the project documentation