Validates working knowledge of software attestation: SLSA build levels, Sigstore keyless signing (Fulcio/Rekor), in-toto attestation chains, X.509/package signatures, and Safeguard's SCAL/LCAL scoring used to gate releases on build integrity rather than just known vulnerabilities.
Certificates are designed to be checked, not just displayed.
The credential is valid for 12 months from issue. Its public page states the expiry date, and renewing means passing the current exam again — so the credential always reflects the current material.
