The Procurement Cliff: Why Post-Quantum Has To Be In The Record From Day One

Micky Irons

Published Jun 13, 2026• 0 citations

Abstract

The National Security Agency's CNSA 2.0 sets a hard 2027 cliff for quantum-safe procurement, and harvest-now-decrypt-later means records signed today must already resist a future quantum adversary. Mickai's Open Audit Record signs with FIPS 204 ML-DSA-65 from inception, so a chain written in 2026 still verifies in 2035.Originally published at https://mickai.co.uk/articles/procurement-cliff-post-quantum-in-the-record-from-day-one. Mickai is a Sovereign Intelligence Operating System; the Open Audit Record signs every artificial intelligence action before it executes, post-quantum and offline-verifiable. 101 filed UK patent applications, Mickai LTD (Companies House 17166618).

DOI: 10.5281/zenodo.20674257

Related papers

Signing Today for a Verifier in 2035

Micky Irons

Harvest-now-decrypt-later is now an operational assumption, with official warnings that it is already happening and the NCSC mandating PQC migration by 2031 and 2035. An audit record signed under classical cryptography today is forgeable once a quantum adversary arrives. Mickai signs the Open Audit Record under FIPS 204 ML-DSA-65 today, so records stay verifiable past Q-Day, ahead of the deadlines.Originally published at https://mickai.co.uk/articles/signing-today-for-a-verifier-in-2035. Mickai is a Sovereign Intelligence Operating System; the Open Audit Record signs every artificial intelligence action before it executes, post-quantum and offline-verifiable. 101 filed UK patent applications, Mickai LTD (Companies House 17166618).

May 29, 20260 citations

Post-quantum for financial services: DORA, the record, and the quantum clock

Micky Irons

Regulated finance must make its audit record post-quantum now, not at Q-Day. DORA has applied since January 2025 and records are retained for years, so signatures written today must resist quantum attack across their full retention life.Originally published at https://mickai.co.uk/articles/post-quantum-for-financial-services-dora-and-the-quantum-clock. Mickai is a Sovereign Intelligence Operating System; the Open Audit Record signs every artificial intelligence action before it executes, post-quantum and offline-verifiable. 104 filed UK patent applications, Mickai LTD (Companies House 17166618).

Jul 12, 20260 citations

Post-quantum for government and defence: protecting what must stay classified for decades

Micky Irons

Government and defence secrets carry protection horizons measured in decades, the exact window a harvest-now-decrypt-later adversary targets. The fit is sovereign, air-gapped, post-quantum-signed systems that keep data offline and verifiable long after today's public-key encryption falls.Originally published at https://mickai.co.uk/articles/post-quantum-for-government-and-defence-classified-for-decades. Mickai is a Sovereign Intelligence Operating System; the Open Audit Record signs every artificial intelligence action before it executes, post-quantum and offline-verifiable. 104 filed UK patent applications, Mickai LTD (Companies House 17166618).

Jul 12, 20260 citations

Post-quantum migration: a CIO sequence from cryptographic inventory to air-gapped record

Micky Irons

Migrate post-quantum as a sequence, not a scramble: inventory every use of cryptography, prioritise long-lived records, sign new records with FIPS 204 or 205, run hybrid across the transition, build crypto-agility with algorithm identifiers, then move sensitive records into a sovereign air-gapped ledger.Originally published at https://mickai.co.uk/articles/post-quantum-migration-a-cio-sequence-from-inventory-to-air-gap. Mickai is a Sovereign Intelligence Operating System; the Open Audit Record signs every artificial intelligence action before it executes, post-quantum and offline-verifiable. 104 filed UK patent applications, Mickai LTD (Companies House 17166618).

Jul 12, 20260 citations

Post-quantum from the ground up: why the record has to outlive the vendor

Micky Irons

Mickai is a sovereign intelligence operating system that regulated firms own and run inside their own walls, air gapped, with every consequential action signed under post-quantum cryptography and hash-chained into a record anyone can verify offline for decades.Originally published at https://mickai.co.uk/articles/post-quantum-from-the-ground-up. Mickai is a Sovereign Intelligence Operating System; the Open Audit Record signs every artificial intelligence action before it executes, post-quantum and offline-verifiable. Mickai LTD (Companies House 17166618).

Jul 1, 20260 citations

What is Q-Day, and how do you prepare an AI system for it?

Micky Irons

Q-Day is the day a quantum computer can break today's public-key cryptography. You prepare an AI system by inventorying your cryptography, signing new records with post-quantum signatures, running hybrid schemes, building crypto-agility, and re-signing long-lived data before that day arrives.Originally published at https://mickai.co.uk/articles/what-is-q-day-and-how-do-you-prepare-ai-for-it. Mickai is a Sovereign Intelligence Operating System; the Open Audit Record signs every artificial intelligence action before it executes, post-quantum and offline-verifiable. 104 filed UK patent applications, Mickai LTD (Companies House 17166618).

Jul 12, 20260 citations