{
  "schema": "SOVRIENT_CRYPTO_AGILITY_EXPORT_V1",
  "generated_utc": "2026-05-11T15:45:07Z",
  "date": "2026-05-10",
  "state": "ADVISORY_CRYPTO_AGILITY_SHADOW_READY",
  "advisory_only": true,
  "policy_note": "Classical signatures remain authoritative. PQC fields run in crypto-agility shadow mode unless policy promotes require mode.",
  "source_paths": {
    "sealed_catalog": "/mnt/c/Users/khals/sovrient/web/data/sealed_catalog_2026-05-10.json",
    "sealed_catalog_sha256": "/mnt/c/Users/khals/sovrient/web/data/sealed_catalog_2026-05-10.json.sha256",
    "sealed_catalog_sig": "/mnt/c/Users/khals/sovrient/web/data/sealed_catalog_2026-05-10.json.sig",
    "bundle_dir": "/mnt/c/Users/khals/sovrient/report/bundles/2026-05-10/crypto_agility"
  },
  "classical_stack": {
    "hash_algorithm": "SHA-256",
    "signature_profile": "OpenPGP EdDSA detached signature",
    "signature_expected": true,
    "signature_present": true,
    "sealed_catalog_sha256": "02cba00b231f5ae089a0936b672a8a170afd786987509ab9bb3aa547527ad2cc",
    "sealed_catalog_sidecar_sha256": "02cba00b231f5ae089a0936b672a8a170afd786987509ab9bb3aa547527ad2cc",
    "sidecar_matches_file_hash": true,
    "signature_file_sha256": "6a2c8c4dbe7241ee1ade8f3b1098abffdb8acd6aec1c8db4d035bbafd8417da0"
  },
  "pqc_policy": {
    "mode": "shadow",
    "integration_stage": "STAGE_1_METADATA",
    "classical_required": true,
    "pqc_required": false,
    "hybrid_target": "CLASSICAL_PLUS_PQC"
  },
  "pqc_profiles": {
    "signature_primary": {
      "profile_id": "ML-DSA-65",
      "standard": "NIST FIPS 204 (ML-DSA)",
      "status": "SHADOW_DECLARED",
      "shadow_signature_path": "/mnt/c/Users/khals/sovrient/web/data/sealed_catalog_2026-05-10.json.ml_dsa65.sig",
      "shadow_signature_present": false
    },
    "signature_archival": {
      "profile_id": "SLH-DSA-SHA2-128S",
      "standard": "NIST FIPS 205 (SLH-DSA)",
      "status": "SHADOW_DECLARED",
      "shadow_signature_path": "/mnt/c/Users/khals/sovrient/web/data/sealed_catalog_2026-05-10.json.slh_dsa_sig",
      "shadow_signature_present": false
    },
    "kem_primary": {
      "profile_id": "ML-KEM-768",
      "standard": "NIST FIPS 203 (ML-KEM)",
      "status": "PLANNED"
    },
    "kem_diversity": {
      "profile_id": "HQC",
      "standard": "NIST selected; standardization in progress",
      "status": "FUTURE_DIVERSITY"
    }
  },
  "on_chain_anchor": {
    "network": "Sepolia",
    "tx_url": "https://sepolia.etherscan.io/tx/0xf7e521f313cc44ee44355abcc62bb6aeaf904cab98e4ee219722ce57fec4196c",
    "status": "ANCHORED"
  },
  "roadmap": {
    "now_operational": [
      "Emit daily machine-readable crypto-agility artifact with hash sidecars.",
      "Keep classical SHA-256 + detached signature as custody authority.",
      "Expose PQC profile intent and expected shadow artifact locations."
    ],
    "next_shadow_integration": [
      "Generate optional ML-DSA detached signature for sealed catalog artifacts.",
      "Generate optional SLH-DSA detached signature for archival witness parity.",
      "Publish verifier checks that compare classical vs PQ shadow signature status."
    ],
    "later_gate_promotion": [
      "Promote hybrid policy to classical_required + pqc_shadow_required.",
      "Evaluate require-mode only after verifier/toolchain maturity and governance approval.",
      "Expand KEM migration for transport channels (ML-KEM primary, HQC diversity lane)."
    ]
  }
}