M1–M10 · 82 hours
The 10 added security domains
These are interleaved into the day schedule at the point where their prerequisites exist, never bolted on as a separate course. Each one names the week it first appears and the weeks where it is applied again.
- M1Model Supply-Chain Security10h·14 study days·R11 R12 R36 R37 R43 R44
- M2Training & Fine-Tuning Security10h·5 study days·R05 R19 R20 R45
- M3Multimodal AI Security (OCR/Image/Audio)10h·7 study days·R04 R10 R40 R41 R45
- M4Inference Infrastructure & Serving Security10h·8 study days·R03 R10 R25 R26 R36
- M5AI Denial-of-Service & Economic Abuse5h·11 study days·R03 R04 R25
- M6AI Memory Security5h·6 study days·R09 R17 R24 R41
- M7Advanced Privacy-Preserving ML (DP/MI)8h·5 study days·R16 R17 R18 R45
- M8AI Secure Development Lifecycle (AI-SDLC)7h·5 study days·R25 R27 R28 R31 R36 R37 R42 R43
- M9Browser & Computer-Use Agent Security10h·8 study days·R10 R25 R33 R41
- M10AI Safety & Misuse Prevention7h·4 study days·R31 R41 R42
Do not overreach
Each domain has an explicit “do not overreach” boundary in its detail page. A bounded, tested control inside the existing three projects counts; a new framework or a platform does not.