Find what breaks. Fix it first.

IBM Quantum jobs in our account record, each listed with its ID

of our own published claims corrected in public when the evidence said no

findings in a live public ecosystem, each with a link you can open

PROBABILITY · WITHIN 10 YEARS

chance of a cryptographically relevant quantum computer, by expert survey

PROBABILITY · WITHIN 15 YEARS

chance of a cryptographically relevant quantum computer, by expert survey

US federal agencies, for high value assets and high impact systems. It also directs a proposed rule requiring covered federal contractors to comply with NIST post-quantum standards by 31 December 2030.

A recommendation to EU Member States, not a law that binds a firm directly. It cites DORA and NIS2 as rules that already require state-of-the-art cryptography.

US guidance, still a draft. US agencies must align their plans with it.

Counterfoil

The stub you keep.

Counterfoil is a receipt book for automated work. Each step is written down, linked to the step before it, and signed. If a record is edited later, the link breaks, and anyone can see it with a free checker that runs on their own machine.

It proves the record has not changed and that we signed it. It does not prove the work itself was right, and the receipt says so. Our assessment tooling seals the inventory, the exposure ranking and the migration plan this way.

Found a 44-day silent failure in the Stellar Development Foundation’s contract-population workflow and reported it. SDF merged a fix the following day.

Diagnosed a second pipeline failure to a specific dependency regression, with the failing build identified and remediation routes laid out.

Published a cross-verifier coverage snapshot of the ecosystem, aggregates only, with the full method attached so anyone can recompute it.

Contributed a measured data point to the Stellar Development Foundation’s verification-registry API design discussion.

ON IBM QUANTUM HARDWARE

CHSH Bell test and GHZ-Mermin on ibm_marrakesh: S = 2.733 (32 sigma over the classical bound of 2), M = -3.859.

A reproduction of textbook physics on a single device, not loophole-free (locality and detection loopholes remain open). Not a novel result.

WHEN WE WERE WRONG

Results we published in March 2026 turned out to have been computed on a simulator, not the quantum hardware they were labeled with. We found it and corrected it in public.

Pick the right post-quantum algorithm for your use case. Deterministic routing through NIST standards (FIPS 203/204/205). Every recommendation traceable. Free tool.

Scan your codebase and find every cryptographic asset: keys, certificates, protocols, libraries. Output: a machine-readable inventory with quantum risk scores.

A signed certificate of where key material came from, checkable offline. Our quantum entropy source is not running today, so no quantum-origin certificate is issued.

Track a post-quantum migration against regulatory deadlines. The public version is a demo with sample data that saves nothing. The full tracker, with a hash-chained audit trail and PDF export, is built and tested but not public.

Map your cryptographic dependencies, plan phased migration (classical → hybrid → post-quantum), and roll back any phase if needed.

Post-quantum key management compatible with AWS KMS. Supports ML-KEM and ML-DSA at all security levels. AES-256-GCM encryption at rest.

Map NIST post-quantum standards to LATAM regulators: SUGEF, SFC, CNBV, BACEN, CMF. Deterministic knowledge base, never LLM-generated. Spanish, Portuguese, English output.

A process-level environment for running AI agents: scope firewall, audit log, post-quantum key protection at rest, and automatic shutdown if boundaries are crossed. Post-quantum channel encryption and signed model manifests are on the roadmap.

A receipt book for automated work: signed, linked records anyone can check with a free checker. Our assessments seal the inventory, the exposure ranking and the migration plan as linked receipts; other tools are not connected yet.

Check whether data copied today stays secret long enough: how long it must stay secret plus how long migration takes, against the horizon you plan for. Runs in your browser; nothing is sent.

Translates circuits for several quantum backends and estimates what a run would cost. It does not submit jobs yet.