Matrix CR Studio

EO-2026 Compliance Suite · 10 Products · 116/116 Core PQC Tests

Post-Quantum

Cryptography Suite.

Full White House Executive Order 2026 PQC migration stack. Every product runs on the Bidirectional Hash Chain, cold-auditable, tamper-evident in both directions. Two tools are live in the browser. All ten are available via API.

FIPS 203 · FIPS 204 · FIPS 205 · NIST SP 800-227 · IBM QPU ENTROPY · LATAM REGULATORY

Discover → Benchmark → Migrate → Comply → Extend

Ten products. One migration path.

P1 · FIPS 203 / 204 / 205

Algorithm Selector

LIVE

Describe your use case: TLS, firmware, code signing, key exchange. Get routed to the correct NIST post-quantum algorithm with a full integration guide. Deterministic, no guesswork.

ML-KEM-512 / 768 / 1024 (FIPS 203)ML-DSA-44 / 65 / 87 (FIPS 204)SLH-DSA (FIPS 205)Quantum entropy circuit snippetCrypto inventory entry

P2 · CODE SCANNER

Cryptographic Inventory

API

Scan your source code and find every cryptographic asset: keys, certificates, protocols, libraries. Outputs a machine-readable inventory with quantum risk scores per component.

POST /api/cbom/scanPython AST + dependency manifest + regexStandard crypto inventory formatKnown gaps stated in metadataJSON or streaming

P3 · COMPLIANCE TRACKER

Migration Tracker

LIVE

Track your post-quantum migration against regulatory deadlines. Compliance counts only independently verified assets. Claims and exceptions are never marked complete without evidence.

Hash-chained state transitionsVerified / claimed / in-progress / exception bucketsEvidence reference required for verifiedImmutable audit trailPDF export

P4 · PROSPECTIVE RISK

Store-Now-Break-Later Risk Score

API

Rank your cryptographic assets by how long they remain vulnerable to future quantum decryption. Combines data sensitivity, exposure, cryptography strength, and time-to-quantum estimates.

POST /api/hndl/assessTime-to-quantum estimate (midpoint 2032)Per-asset breakdown with factor scoresPOST /api/pdf/hndl for PDFProspective, NOT active detection

P5 · IBM HARDWARE ORIGIN

Quantum Key Provenance

API

Signed certificates proving your key material came from real quantum hardware measurement, not a pseudo-random generator. Verifiable without contacting the issuer.

POST /api/qer-cert/issueML-DSA-87 signed (FIPS 204)IBM quantum hardware origin chainVerify via /api/qer-cert/verifyPDF certificate export

P6 · LATAM REGULATORY MAP

Regional Compliance Bridge

API

Map NIST post-quantum standards to LATAM regulator requirements (Costa Rica, Colombia, Mexico, Brazil, Chile). Curated knowledge base, never generates a regulation. Legal review flagged on every item.

POST /api/allied-compliance/checklistCR · CO · MX · BR · CLGap / best-effort mapping onlyNOT legal advice, every itemPDF report export

P7 · ISOLATED AI ENVIRONMENT

Secure Agent Sandbox

API

Run AI agents in an isolated environment with encrypted channels and signed capability manifests. Deny-by-default, re-verified on every check. Automatic quarantine on missed heartbeat.

POST /api/sandbox/spawnML-KEM-768 per-agent key pairSigned capability manifestsAuto-quarantine (3 missed heartbeats)gVisor isolation

P8 · MIGRATION PLANNER

Crypto-Agility Planner

API

Detect cryptographic pairs that must migrate together (sign/verify, encrypt/decrypt), order them dependency-first. Phased hybrid rollout with rollback per asset.

POST /api/orchestrate/planDependency-first migration groupingclassical → hybrid → post-quantum-only phasesPer-asset rollback (one phase)Maintenance-window planning

P9 · QUANTUM-SEEDED KMS

Key Management Service

API

AWS-KMS-compatible key management with post-quantum algorithms. ML-KEM and ML-DSA key generation, quantum-entropy-seeded symmetric keys, hash-chained audit log. Software-only.

POST /api/kms/keysML-KEM / ML-DSA / AES-256 key typesQuantum entropy for symmetric keysKey rotation (versioned)FIPS-140 status: not validated (honest)

P10 · CROSS-BACKEND CIRCUITS

Quantum Hardware Connector

API

Run quantum circuits on multiple hardware backends from one interface. Live: IBM and IonQ. Partner access: Quantinuum and QuEra. Small circuits automatically run on classical simulator.

POST /api/qmiddleware/compileIBM · IonQ · Quantinuum · QuEra backendsPre-compile resource estimationTranslation ≠ re-optimization (stated)GET /api/qmiddleware/backends

Engagement Status

These products are available for pilot engagements: fixed-scope, NDA-protected deployments with measurable deliverables. We have executed 512 IBM Quantum hardware runs and shipped a complete 10-product PQC suite, and we are actively seeking our first production deployment partners. Pilot pricing available for LATAM and defense-adjacent operators.

API Base

All API products are available at https://matrixcr.ai/api/<product> when the FastAPI service is co-deployed, or at localhost:8080/api/<product> in dev. src/product/api/main.py · 10 routers · 27 PQC routes.