Quantum-Safe Migration Playbook (Strategic & Operational Guide)

Version 1.2.0 is a major restructuring of the Quantum-Safe Migration Playbook with three goals: make the content usable as a retrieval-augmented AI knowledge base, tighten evaluation discipline, and update all dated facts to April 2026.

What's new in v1.2.0

Structural changes

• Fact-ID indexing: every atomic claim now has a stable §N.M identifier for precise cross-reference and citation.
• Explicit scope block at the top of the corpus, listing what's covered and — critically — what's out of scope. This is what allows a downstream AI advisor to refuse out-of-scope questions instead of improvising.
• Cross-reference lines at the end of each section pointing to related fact IDs.
• Provenance block: every dated or numeric claim in the corpus is listed at the bottom with its source and a re-check cadence.

Content updates (April 2026)

• §1.2: NIST FIPS 203 (ML-KEM), FIPS 204 (ML-DSA), FIPS 205 (SLH-DSA) finalized August 13, 2024; HQC selected March 2025; FIPS 206 (FN-DSA/FALCON) in development.
• §1.3: NSA CNSA 2.0 timelines specified by category — software/firmware signing and network equipment by 2030; browsers, servers, cloud, and operating systems by 2033.
• §1.4 (new): compressed Q-Day estimates. Neutral-atom architectures and improved error correction have cut the qubit count needed to break P-256. Cloudflare now targets 2029 for full internal PQ readiness.
• §2.1: Cloudflare reports 52% of human-initiated web traffic using post-quantum hybrid key agreement (December 2025 data), up from 29% at the start of the year.
• §2.3 (new): the authentication gap. Key agreement is largely solved; public PQ certificates are not yet broadly available; CA/Browser Forum has not finalized the hybrid certificate format.
• §4: replaced unsourced latency percentage with mechanism-based description.
• §6.4 (new): Cryptographic Bill of Materials (CBOM) concept.
• §9.3: sharpened vendor validation criteria with FIPS 140-3 and NIST CAVP references.

Evaluation suite

• Expanded from 4 queries to 15 golden queries plus 6 distractor queries.
• Each query has explicit pass AND fail criteria, testable against paraphrased responses.
• Distractor queries test scope enforcement: QKD, quantum physics, vendor recommendations, exact Q-Day predictions, legal advice, general crypto tutorials.

Integration guide (new)

• Dedicated INTEGRATION.md with a ready-to-paste system prompt for a retrieval-augmented runtime.
• Ingestion guidance (corpus fits in system context for models with ≥8K windows; chunking patterns for larger deployments).
• Refresh cadence tied to the Provenance block.

Version history

• v1.1.0 — initial Zenodo release.
• v1.2.0 — restructured, fact-indexed, expanded evaluation suite, updated to April 2026 standards and deployment data.