Kids love it. Teachers run it. Glowing fleets, snap-code, AI-assisted claims on vanilla boards, then lock the company so even AI fails. 7 labs. Free gift: 1 board per student for each lab. One day each.
Boards stay vanilla WLED through labs 01-06 so the take is real. Crypto Ops is last.
The blast: play → code → AI owns the room → build → threat → economics → crypto last (AI fails). Vanilla until then.
01
K-5
Light Explorers Lab
Control glowing fleets in real-time. Sync patterns across your team's boards, invent formations, race. No manual controls - you're directing a swarm. Instant feedback: tap → lights answer. That's the whole loop.
Under the game: every board is a node on the same network. Patterns sync across tables because they're sharing the same Wi-Fi. Color = data. Formation = group behavior. When your team mirrors another's pattern, you're doing real peer coordination - the same way Discord servers talk to each other. This is the intuition that underlies all network thinking: signals travel from here to there, and things react together.
They learn
real-time swarm control · formation racing
color and pattern as shared data
nodes communicating without a central server
1 free board per student · 1 day
02
6-8
First Code Lab
Snap blocks - color, chase, speed, react. No blank editor. The "program" isn't a grade on a screen; it's photons on a strip they already trust from Explorers. Wrong stack? Wrong light. Debug with eyes.
This is where code gets real. Loops make a chase that never stops until you change it. Variables let you tweak speed, direction, trail length - that's how real effects work too. Event-driven thinking: something happens → the device answers. You're not memorizing syntax, you're learning that firmware runs a pipeline of instructions on hardware - the same idea as open WLED effects, just with training wheels off.
They learn
loops, variables, timing - by watching LEDs respond in real time
event → response (tap / sensor → flash)
debug by comparing intent vs what the strip shows
power intuition: full white is expensive electricity
1 free board per student · 1 day
03
9-10
Network Lab
Ask AI how to claim every board on the classroom Wi-Fi - then do it. Name yours. Take a classmate's show. Put a calling card in their pattern. Trivial on vanilla WLED: open UI, same LAN, AI writes the steps. Diagram what just happened: phone → AP → board. Unplug the internet - you can still own the room. That's the lesson.
Galaxy makes the path honest. Most "smart" devices hide the attack surface behind a company cloud - you never see how easy it is. Here the path is just your classroom. AI assistance kills the skill gap - you don't need special tools, just a prompt and a network. Direct is fast. Relay exists when firewalls block. Offline doesn't save you if the attacker is on your AP. You write: what made the claim so easy, and what would have to change for AI to fail.
They learn
AI-assisted claim: find → name → take a peer's board (trivial on vanilla)
LAN discovery · open UI · same AP = shared attack surface
latency & path: local smash vs cloud round-trip
internet down ≠ safe - local attackers still win
1 free board per student · 1 day · see also Galaxy
04
9-11
IoT Lab
Open the box. Power, strips, pins, connectors on the education board. Load the code you wrote in First Code onto hardware you can point at. Graduates don't say "the Wi-Fi broke" - they can point at the wire.
Software lies if the physics is wrong. Full white across many LEDs pulls current; brownouts look like bugs. A loose joint flickers like a haunted effect. The board is the brain, the strip is the body, the phone is just a remote. You learn the full stack from the bottom: electricity → MCU → firmware → network → app. Firmware stays vanilla WLED here - open, claimable - so Threat Lab later isn't fake. The attack surface sits on real pins and real power.
They learn
safe wiring · power budget · why max white overheats / browns out
MCU as brain · strip as actuators · app as remote
troubleshoot layer by layer (power → data → Wi-Fi → app)
open firmware mindset: the code on the chip is inspectable
1 free board per student · 1 day
05
11-12
Threat Lab
Rules of engagement first: classroom only, no outside networks, write everything down. Network Lab already proved AI + vanilla = trivial take. Now go further: red-team peer projects, map the full attack surface, spoof identity, leave a calling card, brief findings like a short SOC note.
Boards stay vanilla WLED until Crypto Ops - on purpose. Network Lab was the shock (that was easy). Threat Lab is the discipline: assets, actors, entry points, impact - on real open firmware. Defense by attacking safely. The lock still waits until after Economics.
They learn
vanilla WLED = open by default · easy classroom claim
rules of engagement + write-it-down incident response
why a password sticker still isn't ownership
1 free board per student · 1 day · see also Security / Threats
06
11-12
Internet Economics Lab
"Johnny took my company." Seminar-style while boards are still vanilla and claimable. Breach and IP-theft cases. Map who lost money. Argue who owned what. Write a board memo. Security isn't a vibe - it's whether you still have a company on Monday.
Threat Lab showed how control is lost on open IoT. Economics prices it before they lock anything: stolen IP, drained customer lists, counterfeit gear, accounts that were only a database row. If ownership is someone else's spreadsheet, Johnny can take the company. The next lab is the fix - on purpose last, so the cost lands first.
They learn
IP theft · data breach · who bears the cost
ownership as economic fact (database row vs device proof)
postmortems as board memos - write for decision-makers
why locking the fleet waits until after you've felt the loss
1 free board per student · 1 day · still vanilla WLED
07
last
Crypto Ops Lab
Last lab. Network Lab proved AI + vanilla WLED = trivial take. Now lock the company. Ownership proofs, keys, signatures. Same AI, same classmates, same prompts - even AI cannot hack their company once the board only answers to math it can verify.
Identity lives on the device (private key never leaves). Public key is the name tag. Signatures prove command / firmware / pack. The AI that walked them through claiming open boards now fails: no proof, no control. Nexus's promise - your data stays yours - becomes the punchline after years of open fleets. Graduation: played, built, claimed with AI, priced the damage, then locked so Johnny's chatbot can't walk in.
They learn
same AI that owned vanilla - now fails against ownership proofs
public / private keys · what verify() actually promises
signed firmware / packs - reject the unsigned
"even AI cannot hack their company" - math over prompts
1 free board per student · 1 day · see also Nexus / Security