How it works
Post-quantum posture
Hybrid circuits ship X25519 + Kyber768 key agreement today. That is a concrete posture, not a roadmap slide.
A hybrid circuit combines classical X25519 with Kyber768 for key agreement, with a four-shard prime and agent mode for M2M. Teams that need post-quantum readiness on the prover path mint hybrid cohorts from Foundry and enforce the same envelope contract at Gate.
Post-quantum readiness here means: the key-agreement material used by hybrid circuits includes a PQ KEM now. It does not mean every classical primitive elsewhere in an estate is obsolete, nor that transport TLS choices are dictated by ENI6MA. Keep TLS and mTLS; layer request-bound envelopes on top.
Absolute mechanism claims (replay impossible, authority expires per request) rest on burn-before-validate and envelope binding, they are independent of which KEM the circuit uses, and they still require the reference architecture (durable ledger, TLS, integrity checks, lifecycle).
Mechanism claims
Hybrid circuits use X25519 + Kyber768 for key agreement today.ShippingThe hybrid variant ships a four-shard prime with a classical + post-quantum key exchange.
Every envelope binds method, endpoint_id, request body hash, policy hash, tau, and nonce_uuid into one composite digest.Shippingrequest_hash = sha256(method || endpoint_id || request_body_hash || policy_hash || tau || nonce_uuid).Holds under the reference architecture