Status
Supported
Wi-Fi Infrastructure is an explicitly supported SHP platform.
Support is established by the applicable Active Wi-Fi Platform Admission Record.
View the Wi-Fi Platform Admission Record →
Platform support does not by itself mean that production certification signing is operational or that certification services are currently available.
Platform boundary
The Wi-Fi platform boundary is defined by the admitted Wi-Fi specification set.
Certification claims must remain within that defined boundary.
The existence of wireless networking functionality on another platform does not automatically bring that platform within the SHP Wi-Fi certification domain.
Admitted specification set
Wi-Fi certification is governed by the applicable SHP core specifications together with the admitted Wi-Fi-specific specification set.
That set includes:
- Wi-Fi Threat Model
- Wi-Fi Platform Mathematics Specification
- Wi-Fi Control Catalogue Mathematics
- Wi-Fi Tier 1 Full Control Catalogue
- Wi-Fi Tier 2 Full Control Catalogue
- Wi-Fi Tier 3 Full Control Catalogue
- Wi-Fi Platform Admission Record
The applicable versions of those artefacts define the Wi-Fi certification context.
Browse the SHP Specification Library →
Wi-Fi tiers
Wi-Fi currently has defined control catalogues for:
- Tier 1
- Tier 2
- Tier 3
Those tiers are Wi-Fi-specific governed hardening postures.
They must not be interpreted as equivalent to the same numbered tiers on Fedora, Network Gateway, or another SHP platform.
Threat model first
Wi-Fi controls derive their meaning from the applicable Wi-Fi threat model.
The threat model defines the security boundary within which the platform controls and certification claims operate.
Certification must not be interpreted as protection against threats outside that defined scope.
Verification
Wi-Fi certification is based on structured verification of observed state.
Verification must follow the applicable Wi-Fi controls and the SHP verification model.
Applicable Non-Negotiable Controls remain hard certification gates.
They cannot be bypassed through bounded certification or discretionary judgement.
Certification
Wi-Fi certification is:
- device-bound
- state-bound
- specification-bound
- time-bounded
It is derived from eligible verification results and issued only under SHP-controlled certification authority.
Certification does not mean that compromise is impossible.
It does not survive arbitrary material state change.
An expired or revoked certification is not active certification.
Understand SHP Certification →
Signing readiness
Formal Wi-Fi platform support and production certification signing readiness are separate states.
Platform Support means Wi-Fi has been formally admitted under SHP governance.
Certification Signing Readiness means the required operational trust infrastructure exists for issuing Wi-Fi certification artefacts.
Service Availability means those certification services are actually being offered.
None of these states should be inferred from another.
Platform independence
Wi-Fi remains structurally independent from other SHP platforms.
Wi-Fi controls, tier semantics, threat coverage, and certification meaning must not be transferred automatically to Fedora, Network Gateway, or another technical domain.