11 · Teaching kit
A proposed module plan, demo scripts, exercises, the questions you will definitely be asked, and the misconceptions worth pre-empting. Take what's useful; the substance is in §01–§10.
This page is my proposal, not Anthropic documentation. Everything factual it references is cited in the earlier sections. Adapt freely — you know your audience.
Suggested module: 90 minutes
| Min | Segment | Goal | Reference |
|---|---|---|---|
| 0–5 | The frame | "Agentic" means it loops: gather → act → verify. That's the whole idea. Everything else is packaging. | §03 |
| 5–15 | Two products, one engine | Cowork = knowledge work, no terminal. Claude Code = engineering work. Same architecture underneath. | §02 |
| 15–20 | The guessing game | Ask: "Which one runs on your laptop and which runs in the cloud?" Let them get it wrong. Then reveal. | §03 |
| 20–35 | Live demo: Cowork | One real, unimpressive-sounding task done end to end. See demo scripts below. | — |
| 35–45 | Live demo: Claude Code | Same energy, different artefact. Even for non-engineers — they need to see what their engineering org is using. | — |
| 45–55 | The delegation model | Permission modes, reversibility, "say what not how", give it something to verify against. | §07 |
| 55–70 | Risk & governance | The two-condition prompt-injection rule. Admin controls. The honest gaps. | §08 |
| 70–80 | Choosing & the ladder | Decision tree and anti-patterns, then close on Anthropic's five-level maturity model as a self-assessment: where are you now, what blocks the next rung? | §10, §12 |
| 80–90 | Q&A | Keep §05 open on a second screen. | §05 |
Pre-work
Assign roughly 80 minutes of Anthropic's own free courses before the session — AI capabilities and limitations (15 min), Claude 101 (1 hr), and the 5-minute Delegating your first task in Claude Cowork video. They arrive with shared vocabulary and having seen the interaction model, which buys back most of your first segment. Full rationale and the assignment table in §13.
If you only have 30 minutes
Keep: the frame (5), two products one engine (5), one live demo (10), the two-condition risk rule (5), the decision tree (5). Drop everything else. The demo is non-negotiable — abstract explanation of agentic work does not land.
If you have a half day
Add hands-on. Segment 3 below becomes 90 minutes of participants doing their own first task on their own data, with you circulating. That is where adoption actually happens.
Demo scripts
Demo 1 · Cowork — "the unglamorous win"
Resist the spectacular demo. Executives discount anything that looks like a magic trick. Pick something visibly tedious that they recognise from their own week.
- Show a messy folder of ~20 real-ish files: PDFs, spreadsheets, a few emails saved as text.
- Create a project pointing at it. Add two lines of Instructions ("Always cite the source file for any number you quote. Use our fiscal quarters, not calendar.").
- One prompt: "Work out what's in this folder, reconcile the numbers across the spreadsheets, and give me a two-page summary with a table of the discrepancies and where each one comes from."
- Narrate while it works — point at the plan, the file reads, the permission prompts.
- Open the output. Then open one of the source files and check a cited number live. Do this in front of them. Verification in public is the most persuasive thing you can do.
Demo 2 · Claude Code — "for the non-engineers in the room"
- Open a terminal in a small repo. Show
CLAUDE.mdand read two lines of it aloud — "this is how the team writes down its conventions once." - Ask it to do something legible without code literacy: "What does this project do, and what would break first if traffic went up 100×?"
- Then something concrete: "Add input validation to the signup endpoint, write a test for it, and run the tests."
- Show
Shift+Tabcycling permission modes. ShowEsc Escundoing an edit. - Land the point: this is the same agent that just built the summary; the difference is what it's pointed at.
Demo 3 · The bridge (only if the room is Pro/Max)
Brief Dispatch from your phone with something mixed — "look at last week's incident, write the customer-facing note, and open a PR adding the missing alert." Show the child tasks appearing in the sidebar and landing in different products. If your audience is on Enterprise seats, skip this and describe it instead.
Hands-on exercises
| # | Exercise | Teaches | Time |
|---|---|---|---|
| 1 | Write three lines of project Instructions for a piece of work you do monthly. Run the same prompt with and without them. | Standing context is the highest-leverage setup step. | 15 min |
| 2 | Give Claude a task with no success criterion. Then repeat it with an explicit one ("the totals must reconcile to the figure in cell B12"). | "Give it something to verify against" — the single best habit. | 15 min |
| 3 | Run the same task in Manual, then Auto mode. Count the interruptions. | The autonomy dial is a real trade-off, and Auto costs more. | 10 min |
| 4 | Deliberately give a vague, badly-scoped brief. Watch it go wrong. Then interrupt and steer it mid-task. | Recovery is cheap; you don't restart. Removes fear. | 15 min |
| 5 | Set up one recurring scheduled task that will actually run on Monday. | Delegation becomes real when something arrives without being asked. | 10 min |
| 6 | Find one task in your week that these tools are the wrong choice for, and say why. | Calibration. Prevents the post-training over-application slump. | 10 min |
| 7 | Place yourself and your team on Anthropic's five-level ladder (§12), then name what specifically blocks the next rung. | Turns "should we adopt AI" into a concrete per-person next action — and surfaces the real blockers, usually access rather than capability. | 15 min |
| 8 | Take the row for your function from Anthropic's starting-points table (§12) and produce a current baseline number for it. | Most people cannot. That is the finding: you cannot show ROI on a process you never measured. | 15 min |
Questions you will be asked
| Question | Short answer | Detail |
|---|---|---|
| "Does my data train the model?" | On Team/Enterprise/API: no, unless you opt in. On Free/Pro/Max: only if you turn the setting on. | §08 |
| "Does my file leave my laptop?" | Cowork: yes, it's processed on Anthropic's servers. Claude Code local: execution and files stay local; prompts and outputs go over TLS to the provider. | §03 |
| "Can it delete my files?" | It asks explicitly before deleting. Claude Code additionally snapshots files before edits so you can rewind. | §07 |
| "Can I stop it doing X, guaranteed?" | In Claude Code, yes — deny rules and PreToolUse hooks. In Cowork today, you can restrict scope but not enforce a hard block. | §08 |
| "Why is it so expensive / why did I hit my limit?" | Agentic tasks are loops of many model calls, not one. Auto mode adds safety-check calls on top. | §09 |
| "Do I need to keep my laptop open?" | For local files, browser and computer use: yes. For remote sessions and scheduled tasks: no. | §04 |
| "Can my team share my setup?" | Claude Code: yes, via committed files. Cowork projects: no — package it as a plugin instead. | §06 |
| "Is it audited?" | Cowork cloud sessions are in the Compliance API; local session data is not, and isn't centrally managed. Use OTel. | §08 |
| "Can we run it on our AWS/Azure/GCP commitment?" | Claude Code, yes. Cowork, not documented. | §04 |
| "What if it's just wrong?" | It often is, at the margins. That's why reversibility, verification criteria and the transcript matter more than the output. | §07 |
| "Will this replace my analysts / engineers?" | Stay factual: the documentation frames it as delegation of multi-step execution, with a human briefing and reviewing. Don't speculate beyond that. | — |
Misconceptions to pre-empt
Address these before someone raises them; it reads as expertise rather than defensiveness.
- "Cowork is Claude Code for normal people." Architecturally related, operationally very different. Different execution location, different context unit, no hooks, no git, no CI, no SDK, doesn't share local config.
- "The desktop app means it's local." The opposite. Say this early and say it clearly.
- "Claude Code is only for code." Its own docs disagree, and output styles exist to adapt it.
- "More autonomy is better." Auto mode costs more and screens rather than blocks. Match the mode to the stakes.
- "If it's in my instructions, it will happen." Instructions are context, not enforcement. This is a direct quote-able point from the docs.
- "Enterprise plans get everything." Computer use and Dispatch are Pro/Max only.
- "It runs in a sandbox so it's safe." Cowork's isolation protects your machine and network. It does not protect the connected accounts and folders you deliberately granted it.
- "Prompt injection is theoretical." Anthropic names it as the central threat for Cowork and ships classifiers, action screening and RL training against it. Treat it as real and teach the two-condition rule.
Vocabulary sheet
| Term | Plain-English definition |
|---|---|
| Agentic | The model loops — gathers context, acts, checks its work, repeats — instead of answering once. |
| Agentic harness | The software around the model that gives it tools, manages its memory, and runs it safely. Claude Code and Cowork are both harnesses. |
| Tool | Something the model can do rather than say: read a file, run a command, search the web, call an API. |
| Context window | The agent's working memory. Finite. Everything you load costs space. |
| Compaction | What happens when the context fills: old tool output is dropped, then the conversation is summarised. |
| Skill | A written-down workflow or reference document the agent can pull in when relevant. |
| Plugin | A shareable package of skills, connectors, agents and hooks. The one thing that works in both products. |
| Connector / MCP | A standard way to plug the agent into an external system — Drive, Slack, Jira, your own API. |
| Sub-agent | A helper the agent spawns with its own fresh memory, which reports back a summary. |
| Hook | Claude Code only. Code that runs automatically at a fixed moment — the difference between asking and enforcing. |
| CLAUDE.md | Claude Code's project instruction file, committed with the code. |
| Project (Cowork) | Folders + standing instructions + links + memory for one recurring area of work. Lives on your computer. |
| Dispatch | A long-running agent you brief once — including from your phone — which splits the work and routes each piece to Cowork or Claude Code. |
| Prompt injection | Hostile instructions hidden in content the agent reads, aiming to hijack it. Needs untrusted content and consequential capability. |
| Checkpoint | Claude Code's undo. Files are snapshotted before edits so you can rewind. |
| Adoption level (0–4) | Anthropic's ladder: chat Q&A → building deliverables → encoding a skill → scheduling and bundling → department plugins. See §12. |
| 4D / AI Fluency | Delegation, Description, Discernment, Diligence — Anthropic's competency framework for working with AI. See §13. |
| Automation / Augmentation / Agency | The three modes of AI interaction: AI executes your instructions · you think together · you configure it to act on your behalf later. |
| bypassPermissions | Claude Code's flag-only mode that disables all permission prompts and safety checks. Anthropic: for "isolated containers and VMs only", and it "offers no protection against prompt injection". Admins block it with disableBypassPermissionsMode. Expect this question from anyone in security. |
| Shadow AI | Anthropic's term for ungoverned private workflows nobody can see, audit or improve — the failure mode of unmanaged adoption. |
Before each cohort — verification checklist
- Re-read the Claude Desktop changelog for Cowork changes since your last session.
- Re-read the latest Claude Code what's-new entry.
- Re-check pricing on claude.com/pricing — including which seat type your audience holds.
- Re-check feature availability — especially the beta and research-preview labels in §05.
- Re-check the course catalogue at claude.com/resources/courses before sending pre-work — durations and titles change, and the hub page does not reflect the catalogue (§13).
- Confirm the seat type of the people in the room, then confirm your demos will actually work on it.
- Run both demos end to end the morning of. Agentic demos fail differently every time.
"You will not get good at this by reading about it. Pick one task you do every week that you resent, and hand it over on Monday."