Add one-click JupyterLab replay for Lab 01

README.md

@@ -1,6 +1,7 @@
 # risk.engineer labs
 
 [![validate labs](https://github.com/envokeME/risk-engineer-labs/actions/workflows/validate.yml/badge.svg?branch=main)](https://github.com/envokeME/risk-engineer-labs/actions/workflows/validate.yml)
+[![launch Lab 01 in Binder](https://mybinder.org/badge_logo.svg)](https://mybinder.org/v2/gh/envokeME/risk-engineer-labs/main?urlpath=lab/tree/labs/lab-01-continuous-risk-identification/lab-01-continuous-risk-identification.ipynb)
 
 Executable labs for practitioners building the cyber risk lifecycle as a data system. These labs show how operational evidence can become reviewable risk knowledge—not another spreadsheet that waits for an annual assessment.
 
@@ -10,6 +11,8 @@ Executable labs for practitioners building the cyber risk lifecycle as a data sy
 |---|---|---|
 | [01 · Continuous risk identification](labs/lab-01-continuous-risk-identification/) | Can changing system evidence identify a risk condition and express it in business terms? | Learning prototype |
 
+Run Lab 01 in one click with [Binder](https://mybinder.org/v2/gh/envokeME/risk-engineer-labs/main?urlpath=lab/tree/labs/lab-01-continuous-risk-identification/lab-01-continuous-risk-identification.ipynb), or use the lab's Docker path when you need a pinned local environment. Binder replay uses synthetic data and does not require an API key. Live LLM mode remains local by design.
+
 ## Roadmap
 
 - **Lab 02 · Emerging risk discovery** — expand beyond the known offboarding scenario using temporal evidence graphs and weak-signal research.

binder/requirements.txt

@@ -0,0 +1,9 @@
+jupyterlab==4.6.3
+nbclient==0.11.0
+nbformat==5.11.1
+jsonschema[format]==4.26.0
+matplotlib==3.11.1
+langgraph==1.0.9
+duckdb==1.5.5
+pyarrow==25.0.1
+ocsf-json-schema==1.2.0

binder/runtime.txt

@@ -0,0 +1 @@
+python-3.12