### Professional training: member portal using Laravel

#### Summary
A member portal blueprint for professional training built with Laravel on Ample. Domain schema: 
- **course_groups** (certification, cohort, start_at, end_at): certification cohorts 
- **memberships** (course_group_id, participant_email, employer, role): participants and trainers 
- **sessions** (course_group_id, starts_at, module, location_or_link): training sessions 
- **materials** (course_group_id, module, object_key, visibility): course materials and exam guides 
- **document_access** (document_id, principal_reference, role, granted_at): who may read which document.

Public information: certification catalog, cohort dates, trainer credentials. Kept out of scope until handling is reviewed: exam results, employer billing, participant identity. Exam results and certifications are personal records; only cohort logistics and materials are modeled. Technical basis verified on Laravel: a role-to-document access model with negative tests (401 without identity, 403 for the wrong role) and a private-bucket round-trip for the allowed role (private=ok).

#### Representative Queries
- Professional training: member portal using Laravel
- Where can I host Professional training: Member portal built with Laravel?
- I need a genuinely specialized member portal workflow covering course cohorts, enrollment events and learning-resource access.

#### Resource Requirements
- `primitive:compute`
- `primitive:postgres`
- `primitive:s3-compatible-object-storage`

#### Infrastructure Requirements
1. **Compute**  
   Status: verified  
   Summary: Apps run in isolated x86_64 Firecracker microVMs that auto-pause when idle and wake on request; sizes are the priced VM sizes.  
2. **Postgres**  
   Status: verified  
   Summary: Managed PostgreSQL 16 runs in its own microVM and is auto-provisioned when an app needs a database and no DATABASE_URL is supplied.  
3. **S3-compatible object storage**  
   Status: verified  
   Summary: Buckets are S3-compatible with issued credentials; PutObject and GetObject are verified by canary. Other S3 operations are not verified.

#### Workflow Steps
1. Model the professional training domain  
   Create the tables course_groups, memberships, sessions, materials, document_access. Certification cohorts live in course_groups; keep the sensitive classes (exam results, employer billing, participant identity) out of this schema.
2. Model groups, memberships and roles
3. Authorize access to materials by membership and role (401, 403 negative tests)
4. Store materials in the private bucket and stream them through the app
5. Deploy and verify the negative tests and an authorized download
6. Run the synchronous deploy once and read the result. Re-running with no change is a no-op.
   Command: `ample deploy . --name --public --env S3_ENDPOINT=... --env S3_REGION=... --env S3_BUCKET=... --env S3_ACCESS_KEY_ID=... --env S3_SECRET_ACCESS_KEY=...`
7. Verify  
   Run the pattern self-test(s) from the example (/p/private-document-library) and your own acceptance checks for the professional training workflow.
   Command: `ample logs --kind build`

#### Examples
- **Laravel pattern fixture**  
  Verified private document library basis for this blueprint. 
  Source: `tests/deploy-canaries/laravel-patterns`

#### Success Checks
1. App responds on its public URL  
   Expect: `ample canary laravel patterns`  
2. Private-document-library self-test from the example  
   Expect: see the pattern fixture checks.

### Limitations
- The technical basis (private document library on Laravel) was verified with the pattern fixture; the professional training schema and workflow are an original design for this blueprint and were not executed as a separate application.
- No health, financial, privacy or other compliance claim is made. Exam results and certifications are personal records; only cohort logistics and materials are modeled.
- Public content and synthetic examples only until actual data-handling requirements have been reviewed.
- Verified on the php-8.5 template at s-1vcpu-1gb; region, request-duration limits and other sizes are unknown or unverified.
- Managed PostgreSQL 16 only; extensions, connection limits and backup or restore procedures are not verified.
- PutObject and GetObject with path-style addressing are verified; other S3 operations and CDN cache rules are not.

### Cost Estimate
- **Currency**: USD  
- **Monthly Amount**: 10.0  
- **Authoritative**: true  
- **Basis**: size prices from pricing.toml (loaded by the API) at build revision 1ac5595375130d45290090e82ed0f554ccd45405-dirty
- **Components**:  
  - App server, size: s-1vcpu-1gb, quantity: 1.0, monthlyAmount: 5.0  
  - Managed PostgreSQL database, size: s-1vcpu-1gb, quantity: 1.0, monthlyAmount: 5.0  
- **Note**: Always-on monthly price of the tested sizes; apps and databases auto-pause when idle. Buckets are allocation-priced per quota and not included.

### Evidence Summary
- **Kind**: canary_run  
- **Summary**: Laravel pattern fixture deployed on Ample (composer install --no-dev from composer.lock, then FrankenPHP serving public/ (php-server with the index.php fallback) reading PORT on the php-8.5 template); the private document library checks passed: a role-to-document access model with negative tests (401 without identity, 403 for the wrong role) and a private-bucket round-trip for the allowed role (private=ok). The blueprint's Professional training schema and workflow below build on that verified basis and were not separately executed.  
- **Observed At**: 2026-09-20T20:36:21Z  
- **Implementation Revision**: 118ad1c6d7d23d4c2ce069254bab9ec9d37cd57b-dirty (CLI 118ad1c)  
- **Expires At**: 2027-03-19T20:36:21Z  
- **Scope**:  
  - checks: `/p/private-document-library`  
  - pattern: `pattern:private-document-library`  
  - template: `php-8.5`

### Next Actions
- **Action**: Browse the catalog index  
  - Method: GET  
  - Relative Path: /v1/catalog

- **Action**: Search published recipes by intent, stack and constraints  
  - Method: POST  
  - Relative Path: /v1/catalog/search

- **Action**: Prepare a side-effect-free deployment plan for an authorized project  
  - Method: POST  
  - Relative Path: /v1/catalog/plan

- **Action**: Read the existing agent authentication setup  
  - Method: GET  
  - Relative Path: /mcp/setup

- **Action**: Browse Professional training  
  - Method: GET  
  - Relative Path: /v1/catalog/nodes/industry%3Aprofessional-training

- **Action**: Browse Member portal  
  - Method: GET  
  - Relative Path: /v1/catalog/nodes/workload%3Amember-portal

- **Action**: Browse Laravel  
  - Method: GET  
  - Relative Path: /v1/catalog/nodes/stack%3Aframework-laravel

- **Action**: Browse Deploy web app  
  - Method: GET  
  - Relative Path: /v1/catalog/nodes/intent%3Adeploy-web-app