SoloHard40mPro Scenario
The Certificate Rotation That Split the Fleet
Diagnose a planned mTLS trust rotation that breaks half a staging fleet. Choose evidence-backed containment, fix one intermediate-state plan validator, and prove inventory-safe root retirement without disabling authentication.
Skills you'll prove
pythonmtlscertificate-rotationincident-response
Interview Tip
Treat CA rotation as a verified state transition, not a certificate replacement: distribute authenticated trust, preserve mutual authentication through mixed identities, and retire old trust only after complete inventory migration.