Post-quantum for financial services: DORA, the record, and the quantum clock

Micky Irons

Published Jul 12, 2026• 0 citations

Abstract

Regulated finance must make its audit record post-quantum now, not at Q-Day. DORA has applied since January 2025 and records are retained for years, so signatures written today must resist quantum attack across their full retention life.Originally published at https://mickai.co.uk/articles/post-quantum-for-financial-services-dora-and-the-quantum-clock. Mickai is a Sovereign Intelligence Operating System; the Open Audit Record signs every artificial intelligence action before it executes, post-quantum and offline-verifiable. 104 filed UK patent applications, Mickai LTD (Companies House 17166618).

DOI: 10.5281/zenodo.21345226

Related papers

The Procurement Cliff: Why Post-Quantum Has To Be In The Record From Day One

Micky Irons

The National Security Agency's CNSA 2.0 sets a hard 2027 cliff for quantum-safe procurement, and harvest-now-decrypt-later means records signed today must already resist a future quantum adversary. Mickai's Open Audit Record signs with FIPS 204 ML-DSA-65 from inception, so a chain written in 2026 still verifies in 2035.Originally published at https://mickai.co.uk/articles/procurement-cliff-post-quantum-in-the-record-from-day-one. Mickai is a Sovereign Intelligence Operating System; the Open Audit Record signs every artificial intelligence action before it executes, post-quantum and offline-verifiable. 101 filed UK patent applications, Mickai LTD (Companies House 17166618).

Jun 13, 20260 citations

Signing Today for a Verifier in 2035

Micky Irons

Harvest-now-decrypt-later is now an operational assumption, with official warnings that it is already happening and the NCSC mandating PQC migration by 2031 and 2035. An audit record signed under classical cryptography today is forgeable once a quantum adversary arrives. Mickai signs the Open Audit Record under FIPS 204 ML-DSA-65 today, so records stay verifiable past Q-Day, ahead of the deadlines.Originally published at https://mickai.co.uk/articles/signing-today-for-a-verifier-in-2035. Mickai is a Sovereign Intelligence Operating System; the Open Audit Record signs every artificial intelligence action before it executes, post-quantum and offline-verifiable. 101 filed UK patent applications, Mickai LTD (Companies House 17166618).

May 29, 20260 citations

What is Q-Day, and how do you prepare an AI system for it?

Micky Irons

Q-Day is the day a quantum computer can break today's public-key cryptography. You prepare an AI system by inventorying your cryptography, signing new records with post-quantum signatures, running hybrid schemes, building crypto-agility, and re-signing long-lived data before that day arrives.Originally published at https://mickai.co.uk/articles/what-is-q-day-and-how-do-you-prepare-ai-for-it. Mickai is a Sovereign Intelligence Operating System; the Open Audit Record signs every artificial intelligence action before it executes, post-quantum and offline-verifiable. 104 filed UK patent applications, Mickai LTD (Companies House 17166618).

Jul 12, 20260 citations

Post-quantum from the ground up: why the record has to outlive the vendor

Micky Irons

Mickai is a sovereign intelligence operating system that regulated firms own and run inside their own walls, air gapped, with every consequential action signed under post-quantum cryptography and hash-chained into a record anyone can verify offline for decades.Originally published at https://mickai.co.uk/articles/post-quantum-from-the-ground-up. Mickai is a Sovereign Intelligence Operating System; the Open Audit Record signs every artificial intelligence action before it executes, post-quantum and offline-verifiable. Mickai LTD (Companies House 17166618).

Jul 1, 20260 citations

How close is a cryptographically relevant quantum computer?

Micky Irons

Nobody can name the year a cryptographically relevant quantum computer arrives, and estimates diverge widely. Today's noisy machines are far from the stable logical qubits Shor needs, but long-lived data must be protected now because attackers harvest it today.Originally published at https://mickai.co.uk/articles/how-close-is-a-cryptographically-relevant-quantum-computer. Mickai is a Sovereign Intelligence Operating System; the Open Audit Record signs every artificial intelligence action before it executes, post-quantum and offline-verifiable. 104 filed UK patent applications, Mickai LTD (Companies House 17166618).

Jul 12, 20260 citations

Post-quantum for government and defence: protecting what must stay classified for decades

Micky Irons

Government and defence secrets carry protection horizons measured in decades, the exact window a harvest-now-decrypt-later adversary targets. The fit is sovereign, air-gapped, post-quantum-signed systems that keep data offline and verifiable long after today's public-key encryption falls.Originally published at https://mickai.co.uk/articles/post-quantum-for-government-and-defence-classified-for-decades. Mickai is a Sovereign Intelligence Operating System; the Open Audit Record signs every artificial intelligence action before it executes, post-quantum and offline-verifiable. 104 filed UK patent applications, Mickai LTD (Companies House 17166618).

Jul 12, 20260 citations