This guide explains the SPIFFE standard and its runtime implementation, SPIRE. It details how the framework uses node and workload attestation to issue short-lived, cryptographically verifiable identities (SVIDs), comparing this application-layer security system to traditional network access control.