SSCP deep review — September 29, 2026

The SSCP guide now maps all 36 current numbered objectives, provides 48 original answered prompts, and includes an executed certificate-validation workbook. This is a same-context AI review; independent human review remains pending.

The current web outline still uses the October 1, 2025 scope and weights. The monitored change only removes “VUE” from the testing-center label. Earlier objective/status bytes and the September 2 review were preserved before explicitly accepting that change. The post-acceptance monitor reports no further change. Objective 6.7 has no hyphen after its number but is included in the count of 36.

The actual 12-page outline PDF was read, with pages 3, 9 and 11 visually inspected. Its page 11 text extraction repeats hidden Domain 6 text not present in the rendered page. The visible 7.3 heading says EDR over mobile-device bullets; the canonical web heading explicitly identifies mobile-device management. The guide preserves both endpoint and mobile teaching. Other PDF/web wording differences, including PKI verbs, risk examples and the testing-center label, are not misrepresented as a new blueprint.

The September 2026 AI guidance was fetched as an actual 29-page PDF; the introduction and complete SSCP section on printed pages 6–8 were read. It applies AI context within the existing seven domains. The guide separates model drift from proof of compromise and signatures from proof that a signed statement is true. Selected current NIST guidance supports scoped password requirements, Zero Trust, sanitization verification/validation, incident response and the different purposes of post-quantum standards. These were selected-section readings, not complete audits of every referenced standard.

The workbook uses Python 3.13.14, cryptography 50.0.1 and Python SSL/OpenSSL 3.0.21. All 11 TLS cases passed. Three accepted cases validate the peer certificate and exchange encrypted request/response payloads through memory buffers. Eight cases reject wrong names, missing trust, invalid time, unsuitable usage, a revoked serial, missing CRL or stale CRL. A loaded CRL without enforcement still allows the revoked leaf; a new leaf succeeds when the current enforced CRL revokes only the old serial. Temporary synthetic certificate/key files were removed from a verified child directory. No sockets, external endpoints, system trust changes, installation, real credentials or infrastructure changes were involved.

The example does not establish browser or network behavior, online CRL retrieval, OCSP, intermediate-chain revocation, mutual TLS, application authorization, session invalidation, production PKI or media sanitization. Eight infrastructure activities and three reasoning scenarios remain proposed; no infrastructure lab was executed.

Of 23 source receipts, 21 are healthy and two commercial catalogs returned HTTP 403. The NIST sanitization PDF initially had a transient health error despite a successful binary download; the recorded retry is healthy. Public Pluralsight metadata has eight cards totaling 13h36m versus a rounded 14h header and conflicting September 2024/November 2021 outline labels. LinkedIn's 30 public clip times total 6h00m59s versus a 6h header; its August 2025 date does not prove complete current alignment. Neither paid lessons nor practice questions were accessed. Earlier O'Reilly and Udemy durations/revisions remain unverified and are labeled accordingly.

Official course completion uses a 70% threshold distinct from the exam's scaled passing score. Course language/access, experience alternatives, Associate status and maintenance categories are separated. No personal eligibility, enrollment, exam booking, payment or course quality was assessed. See the guide's source links and the source receipts, objective mapping, execution output and validation gates in ADLC_Docs/operations/2026-09-29-sscp-deep-review.json.

The five reserved GitHub guides and disabled notification pilot remain unchanged. No external messages or runtime/service/authentication configuration changes were made.