Securing the Frontier Artificial Intelligence Supply Chain

AdvancedFree5 modules · 15 lessons

About this course

The supply chain behind the most capable artificial intelligence systems, treated as what it mostly is: ordinary software, infrastructure, identity and build systems, plus two artefact types that behave differently. It covers where weights come from, licence obligations, unsafe serialisation, integrity and lineage, the training and serving stack, the container and credential estate, and the insider and build system risks that apply to a laboratory exactly as they apply to anyone else.

What you'll learn

The Frontier Supply Chain and Where Weights Come From

Everything That Must Be True Before a Frontier Model Answers
Where Weights Come From: Providers, Hubs, Mirrors and Intermediaries
Licence Obligations Across an Estate of Models

The Artefact: Serialisation, Integrity and Lineage

Unsafe Serialisation and the Formats That Replace It
Integrity and Provenance of a Download
Fine Tune Lineage: Base Models, Adapters, Merges and Distillation

The Training Stack Is Ordinary Software

The Training Stack as a Dependency Graph
Data Pipelines and the Dataset Supply Chain
The Layer Below the Container: Accelerators, Drivers and Shared Infrastructure

Serving, Containers and Credentials

01The Frontier Supply Chain and Where Weights Come From3 lessons

Everything That Must Be True Before a Frontier Model Answers
Where Weights Come From: Providers, Hubs, Mirrors and Intermediaries
Licence Obligations Across an Estate of Models

02The Artefact: Serialisation, Integrity and Lineage3 lessons

Common questions

How much does Safeguard Academy cost?

Nothing. Every course, exam, and certificate on the catalog is free — including retakes. All you need is a free Safeguard account.

What are the prerequisites?

None. The flagship course, Safeguard Certified Practitioner, is a beginner-level course — basic familiarity with how software is built helps, but every exam question is answerable from the lessons themselves.

The Serving Stack and the Blast Radius of a Weight File
Containers, Base Images and Registries for a Model Platform
Secrets, Credentials and Egress in Training and Serving Environments

People, Build Systems and Running the Programme

Insider Risk in a Laboratory, and Weight Exfiltration as an Ordinary Problem
Build Systems, Release Pipelines and Signed Artefacts for Models
Running the Programme: What It Buys and What It Does Not

Unsafe Serialisation and the Formats That Replace It

Integrity and Provenance of a Download

Fine Tune Lineage: Base Models, Adapters, Merges and Distillation

03The Training Stack Is Ordinary Software3 lessons

The Training Stack as a Dependency Graph
Data Pipelines and the Dataset Supply Chain
The Layer Below the Container: Accelerators, Drivers and Shared Infrastructure

04Serving, Containers and Credentials3 lessons

The Serving Stack and the Blast Radius of a Weight File
Containers, Base Images and Registries for a Model Platform
Secrets, Credentials and Egress in Training and Serving Environments

05People, Build Systems and Running the Programme3 lessons

Insider Risk in a Laboratory, and Weight Exfiltration as an Ordinary Problem
Build Systems, Release Pipelines and Signed Artefacts for Models
Running the Programme: What It Buys and What It Does Not

What happens if I fail the exam?

You can retake it after a 24-hour cooldown, as many times as you need. Retakes are free, and each attempt draws a fresh random set of questions.

How long is a certificate valid?

The Safeguard Certified Practitioner credential is valid for 24 months from issue. The expiry date is printed on the certificate and shown live on its public verification page. Renewing means passing the current exam again.