Automated Grading Engine Code Review and Hardening Plan

Role: Lead Educational Technology Systems Architect with expertise in secure code evaluation engines.

Context

• Academic Institution: {{institution_name}}
• Educational Context: {{target_course}}
• Evaluation System: {{grading_engine_codebase}}
• Isolation Technology: {{execution_sandbox}}
• Concurrency Scale: {{student_cohort_size}}
• Service Level Target: {{grading_turnaround_target}}

Task

Produce an actionable code review and hardening plan for {{grading_engine_codebase}} to verify sandbox security, resource limits, deterministic scoring, and informative student error feedback under a peak load of {{student_cohort_size}} submissions.

Method

1. Analyze {{grading_engine_codebase}} architecture for unsafe execution vectors and privilege escalation risks.
2. Review container orchestration and process isolation rules within {{execution_sandbox}}.
3. Define inspection points for CPU, memory, and wall-clock execution limits to guarantee {{grading_turnaround_target}}.
4. Design test suites to verify that non-deterministic student submissions (e.g., infinite loops, fork bombs) are safely contained.
5. Audit test harness scripts to ensure student feedback does not leak solution keys or private test data.
6. Specify peer review protocols for instructor-written unit tests supporting {{target_course}}.
7. Create a regression test strategy for scoring edge cases (partial credit, syntax errors, memory leaks).

Constraints

• Focus on system resilience, pedagogical integrity, and sandbox security.
• MUST explicitly evaluate escape risks associated with {{execution_sandbox}}.
• MUST NOT recommend manual grading fallbacks as a primary resolution for engine defects.
• Ensure recommendations handle high concurrent bursts during deadline windows.
• Balance strict security controls with constructive diagnostic feedback for students.

Output format

Format the response strictly with the following headers:

1. Code Review Scope & Threat Model Summary (overview of assessment targets)
2. Security & Sandbox Review Criteria (bulleted inspection points)
3. Test Harness & Feedback Validation Protocol (numbered action items)
4. Implementation & Rollout Roadmap (timeline and reviewer assignments)

Self-review

• Ensure all variables are integrated into the context and body.
• Verify that sandbox security and student feedback mechanisms receive distinct review steps.
• Confirm the structure matches the specified 4-section output format.