Post-quantum readiness

Mint hybrid cohorts now. Same Gate envelope contract; stronger key agreement on the prover path.

Waiting for a “PQ migration project” leaves harvest-now-decrypt-later risk unaddressed on the identities that mint authority. ENI6MA hybrid circuits include Kyber768 alongside X25519 for key agreement today, while Gate continues to enforce request-bound envelopes with burn-before-validate.

Keep your TLS posture; add hybrid circuits where M2M and agent callers need PQ key agreement. Absolute replay and binding claims still require the reference architecture (durable ledger, integrity checks, lifecycle, independent of the KEM choice).

What this solution claims

Hybrid circuits use X25519 + Kyber768 for key agreement today.ShippingThe hybrid variant ships a four-shard prime with a classical + post-quantum key exchange.

Every envelope binds method, endpoint_id, request body hash, policy hash, tau, and nonce_uuid into one composite digest.Shippingrequest_hash = sha256(method || endpoint_id || request_body_hash || policy_hash || tau || nonce_uuid).Holds under the reference architecture