The Two Dates in NIST IR 8547 That Govern Your Migration Plan
NIST IR 8547 is usually reduced to 2035. It sets two dates, and the earlier one is already shaping procurement and risk acceptance decisions.
Quantum-as-a-Service: How Access Actually Works
Shots, tasks, queues, transpilation and reserved time. A walk through the full access path from credentials to returned counts, with a worked shot budget.
Quantum Open Architecture and the Case for Modularity
Modular quantum computers are now real purchases. The decision that matters is not open versus closed, but where the interfaces go and who is…
NIS2, DORA, and the Evidence a Supervisor Will Ask For
European post-quantum regulation rarely says "deploy PQC by date X." It says produce the file. Here is what that file contains, and what your…
Four Questions That Map a Quantum Supply Chain
Vendor roadmaps name qubit counts, not the suppliers whose capacity sets delivery dates. Four questions that surface concentration, jurisdiction, and shared dependency.
Rethinking the CBOM
Complete cryptographic inventory is a mirage. A Minimum Viable CBOM maps trust boundaries first, records what you don't know, and produces migration decisions instead…
What Quantum Systems Integration Actually Involves
Open architecture turned the quantum computer into a set of parts. Someone still has to assemble them and connect the result to the infrastructure…
Q-Day Is a Confidence Crisis, Not an Outage
The morning a quantum computer factors an RSA-2048 key, nothing goes dark. What ends is the presumption of safety, and the questions start within…
Trust Now, Forge Later: The Signature Half of the Migration
Harvest Now, Decrypt Later sets its clock by data retention. The signature side of the quantum problem sets its clock by deployment lifetime, and…
Who Really Wins If Photonics Wins
The photonic bet is a manufacturing bet. Which means the winners, if it pays off, are decided layer by layer, and most of them…