GROUND
Problem
What becomes confusing, fragile, or impossible without understanding cookies? This lesson answers that through explanation, a worked example, two runnable exercises, and a reference solution. No teacher-supplied worksheet is required.
HTTP and hypertext scale by exchanging representations through standardized methods, status codes, headers, links, and forms.
LEARN
Concept explanation
Cookies belongs to “Caching, identity, and trust”. cookies is learned by comparing readable, constrained, and deliberately clever implementations against same evidence.
For cookies, trace concrete input, state transition, output, and failure through a request/response contract whose method, status, headers, representation, and next actions are observable.
A client sends a request; a server returns a representation plus metadata. Hypermedia controls advertise valid next actions. Apply that model to supplied normal, boundary, and failure cases; each case below names its input and expected evidence.
Evidence produced by the cookies experiment: output, state, trace, bytes, timing, or diagnostics.
Condition that must remain true while inputs or implementation of cookies change.
Point where cookies crosses ownership, representation, time, process, network, or trust.
Example bank
Compare normal, boundary, failure, and cross-layer cases. Predict each observation before revealing the explanation.
SETUPSolve cookies three ways using identical fixture: Record ETag or Last-Modified, then make a conditional request.
OBSERVEAll versions preserve Valid conditional request returns 304 or equivalent avoided body; incorrect validator demonstrates stale reuse.; comparison records code size, predictability, and debugging cost.
WHY IT MATTERSThis isolates the normal contract of cookies; preserve its raw evidence as the control for every later comparison.
SETUPRun all three implementations against: Compare fresh, stale, and no-store directives in a tiny local response fixture.
OBSERVERecord what remains invariant and the first representation, owner, size, or timing value that changes in curl · Chromium Network · server logs.
WHY IT MATTERSA boundary example is useful only when one named dimension changes and everything else stays comparable.
SETUPForce every implementation through: Change representation without changing validator and document stale-result bug.
OBSERVECapture the first divergence from the baseline, including exact input, diagnostic, state, and recovery result. Expected recovery: All versions preserve Valid conditional request returns 304 or equivalent avoided body; incorrect validator demonstrates stale reuse.; comparison records code size, predictability, and debugging cost.
WHY IT MATTERSThe diagnostic is part of the interface. Repair the proven cause, not the most visible symptom.
SETUPTrace cookies one layer below its usual abstraction through a request/response contract whose method, status, headers, representation, and next actions are observable.
OBSERVECompare curl -v output, request method, status, cache metadata, redirects, and representation bytes.
WHY IT MATTERSThe lower layer is earned when it explains evidence the current layer cannot. Otherwise keep cookies at the simpler boundary.
SEE
Worked example
Start from supplied lab.sh. Focus: Solve cookies three ways using identical fixture: Record ETag or Last-Modified, then make a conditional request.
- Run: chmod +x lab.sh && ./lab.sh
- Save baseline evidence. Compare curl -v output, request method, status, cache metadata, redirects, and representation bytes.
- Boundary case: Run all three implementations against: Compare fresh, stale, and no-store directives in a tiny local response fixture.
- Failure case: Force every implementation through: Change representation without changing validator and document stale-result bug.
RESULT
All versions preserve Valid conditional request returns 304 or equivalent avoided body; incorrect validator demonstrates stale reuse.; comparison records code size, predictability, and debugging cost. Starter-level baseline: headers.txt begins with an HTTP status line; body.txt contains the representation; byte count is greater than zero.
START HERE
Starter material
PREREQUISITEScurl plus a POSIX shell. Baseline uses public example.com and needs no account or API key.
ONE-TIME SETUPmkdir reforging-http && cd reforging-http
Create lab.sh, paste this exact content, then run the command below.
#!/usr/bin/env sh
set -eu
url="${1:-https://example.com/}"
printf '%s\n' '# cookies'
curl -sS -D headers.txt -o body.txt "$url"
sed -n '1,12p' headers.txt
printf 'body bytes: ' && wc -c < body.txtchmod +x lab.sh && ./lab.shSTOP / CLEANUPNo background process. Remove headers.txt and body.txt only after saving evidence.
DO WITH GUIDANCE
Guided exercise
Solve under constraint: cookies
- Normal case: Solve cookies three ways using identical fixture: Record ETag or Last-Modified, then make a conditional request.
- Write predicted evidence from this named case before running starter.
- Keep readable baseline, then remove one convenience without hiding behavior.
- Run exact normal case. Save commands, inputs, outputs, and diagnostics in notebook.
- Explain changed evidence using lesson mental model in no more than five sentences.
Concrete guided solution
- Copy the supplied lab.sh unchanged and run: chmod +x lab.sh && ./lab.sh
- Write this prediction before inspecting output: All versions preserve Valid conditional request returns 304 or equivalent avoided body; incorrect validator demonstrates stale reuse.; comparison records code size, predictability, and debugging cost.
- Perform only the named normal case: Solve cookies three ways using identical fixture: Record ETag or Last-Modified, then make a conditional request.
- Save the raw output, then annotate input → transition → evidence. Use curl · Chromium Network · server logs to confirm the transition rather than inferring it.
- Compare prediction with evidence; if they differ, keep both and write the rule that explains the difference. Reference baseline: headers.txt begins with an HTTP status line; body.txt contains the representation; byte count is greater than zero.
DO ALONE
Independent exercise
Compare three versions: cookies
- Create second case from blank file: Run all three implementations against: Compare fresh, stale, and no-store directives in a tiny local response fixture.
- Then create controlled failure: Force every implementation through: Change representation without changing validator and document stale-result bug.
- Use curl · Chromium Network · server logs to prove behavior, then repair controlled failure.
- Compare result against supplied acceptance checks and reference approach before marking complete.
Concrete independent solution
- Duplicate the starter into a clean comparison case; change only this boundary: Run all three implementations against: Compare fresh, stale, and no-store directives in a tiny local response fixture.
- Save its evidence beside the baseline and identify the first changed value. Compare curl -v output, request method, status, cache metadata, redirects, and representation bytes.
- Create the exact controlled failure: Force every implementation through: Change representation without changing validator and document stale-result bug.
- Version A: use clearest native primitives and name every intermediate state for cookies.
- Version B: remove one convenience while preserving same input/output contract.
- Version C: compress only after A and B pass baseline: Record ETag or Last-Modified, then make a conditional request.
- Run shared boundary and failure fixtures against all versions: Compare fresh, stale, and no-store directives in a tiny local response fixture. / Change representation without changing validator and document stale-result bug.
- Keep A unless another version has measured benefit; expected invariant: Valid conditional request returns 304 or equivalent avoided body; incorrect validator demonstrates stale reuse.
- Rerun baseline, boundary, and repaired failure together. Accept only if all reproduce: All versions preserve Valid conditional request returns 304 or equivalent avoided body; incorrect validator demonstrates stale reuse.; comparison records code size, predictability, and debugging cost.
COMPARE
Expected result
- All versions preserve Valid conditional request returns 304 or equivalent avoided body; incorrect validator demonstrates stale reuse.; comparison records code size, predictability, and debugging cost.
- headers.txt begins with an HTTP status line; body.txt contains the representation; byte count is greater than zero.
- Controlled cookies failure produces captured evidence; repair restores stated invariant without hiding error.
PROVE
Acceptance checks
Lesson is complete only when every check is true. Each check is stored locally and travels with your JSON backup.
0/5 complete · saved on this device
UNSTICK
Hints
Reveal hints
- Start with supplied normal case exactly as written: Solve cookies three ways using identical fixture: Record ETag or Last-Modified, then make a conditional request.
- For boundary case, change only named dimension: Run all three implementations against: Compare fresh, stale, and no-store directives in a tiny local response fixture.
- If result is confusing, diff raw inputs and evidence before editing implementation.
- If tool shows nothing useful, move observation one boundary lower: representation, runtime, OS, or network.
VERIFY
Solution
Attempt both exercises before opening reference approach.
Reveal reference solution
- Run unmodified starter and preserve baseline evidence: headers.txt begins with an HTTP status line; body.txt contains the representation; byte count is greater than zero.
- Version A: use clearest native primitives and name every intermediate state for cookies.
- Version B: remove one convenience while preserving same input/output contract.
- Version C: compress only after A and B pass baseline: Record ETag or Last-Modified, then make a conditional request.
- Run shared boundary and failure fixtures against all versions: Compare fresh, stale, and no-store directives in a tiny local response fixture. / Change representation without changing validator and document stale-result bug.
- Keep A unless another version has measured benefit; expected invariant: Valid conditional request returns 304 or equivalent avoided body; incorrect validator demonstrates stale reuse.
PREDICT · INSPECT · BREAK · DEBUG · MEASURE
Interrogate reality
Prediction: write expected output, state transition, ordering, and failure evidence before running either exercise.
Inspection: Use curl verbose mode and Chromium Network to trace methods, redirects, caching, cookies, payloads, initiators, and timing.
Measurement: Count requests, bytes, round trips, cache hits, server time, and client synchronization code.
Capture raw evidence before explaining.
Change one assumption and force controlled failure.
Find cause with curl · Chromium Network · server logs before editing fix.
MASTERY + FRONTIER + BOUNDARY
Own the knowledge
Explain cookies at beginner, intermediate, and senior depth.
Recreate smallest useful example from blank file without notes or AI.
Schedule recall for day 1, 7, 30, and 90.
Creative frontier lab
Try first without opening the solutions. The constraints invite invention; the reference gives one concrete direction, never the only valid answer.
Re-solve cookies by removing the most convenient abstraction. complete the workflow using links, forms, redirects, and status codes with JavaScript disabled.
CONSTRAINTKeep the same inputs, observable result, and failure evidence; change the means, not the contract.
ORIGINAL IDEATurn subtraction into a design tool: the missing abstraction should reveal which responsibility it used to hide.
Reveal frontier solution
- Freeze the contract as three fixtures: Solve cookies three ways using identical fixture: Record ETag or Last-Modified, then make a conditional request. / Run all three implementations against: Compare fresh, stale, and no-store directives in a tiny local response fixture. / Force every implementation through: Change representation without changing validator and document stale-result bug.
- List every convenience used by the starter; remove the highest-level one while preserving chmod +x lab.sh && ./lab.sh.
- Implement the smallest replacement using complete the workflow using links, forms, redirects, and status codes with JavaScript disabled.
- Run all fixtures and compare raw evidence. Keep the simpler version unless the removed abstraction has a demonstrated benefit.
Build an explanation artifact for cookies: save a complete request/response transcript that another person can replay.
CONSTRAINTA peer must be able to locate the first divergence without reading implementation code.
ORIGINAL IDEATreat the explanation itself as a product: make invisible transitions visible, replayable, and diffable.
Reveal frontier solution
- Create one row or timestamped event for each transition in: Solve cookies three ways using identical fixture: Record ETag or Last-Modified, then make a conditional request.
- For every row record input, representation, owner, operation, output, and tool evidence from curl · Chromium Network · server logs.
- Replay Run all three implementations against: Compare fresh, stale, and no-store directives in a tiny local response fixture.; highlight only changed rows.
- Replay Force every implementation through: Change representation without changing validator and document stale-result bug.; stop at the first divergent row and attach its recovery action.
Combine the boundary and failure into a new user-visible scenario for cookies. make every failure response advertise a valid recovery action.
CONSTRAINTDo not merely add more input. Invent a recovery interaction, alternate representation, or self-checking behavior.
ORIGINAL IDEAMake the system teach its own limits: the artifact should expose the invariant and offer a safe next action when it breaks.
Reveal frontier solution
- Combine these two pressures without changing them: Run all three implementations against: Compare fresh, stale, and no-store directives in a tiny local response fixture. AND Force every implementation through: Change representation without changing validator and document stale-result bug.
- Name the invariant that must survive and the user-visible evidence when it cannot: All versions preserve Valid conditional request returns 304 or equivalent avoided body; incorrect validator demonstrates stale reuse.; comparison records code size, predictability, and debugging cost.
- Implement this original direction: make every failure response advertise a valid recovery action.
- Demonstrate baseline, combined failure, recovery, then baseline again; save the sequence as a regression fixture.
Capability frontier
Push cookies until another layer becomes justified. Record one robust technique, one contextual trade-off, and one labeled hack or historical curiosity.
CORE · PRACTICAL · CONTEXTUAL · HACK · FRAGILE · HISTORICAL · GOLF
Boundary
Hypermedia becomes strained when interactions require high-frequency local manipulation or long-lived peer state.
If this vanished tomorrow…
Use URLs, links, forms, server-rendered documents, status codes, and explicit refresh.
Why next layer is earned
HTML is earned when the representation must become a navigable, semantic document.