{"what_this_is":"Every place this platform creates or verifies a signature, with algorithm, standard and key id; the receipt signature-set state machine; the dated plan against EO 14412 / OMB M-26-15; and what those instruments bind. A statement of facts, not a certification; the words 'PQC-ready' and 'quantum-proof' are not used here.","signing_paths":[{"path":"Receipt signature set","where":"receipt_registry.signature_set at registration (receiptspec.record → vc.sign_hash_set)","signs":"ASCII bytes of the receipt SHA-256 hex","algorithms":"ML-DSA-65 (FIPS 204, key-pq-1) + Ed25519 (FIPS 186-5, key-1)","state":"HYBRID since 2026-10-25; earlier receipts CLASSICAL_ONLY (no set)","verify":"GET /api/receipts/{rid}/signatures"},{"path":"Verifiable Credential export","where":"GET /api/receipts/{rid}/vc (vc.py)","signs":"sha256(JCS(proof config)) ‖ sha256(JCS(credential))","algorithms":"Ed25519 eddsa-jcs-2022 (signature of record) + ML-DSA-65 ml-dsa-65-jcs-2026 (parallel proof)","state":"HYBRID proof set since 2026","verify":"POST /api/vc/verify or any Data Integrity verifier resolving did:web"},{"path":"Audit-log entries, corrections, decision-record countersignature","where":"vc.sign_hash (attestations.py, audit log)","signs":"ASCII bytes of the entry's SHA-256 hex","algorithms":"Ed25519 (key-1)","state":"CLASSICAL_ONLY — next path to move to the HYBRID set","verify":"entry carries verificationMethod; key in /api/vc/did.json"},{"path":"Registry tree-head checkpoints and daily archive digest","where":"pqarchive.py (key-slh-1), translog.py","signs":"Merkle tree head / daily digest","algorithms":"SLH-DSA-SHA2-192s (FIPS 205, hash-based) + OpenTimestamps (Bitcoin-anchored SHA-256 Merkle proof)","state":"post-quantum already; hash-based mathematics distinct from ML-DSA","verify":"/api/public-record/archive-hash, /api/log/proof/{rid}"},{"path":"Transport (TLS) to this site","where":"hosting platform's edge; not operated by us","signs":"—","algorithms":"TLS 1.2/1.3 as the edge negotiates; key establishment is the edge's (classical ECDHE unless the edge offers a hybrid ML-KEM group)","state":"not under our control; stated, not claimed","verify":"openssl s_client -connect alphacovenantholdings.com:443 and read the negotiated group"},{"path":"Session tokens and partner API keys","where":"auth.py, partnerapi.py","signs":"— (random bearer tokens compared by equality, not signed)","algorithms":"CSPRNG tokens; SHA-256 where a token is stored hashed","state":"no signature; unaffected by the signature transition","verify":"n/a"}],"states":{"CLASSICAL_ONLY":"Ed25519 only. Receipts registered before the signature set existed carry no set; their SHA-256, transparency-log inclusion, SLH-DSA archive checkpoint and OpenTimestamps anchor still verify.","HYBRID":"Ed25519 + ML-DSA-65, both detached over the ASCII bytes of the receipt's SHA-256 hex. Verification of the set succeeds only if BOTH verify. A verifier that does not know ML-DSA may check the Ed25519 signature alone and must say so.","PQC_ONLY":"ML-DSA-65 only; Ed25519 no longer issued. Target state — by policy no later than 2031-12-31 (the OMB M-26-15 digital-signature date for agencies' covered systems); earlier if a break in Ed25519 is published."},"state_now_for_new_receipts":"HYBRID","counts":{"receipts_total":3601,"receipts_hybrid":37,"receipts_classical_only":3564,"first_hybrid_at":"2026-10-25T03:18:28.097427+00:00"},"phases":[{"phase":"0 · Inventory","window":"done 2026-10","action":"Enumerate every place a signature is created, stored or verified.","status":"Done — the six paths above. No signing path exists outside this list."},{"phase":"1 · Agility layer","window":"done 2026-10","action":"Algorithm, standard and key id named on every signature; verifiers read the algorithm field and say which they checked.","status":"Done — receipt-signature-set/v1 carries algorithm/standard/public_key_id per signature; verify endpoint returns a result per algorithm."},{"phase":"2–3 · Hybrid default","window":"done 2026-10-25","action":"Every new receipt carries ML-DSA-65 + Ed25519 over its hash; set verifies only if both verify.","status":"Done for new receipts. Audit-log and countersignature paths still Ed25519-only: next."},{"phase":"3b · External verification","window":"by 2027-06-30","action":"A party outside this platform verifies at least 1,000 hybrid sets from the public keys alone and publishes the result.","status":"Not done. Anyone may do it today from /api/receipts/{rid}/signatures and /api/vc/did.json; we will publish the first such report we receive."},{"phase":"4 · PQC signature of record","window":"by 2030-12-31","action":"ML-DSA-65 becomes the signature of record; Ed25519 retained as compatibility proof; FIPS-validated implementation replaces the reference one if available.","status":"Planned."},{"phase":"5 · PQC only","window":"no later than 2031-12-31","action":"Ed25519 no longer issued (state PQC_ONLY). Every historical receipt still verifies by its SHA-256, its stored classical signature under the retired key kept in the DID document, its SLH-DSA checkpoint and its OpenTimestamps anchor.","status":"Planned; earlier if a break in Ed25519 is published."}],"federal_requirements":[{"requirement":"Key establishment quantum-safe (FIPS 203 ML-KEM)","deadline":"2030-12-31","authority":"EO 14412 (June 2026); OMB M-26-15","binds":"Federal agencies' high-value and high-impact systems","our_fact":"Key establishment on this site is TLS at the hosting edge, which we do not operate. We state what the edge negotiates; we cannot change it. Everything evidentiary here is hash-and-signature based and does not depend on key establishment."},{"requirement":"Digital signatures quantum-safe","deadline":"2031-12-31","authority":"EO 14412; OMB M-26-15","binds":"Federal agencies' high-value and high-impact systems","our_fact":"New receipts carry ML-DSA-65 today beside Ed25519 (HYBRID). Archive checkpoints carry SLH-DSA. Our own policy date for PQC_ONLY is no later than 2031-12-31."},{"requirement":"FAR-covered contractors meet federal cryptographic standards","deadline":"end of 2030 (FAR Council rule directed; proposed rule due within 180 days of the order)","authority":"EO 14412 §(FAR directive)","binds":"Contractors under covered FAR contracts, once the rule is final","our_fact":"We are not today a party to a FAR-covered contract. If we become one, the rule as finalised governs; this page is our inventory for that conversation, not a compliance claim."}],"unchanged_by_the_transition":[{"element":"Hash-based chain of custody","why":"The SHA-256 hash and its daily chained digest are the anchor. The transition changes which signature sits beside the hash, not the record or its hash."},{"element":"'Not read' disclosure","why":"A source that did not answer prints as did_not_answer. That rule has nothing to do with the signature algorithm."},{"element":"Open specification","why":"Receipt Format v1 is unchanged (CC BY 4.0). The signature set lives in the registry beside the hash; it is additive and not inside the hashed body."},{"element":"Who decides","why":"A signature attests that this platform registered this hash at this time. It attests nothing about the party, and nothing about any decision a reader makes."},{"element":"Nothing re-signed","why":"Receipts issued before the set existed are not re-signed, re-hashed or edited. Durability comes from keeping every key and every proof public."}],"did_document":"https://alphacovenantholdings.com/api/vc/did.json","durability":"https://alphacovenantholdings.com/api/public-record/durability","html":"https://alphacovenantholdings.com/api/public/cryptography.html"}