manual
Everything you need to know about Latent Patterns.
why latent patterns
Latent Patterns is an educational platform for developers learning AI concepts. It combines concise written technical guides with screencasts, presented in a focused monospace aesthetic designed to stay out of your way. No fluff, no filler — just the concepts you need, explained clearly.
getting started
- Sign in — go to /auth/login and choose either:
- a magic link sent to your email, or
- an available OAuth provider (for example Google, Microsoft, Okta, LinkedIn, or GitHub when configured).
- If you choose magic link — check your inbox and click the login link. Magic links expire after 15 minutes.
- Choose your access path:
- individual subscription for personal access, or
- enterprise plans for team/domain-wide access.
authentication and sessions
Latent Patterns is passwordless. Magic-link sessions are stored in secure httpOnly cookies and last for 30 days by default.
If you open invite links (team invites or onboarding invites) while logged out, you'll be sent to /auth/login first and then returned to your invite flow automatically.
Social OAuth login is customer-scoped under the hood. Generic sign-in from /auth/login uses the default platform customer context.
Invite and tenant-aware flows can resolve to a customer-specific OAuth context automatically without
requiring you to manually enter tenant identifiers.
Enterprise admins can also share a dedicated tenant entrypoint: /enterprise/login/<customerId>. This opens customer-scoped social login
directly and is useful for internal onboarding docs or IT runbooks.
courses
Content is organised into courses, each broken into sections containing individual lessons. Browse all courses from the homepage.
Lessons come in three formats:
- Written guides — technical explanations with code examples
- Screencasts — video walkthroughs you can watch at your own pace
- Mixed — a screencast accompanied by a written guide
Your progress is tracked per lesson. Mark lessons as completed to keep track of where you are in a course.
certifications
Some courses offer a proficiency certification upon completion. Certifications are industry-verifiable credentials you can share on your CV, LinkedIn, or personal website.
earning a certification
- Complete all lessons in a certifiable course.
- Pass all exit tickets (learning assessments) in the course.
- Go to /certifications and claim your certification.
- Choose a display name for your certificate (optional) and whether to show your email on the public verification page.
certification IDs
Each certification has a unique ID in the format LP-XXXXXX (for example, LP-A3F7C2). This ID appears on your badge and can be used by anyone to
verify your certification.
verification
Anyone can verify a certification at /verify — no account required. Enter a certification ID to see its status, the course completed, and the holder's name (if provided). Verification is always public and free.
badges
Each certification includes an embeddable badge — an SVG image you can add to your website, GitHub README, or CV. The badge contains a verification URL that links directly to your public verification page. Badge status updates automatically (valid → expired) without any action from you.
From /certifications, use [download badge] to save the image, or [copy embed] to get an HTML or Markdown snippet.
six-month validity
Certifications are valid for 6 months. AI engineering best practices evolve rapidly — models, tooling, and techniques that are current today may be outdated in months. A six-month window ensures your credential reflects up-to-date knowledge.
Renewal is lightweight: your lesson progress stays, and you only need to re-pass the exit tickets to demonstrate you're current. Renew from /certifications when your certification approaches expiration.
portability
Certifications belong to you, not to your employer or your account. If you change jobs, your certifications come with you.
To enable portability, add a personal email to your account (prompted when you claim a certification, or anytime from /account). Once verified, any account — at any employer — that verifies the same personal email will automatically see your certifications. Nothing is transferred; your certifications are simply linked to your identity.
This means:
- Individual subscribers who join an enterprise plan keep their certs.
- Enterprise members who move to a new company keep their certs.
- If you lose access to a work account, your certs are safe — they're associated with your personal email, not your work email.
- If you later sign up with the same personal email as your login, your certifications appear automatically — no extra steps needed.
downloadable courseware
Some courses include downloadable pre-completed courseware. These downloads are complete reference implementations you can run locally instead of building incrementally during the lesson.
Downloads are available to active subscribers only. To start a download, use the course page link under download courseware. Download links are short-lived and single-use.
enterprise plans (billing + seats)
Enterprise billing starts at /enterprise/plans. Two plan types are available:
- per-seat — seats are purchased in blocks of 10. You can buy 1–100 units (10–1,000 seats). Self-serve checkout with instant access.
- unlimited — unlimited seats for your entire domain at custom pricing. Fill out the sales inquiry form (name, company, and estimated team size are required) and the team will respond within one business day. Includes onboarding support and invoicing.
Enterprise plans are linked to your business email domain. Personal mailbox providers (Gmail, Outlook, Hotmail, Yahoo, iCloud, ProtonMail, and similar) are not eligible for enterprise checkout — you must use a company or organizational email address.
Only one active enterprise plan can exist per domain. If your domain already has an active plan, the purchaser will see an error and should contact the existing enterprise admin instead.
After purchase, the purchaser becomes the enterprise admin and can manage members, seat allocation, and billing at /enterprise/manage. Enterprise admins can also designate billing administrators — users who can manage billing (payment methods, subscription, seat counts) without consuming a seat or having access to subscriber content.
managing an enterprise plan
The enterprise management page at /enterprise/manage is available to enterprise admins only. It provides:
- plan details — domain, plan type (per-seat or unlimited), status, seat usage (e.g. "5 / 30"), and current billing period end date.
- member table — all enrolled members with email, role, enrollment method, and join date. Admins can remove members (the last admin cannot be removed).
- invite members — send email invites to colleagues. Invites require available seats — if your plan is full, increase your seat count first.
- billing administrators — add or remove billing administrators by email. Billing admins can manage payment methods and subscription settings but cannot access course content and do not consume seats.
- adjust seats (per-seat plans only) — change seat count in units of 10. You cannot reduce seats below your current member count — remove members first if needed.
- billing — jump to /enterprise/billing for payment method updates, seat adjustments, and subscription cancellation.
enterprise teams (identity + provisioning)
Separate from billing, Latent Patterns has a team identity model managed at /enterprise. Teams are domain-based and handle member provisioning, role management, and SCIM integration. A domain can have both a billing plan and a team simultaneously (a "hybrid" configuration).
Creating a team: Sign in with your company email and visit /enterprise. If no team exists for your domain, click "create team" — you become team admin automatically. If a team already exists, you join as a member instead. Personal email domains (Gmail, Outlook, etc.) cannot create teams. Each user can belong to only one team.
OAuth auto-create: When signing in via Google, Okta, or Microsoft from a new eligible domain, team ownership is initialized automatically — no manual creation step required.
Team admins can:
- view all team members with email, role, and how they joined
- toggle member roles between admin and member
- remove members (with confirmation)
- invite new members by email (when SCIM is not active)
- configure SCIM providers and rotate SCIM bearer tokens
If your domain already has a team and you're not a member, ask an existing team admin for an invite. Duplicate teams for the same domain are intentionally blocked.
scim provisioning
SCIM provisioning is configured per provider from the /enterprise page. Supported providers are Google, Okta, and Microsoft Entra. Each provider is configured independently.
When you enable a provider for the first time, the system generates a unique SCIM endpoint
URL and a bearer token. The token is displayed once — copy it immediately for your identity
provider configuration. The endpoint follows the pattern /api/scim/<provider>/<tenantKey>/Users.
Token rotation: If a token is compromised or needs to be refreshed, use the "rotate token" action (requires confirmation). The previous token is immediately invalidated and a new one is displayed.
Disabling a provider: Disabling SCIM for a provider hides its endpoint and token. Re-enabling generates fresh credentials — the previous ones will not work.
When any SCIM provider is active for your team, manual team invites are disabled to avoid conflicting membership sources. Use your identity provider to manage team membership instead.
invites and onboarding links
Latent Patterns uses three invite flows for enterprise onboarding:
- plan invite —
/enterprise/invite?token=...— sent by an enterprise admin to add a member to a paid enterprise plan. Expires after 7 days. After acceptance you are redirected to /courses to start learning. - team invite —
/enterprise/team-invite?token=...— sent by a team admin to add a member to the domain team. Expires after 7 days. After acceptance you are redirected to /enterprise to see your team. - onboarding invite —
/enterprise/onboarding-invite?token=...— created by a site admin for new enterprise prospects. Expires after 14 days (longer window for enterprise onboarding). After acceptance you are redirected to /enterprise with a welcome message.
All invite links require authentication. If you click an invite link while logged out, you will be redirected to /auth/login first and automatically returned to the invite after signing in.
Each invite link is single-use. If a link is expired or already used, request a fresh invite from your admin.
interactive terminals
Some content pages include embedded interactive terminal sessions powered by Daytona sandboxes. These give you a real Linux terminal in your browser with full shell access.
You have 10 minutes with a live terminal. Try these:
$ uname -a && whoami $ ls -la / $ echo '#!/bin/sh
echo Hello from Latent Patterns!' > /tmp/hello.sh && sh /tmp/hello.sh how terminal sessions work
- Click "Start Terminal" to provision a sandbox. This takes a few seconds.
- Each session has a configurable time limit (typically 10 minutes), shown as a countdown timer.
- When 30 seconds remain, a [+10 min] button appears to extend your session.
- You can extend as many times as you want — there is no limit on extensions.
- Click [⛶] to go fullscreen. Press Escape to exit fullscreen.
persistent workspaces
Your workspace (all files and changes) is saved for 7 days after your last session. When you return to the same terminal embed, your workspace is restored automatically — you pick up where you left off.
session recordings
Every terminal session is recorded. After your session ends, click [share recording] to get a link you can share with others. Recipients can watch a replay of your terminal session without needing an account. Recording links expire after 24 hours.
access levels
Terminal access depends on the content page. Some terminals require an active subscription, while others are available to any signed-in user. You must be authenticated to use any terminal — anonymous access is not available.
LLM usage and budgets
Terminal sessions include AI assistance (powered by Anthropic). Individual subscribers have a $1/day budget per terminal using the Haiku model. Enterprise teams with a BYOK (Bring Your Own Key) API key get access to all models with no daily limit — see the enterprise section below for setup.
enterprise API keys (BYOK)
Enterprise admins can configure Bring Your Own Key (BYOK) API keys for Anthropic and OpenAI. When a BYOK key is active, enterprise members get:
- access to all models for the configured provider (not just Haiku)
- no daily budget limit (usage is billed to the enterprise's own API account)
- usage is tracked for visibility but never capped
- OpenAI access is BYOK-only — it requires an enterprise OpenAI key (not available to individual subscribers)
To manage your enterprise API key:
- Go to /enterprise/settings/api-keys
- Add an Anthropic key (starts with
sk-ant-) for Claude models - Add an OpenAI key (starts with
sk-) for GPT models - Keys are encrypted at rest and never exposed to users or browsers
- To rotate or disable, revoke the existing key and add a new one
Without a BYOK key, enterprise members use the platform defaults (Haiku model, $1/day budget) — the same as individual subscribers.
Revoked or rotated BYOK keys take effect quickly. In normal operation, terminal worker cache invalidation applies changes within seconds; fallback cache TTL ensures stale key usage remains bounded to a short window.
service health and status
Public uptime and incident updates are available at status.latentpatterns.com. Internal health checks include database, email, worker readiness (AI Grader, AI Chat, Playground, Terminal), and secret platform readiness signals for managed customer-secret infrastructure.
The public health endpoint is /health. It returns an aggregate status with ok, degraded, or error and includes:
databaseandemailreadinessworkersreadiness for AI Grader, AI Chat, Playground, and Terminalproviders.platformreadiness for baseline social login providerssecretPlatformreadiness summary for OAuth/BYOK/SCIM secret domainschecks[]warning/error entries with machine-readable codes
Health responses are intentionally non-sensitive: they expose status labels only, never secret values, secret paths, or provider credentials.
enterprise SIEM integration
Enterprise admins can configure a SIEM (Security Information and Event Management) endpoint to receive real-time audit events for their organization. All authentication, content access, progress, and enterprise management events for members of your enterprise are forwarded to your SIEM.
Tenant isolation: Only events that belong to your enterprise are forwarded to your endpoint. Events from other enterprises or non-enterprise users are never included. This isolation is enforced at the application layer with defense-in-depth verification.
To configure SIEM integration:
- Go to /enterprise/settings/siem
- Enter your SIEM endpoint URL (must be HTTPS)
- Configure the authentication header name and value (supports Splunk HEC, Datadog, Microsoft Sentinel, and custom webhook endpoints)
- Use [test connection] to verify your endpoint receives events
- Enable forwarding when ready
Events are delivered as JSON via HTTP POST. Each event includes:
- event type (e.g.
auth.magic_link_verified,enterprise.member_removed) - timestamp (ISO 8601)
- actor user ID and IP address
- enterprise plan ID and domain
- event-specific detail payload
SIEM forwarding is supplementary — all events are always recorded in the Latent Patterns internal audit log regardless of SIEM configuration. If your SIEM endpoint is unavailable, events are retained internally and the configuration page shows delivery status.
Authentication credentials are encrypted at rest and never exposed to users or browsers. To rotate credentials, update the auth value on the settings page — the previous value is immediately invalidated.
glossary
The glossary is a standalone reference of AI and machine learning terminology. Each entry is a concise definition you can link to and revisit. Glossary entries are accessible independently of courses.
blog
The blog publishes short technical posts, release updates, implementation details, and architecture decisions that complement the courses. Past posts are archived at /blog. A dedicated RSS feed is available at /blog/rss.xml.
newsletter
The newsletter is a separate publication from the blog. Subscribe with your email at /newsletter or via the signup component found around the site. A confirmation link is sent to your inbox — click it to activate your subscription.
Past newsletter posts are archived at /newsletter. A dedicated RSS feed is available at /newsletter/rss.xml.
You can manage your newsletter subscription from the account page email preferences, or via the unsubscribe link included in every email.
patterns
Patterns is a separate publication focusing on recurring patterns in AI engineering, agents, and practical systems. Past posts are archived at /patterns. A dedicated RSS feed is available at /patterns/rss.xml.
You can manage your patterns subscription from the account page email preferences, or via the unsubscribe link included in every email.
rss
You can subscribe to any of our publications in a feed reader:
- /rss.xml — top-level combined feed
- /blog/rss.xml — blog-only feed
- /newsletter/rss.xml — newsletter-only feed
- /patterns/rss.xml — patterns-only feed
- /feed.xml — legacy alias that redirects to
/rss.xml
email preferences
Latent Patterns sends email across four categories: newsletter, product updates, course activity, and marketing. Each category can be toggled independently.
You can manage your preferences in two ways:
- from your account — the account page includes checkboxes for each email category.
- from any email — every email includes an unsubscribe link that opens a preference editor. No login required.
There is also a one-click "unsubscribe from all" option that disables every category at once.
pricing
Latent Patterns has two commercial paths:
- individual: one subscription for full personal access
- enterprise: domain/team plans via /enterprise/plans
Payments are processed securely by Airwallex.
knuth award checks
Inspired by Donald Knuth's tradition of issuing reward checks for finding errors in his books, Latent Patterns awards digital checks to users who report content errors.
how it works
- While reading a lesson or glossary entry, select the text containing an error.
- Click [report problem] in the popover that appears above your selection.
- Describe the error in the feedback form and click [submit].
- If verified, you'll receive a Knuth check — a digital certificate from the fictional Bank of Kangaroo Island.
check values
Following Knuth's original system:
- $2.56 per error (one hexadecimal dollar) — for technical, typographical, or historical errors
- $0.32 per suggestion — for substantial improvements to clarity or accuracy (1/8 of a hexadecimal dollar)
Values are symbolic — a collectible status item, not real currency. Most Knuth check recipients frame them rather than cash them.
what counts as a reportable error
- Technical errors — incorrect code samples, wrong explanations, factual mistakes
- Typographical errors — typos, formatting issues, broken links
- Historical errors — incorrect attributions, wrong dates
- Suggestions — substantial improvements to clarity or accuracy
check IDs and verification
Each check has a unique ID in the format LP-XXXXXX. Anyone can
verify a check at /knuth — no account required.
sharing
Each check includes a shareable verification page with links to share on X, Bluesky, LinkedIn, and Facebook. You can also embed an SVG check image on your website or CV.
leaderboard
The Knuth checks leaderboard ranks contributors by total value earned. Your checks and total are also displayed on your account page.
referral program
Active individual subscribers can earn 1 free month of subscription time for each friend they refer who subscribes. Enterprise members are not eligible for the referral program.
how it works
- Go to your account page — you'll see a referral program section with your unique referral link.
- Share your link with friends. It looks like
latentpatterns.com/r/XXXXXX— a short, easy-to-share URL. - When someone visits your link and signs up, their account is linked to yours as a pending referral.
- When that person subscribes, your referral is credited — 30 days are added to your current billing period automatically.
referral stats
Your account page shows three referral metrics:
- referred — total people who signed up using your link
- pending — people who signed up but haven't subscribed yet
- credited — total free days earned from successful referrals
There is no limit on the number of people you can refer. Each successful referral adds another 30 days to your subscription.
lapsed subscriptions
If your subscription has lapsed (canceled or past due), your referral code still works. When someone you referred subscribes, your subscription is reactivated with a fresh 30-day period — no payment needed. Additional referrals stack on top, extending your reactivated subscription further.
account
Your account page is your control panel for subscription, enterprise membership, email preferences, and access to related pages.
The account page shows:
- your email address and subscription status
- enterprise context (if applicable) — your domain, plan type (per-seat or unlimited), and your role (admin, member, or billing_admin)
- email preferences — toggle which emails you receive: newsletter, product updates, course activity, and marketing. Each category can be enabled or disabled independently.
From account, quick links take you to:
- /enterprise — enterprise team management
- /support — support tickets
- /account/billing — individual billing management (when you have a subscription)
- /enterprise/manage — enterprise plan admin (when you are an enterprise admin)
- /enterprise/billing — enterprise billing management (when you are an enterprise admin or billing administrator)
billing
The individual billing page is available when you have an active individual subscription. It shows subscription status, billing period end, and whether the subscription is set to cancel at period end. From there you can update your payment method or cancel your subscription.
The enterprise billing page is available to enterprise admins and billing administrators. It shows enterprise plan details (domain, status, seat usage, billing period) and allows:
- update payment method — opens the Airwallex hosted page to update payment details for the enterprise plan.
- adjust seats (per-seat plans) — change seat allocation in units of 10.
- cancel subscription — request cancellation (with a confirmation dialog). All team members retain access until the end of the current billing period.
rate limits
API endpoints, authentication, support, and newsletter routes are rate-limited by IP address using a 1-minute sliding window. Content browsing routes are not rate-limited. Limits are designed to support large concurrent usage — for example, an enterprise classroom with thousands of students accessing the site from a shared network.
If you exceed a rate limit, you'll receive a 429 Too Many Requests response
with a Retry-After header indicating how many seconds to wait before retrying.
support
If you run into a problem or have a question, open a ticket from /support while logged in.
Prefer email? You can also reach us at support@latentpatterns.com.