Four Documents of 4 August to 3 September 2026 Name a Requirement Before Its Test Exists: G7 Post-Quantum Procurement, the NSCEB Implant Gap List, Quantum Sensing and the Ninth Circuit's Agent Ruling
In the week of 29 August to 4 September 2026 this site's daily synthesis connected four documents, issued between 4 August and 3 September, that each tell a buyer, a regulator or a court what to do next. The G7 Cybersecurity Working Group wrote public procurement into the post-quantum transition. A United States congressional commission listed what the country lacks before an implantable brain-computer interface can reach a patient. A quantum navigation company named the defense organizations it works with, and a submission to an independent inquiry described an adjacent quantum-sensing capability as a threat to the submarines those organizations operate. A federal appellate court decided who accesses a computer, for one statute, when an AI agent does the clicking. The four share one shape: each names a requirement, and the sources themselves identify a gap between that requirement and the test, the coverage decision, the joint evaluation or the record that would let someone meet it or verify it. This post sets them side by side and asks what that gap means for the people who will sign the paper.
Practical takeaway. When a document names a requirement, the first question is what test would show it has been met, and who can run that test today.
The Conformance Gap: the G7 Wrote Procurement Into the Post-Quantum Transition on 3 September 2026, the Day a Preprint Showed What a Known-Answer Test Misses
On 3 September 2026 the G7 Cybersecurity Working Group, chaired by France's ANSSI under the 2026 French presidency and publishing with the participation of the European Commission and the support of ENISA, released "Preparing for the Post-Quantum Era: A Call to Action". The eight-page document asks organizations to begin their transition to post-quantum cryptography now and to finish within the timelines their national authorities set. Organizations that delay "may lose competitive advantage or may be excluded from contracting opportunities, including public procurement," and under its fifth priority "introducing specific requirements within the framework of public procurement can encourage organizations to initiate the transition, both for the products and services they offer on the market and within their own operations." The working group asks organizations to treat the quantum threat as "an economic and business risk."
The document arrived into a month that already carries dates, which this site set out on 4 September and which the September Signature Brief works through in full: Cyber Resilience Act reporting obligations from 11 September 2026, every FIPS 140-2 validated module moved to the NIST Historical List on 21 September, the expiry of Microsoft's Windows Production PCA 2011 signing certificate on 19 October, and the federal migration plans due under OMB Memorandum M-26-15 on 22 October. The national frameworks of the same summer, which the Defense Monitor read together on 4 September, say how a tender will be answered. The UK National Cyber Security Centre's workshop report of 22 July 2026 tells buyers to "make your requirements clear," and the Australian Signals Directorate's LATICE guidance of 20 July 2026 names a cryptographic bill of materials as "a practical way to document cryptographic dependencies at both environment and system levels." All three measure the transition by which algorithms are present.
On the same 3 September five engineers posted a preprint that measures something else. "AI-Assisted Design of a Post-Quantum Cryptographic Accelerator: A Deployed-Silicon Case Study", arXiv:2609.04058 by Jungmin Park, Eunha Kim, Wooseop Kim, Seongjoon Cho and Byungho Cha, has not been peer reviewed. Its abstract opens with the sentence the thread turns on: "Post-quantum migration is mandated on published timelines, and silicon that ships with a defect cannot be patched remotely. The standard acceptance gate cannot detect an entire class of ML-DSA defects." ML-DSA signing "resamples until a candidate meets its norm bounds, so the executed path varies with the message, whereas known-answer tests (KATs) sample fixed values and reach only the depths their seeds trigger." Their own accelerator passed its full known-answer regression while a norm check left each candidate's final coefficients unverified; the escape surfaced at the fifth iteration of the rejection loop, and a byte-exact reference oracle with randomized soak testing then found it, over 301,343 data-dependent signings.
A field loss of the same shape is already on the ledger. On 30 July 2026 Block's engineers published their analysis of the COLDCARD firmware: a build-time check tested whether a hardware random-number macro was defined, while the question that mattered was whether it was enabled, so the wallet fell back to a deterministic software generator. TRM Labs, writing on 5 August 2026, put Galaxy Research's running tally of the resulting thefts near 1,816 BTC, close to USD 116 million; this site read the report on 3 September. No quantum computer was involved, and an algorithm inventory would have listed the device as compliant, because the algorithms were the right ones. Mauritz Kop, the founder of this site, wrote in "A Bletchley Park for the Quantum Age" (War on the Rocks, 6 November 2025) that the federal government should test what is deployed, through "a distributed set of accredited laboratories that run the same open test suites on reference implementations and real stacks"; this site traced the federal turn toward validated-only procurement on 26 August. The September preprint gives that recommendation a specific object: the test suite has to reach the data-dependent paths a fixed vector never triggers.
Medicine: China's NMPA Approved an Implant on 13 March 2026, and on 2 September the NSCEB Listed What the United States Lacks, With Reimbursement Coverage on the List
On 13 March 2026 the Shanghai medical products administration announced that China's National Medical Products Administration had approved Boruikang's implantable brain-computer interface hand-movement compensation system for patients with quadriplegia after cervical spinal cord injury, and described it as the first brain-computer interface medical device to reach market anywhere. On 2 September 2026 the National Security Commission on Emerging Biotechnology published its analysis, confirming the March approval as the first of its kind and listing what the United States does not have: "a lack of U.S. strategy and coordination across the various federal agencies that fund or regulate parts of BCIs," "no clear pathway to regulatory approval in the FDA process," the absence of "an active Centers for Medicare & Medicaid Services (CMS) reimbursement coverage for implantable BCIs," which "means there is no clear payment structure," and a community that "does not have the data and databases needed to better train predictive models." This site's Medicine Monitor read the list beside the Chinese primary sources on 4 September.
The shape matches the cryptographic case, with the roles reversed. In one jurisdiction the governing document, a marketing approval, exists and the device is in patients. In the other, the commission's document is itself the instrument, and it names four things the commission finds missing: a coordinating strategy, a regulatory route, active reimbursement coverage and a dataset, with no date on any item. The commission's wording on payment is the one to underline, because it is the item a clinical trial cannot supply: a device can be safe and effective and still lack a coverage decision under which anyone is paid for implanting it.
Defense: Q-CTRL Named Its Defense Relationships for Gravimetric Navigation on 27 August 2026, and a Submission of 28 August Named Quantum Magnetic Sensing as a Threat to the Platform
On 27 August 2026 Q-CTRL reported a maritime trial of Ironstone Opal in the Coral Sea in which its quantum gravimetric navigation held about one nautical mile of positioning accuracy through the mission with no satellite fix. The company states that the system "does not rely on transmitting or receiving any external radio signals, making it immune to jamming and spoofing attacks," and names DARPA, the US Defense Innovation Unit, the Australian Department of Defence, the UK Royal Navy and other AUKUS partners as organizations it works with; the announcement is the company's own account and does not describe completed procurements. This site's Defense Monitor read the trial and its preprint on 30 August. A field result had become a product with named defense relationships, which is where a procurement category begins.
The next day, 28 August 2026, John Blaxland of the Australian National University filed "Undersea Power: A Framework for Evaluating AUKUS", in his private capacity, with the AUKUS Public Inquiry, an independent civil-society review that is not a government body. Among five sensing threats to a nuclear-powered submarine he lists magnetic anomaly detection: "traditionally, these have limited range, but new quantum-based magnetic sensors are theorized to increase the range at which a massive metal hull (like an SSN) can be detected." Gravimetry and magnetometry measure different fields, and Q-CTRL's own announcement presents its magnetic navigation as a sibling system to the gravimetric one. The two documents therefore describe adjacent capabilities within quantum sensing, and they pull in opposite directions for the same navies: one is offered as the answer to satellite denial, the other is described as a reason the platform at the center of the AUKUS program may become easier to find. A buyer of gravimetric navigation evaluates a supplier, a submarine program evaluates a detection threat, and neither document read here asks the two evaluations to meet.
Agency: the Ninth Circuit Attributed CFAA Access to the User on 4 August 2026, and Agents Began Operating Laboratory Instruments on 27 August
On 4 August 2026 the Ninth Circuit decided Amazon.com Services, LLC v. Perplexity AI, Inc., No. 26-1444, vacating a preliminary injunction against Perplexity's Comet browser and its Assistant. The court read the Computer Fraud and Abuse Act's "whoever . . . intentionally accesses" as contemplating access by a person, and treated the Assistant, however advanced, as a tool for statutory purposes. Applying Van Buren v. United States, 593 U.S. 374, 388 (2021), it concluded on the record before it that "it is the user who 'accesses' Amazon's computers, with the help of the Assistant to carry out specific acts on Amazon.com," so that Amazon was unlikely to succeed on its access claim, and it noted "little to no existing caselaw directly dealing with how to ascribe responsibility for AI agents like the Assistant." The court decided the access question under two statutes on a preliminary record; it did not decide who is liable for what an agent does. This site read the ruling in full on 4 September.
Three weeks after the ruling, on 27 August 2026, Anthropic opened a research preview of the Model Hardware Standard, a specification for agents operating physical devices. Its own worked example is a Genentech protein assay in which Claude settled on about 140 microliters per second for water and 10 for a viscous protein sample and, when bubbles formed during mixing, first chose "to retry the operation in the same plate well with different parameters," which "agitated the fluid further and created more bubbles," until the researchers explained the physics. Anthropic states that it is "developing a physical safety roadmap" and will "use the research preview to build additional safety evaluations with our launch partners."
Put the court and the laboratory together, with the court's limits intact. The agentic AI ruling attributes access, for one statute, to the human user, on a record where the agent's actions were captured in screenshots a court could examine. In the assay the human did not choose the flow rate, did not see the bubbles and did not decide to retry. Whether a comparable attribution will follow for an agent's physical act is an open question, and the ruling's reliance on a reconstructable record suggests what any answer will need: a log of what the agent did that the person named on the experiment can read, which is among the things the safety evaluations Anthropic says it is still building would have to supply.
What the G7, the NSCEB, Q-CTRL, Blaxland and the Ninth Circuit Have in Common: a Requirement Named Before the Test, the Coverage, the Joint Evaluation or the Record Exists
In each field the governing document is dated and the sources themselves identify what is missing: a conformance suite that passes silicon which fails on a data-dependent path, an approval elsewhere and no active reimbursement coverage at home, adjacent sensing capabilities that one office buys and another must defend against, an access ruling built on a record of screenshots where the laboratory example carries none for the user. The costs fall on whoever signs the document the requirement calls for: the supplier warranting a part a known-answer test cleared, the hospital planning around an approval with no coverage decision, the submarine program buying a sensor family that also reveals it, the investigator whose name goes on an experiment an agent ran.
In "Before Q-Day: The Race to Quantum First" (War on the Rocks, 20 July 2026), Mauritz Kop and Joseph Federici wrote that "cryptographic migrations historically take a decade or more," and proposed that the president "name a senior director for quantum readiness with a one-year mandate, quarterly reviews at the deputy level, and an escalation path to the principals" at the National Security Council, where disputes among cyber resilience, export controls, allied diplomacy and military planning can be settled. The week's documents supply the collisions the essay anticipated and add two it did not have to address: a coverage decision missing from a medical instrument, and a court attributing an agent's access before any record of the agent's physical acts exists.
How Quentir Reads It
Our reading is that the four documents describe a single procurement problem with a shape a board can act on. A document that names a requirement without naming the test creates a period in which the requirement can be certified without being met. During that period the party who signs the certificate carries the cost of the difference, and the length of the period is set by how long it takes someone to build the test: an algorithm inventory against a data-dependent soak test, an approval against a coverage decision, a supplier evaluation against a detection-threat assessment, an access ruling against a log the user can read.
For the reader who has to act, one question follows per pillar. Which test cleared the post-quantum part you are buying, and does it exercise the rejection loop. Which coverage and reimbursement pathway would carry the device you are planning around, and in which jurisdiction. Which office evaluates a quantum sensor as a purchase and which as a threat, and have the two exchanged documents. Which log would reconstruct the act an agent performed in your name, and who reads it. The founder's two essays hold the two ends of the answer: test deployed systems, and put one accountable office over the collisions.
Signature Brief 2026.9, "October 19 Comes Before 2030", carries the six dated events of the post-quantum calendar with the primary source for each and a board's questions before 22 October. The public analysis on this site continues daily at quentir.ai/blog.
Sources: G7 Cybersecurity Working Group, "Preparing for the Post-Quantum Era: A Call to Action", published by ANSSI on 3 September 2026 with the participation of the European Commission and the support of ENISA, for the procurement language, the contracting-opportunities sentence and the "economic and business risk" framing, read from the PDF. Jungmin Park, Eunha Kim, Wooseop Kim, Seongjoon Cho and Byungho Cha, "AI-Assisted Design of a Post-Quantum Cryptographic Accelerator: A Deployed-Silicon Case Study", arXiv:2609.04058, 3 September 2026, a preprint that has not been peer reviewed, for the acceptance-gate sentences, the rejection-loop mechanism and the 301,343-signing soak figure, read from the abstract. National Cyber Security Centre, "Post-quantum cryptography (PQC) migration workshop report", 22 July 2026, for the requirements sentence. Australian Signals Directorate, "Planning for post-quantum cryptography" (LATICE), 20 July 2026, read from ASD's LinkedIn Pulse copy because cyber.gov.au was unreachable from this desk, for the cryptographic bill of materials sentence. Block, "Predictable RNG fallback and 32-bit reseed in COLDCARD firmware", 30 July 2026, for the root cause; TRM Labs, "The largest hardware wallet exploit of 2026", 5 August 2026, for Galaxy Research's running tally of about 1,816 BTC, close to USD 116 million, a preliminary figure at the time of that report. Shanghai Medical Products Administration, notice of 13 March 2026 on the NMPA approval of Boruikang's implantable brain-computer interface hand-movement compensation system, for the product, the indication and the first-to-market statement, which is the regulator's own. National Security Commission on Emerging Biotechnology, "NSCEB Releases Analysis for Securing U.S. Leadership in Brain-Computer Interfaces", 2 September 2026, for the March 2026 approval statement and the four quoted gaps, including the absence of active CMS reimbursement coverage. Q-CTRL, "Q-CTRL Achieves World's First GPS-Free Quantum Gravimetric Navigation Demonstration in Maritime Field Trial", 27 August 2026, for the Coral Sea result, the no-radio-signal statement, the magnetic navigation sibling system and the organizations named, all of which are the company's own account and none of which is a procurement record. John Blaxland, "Undersea Power: A Framework for Evaluating AUKUS", submission of 28 August 2026 to the AUKUS Public Inquiry, an independent civil-society review, made in the author's private capacity, for the magnetic anomaly detection passage. United States Court of Appeals for the Ninth Circuit, Amazon.com Services, LLC v. Perplexity AI, Inc., No. 26-1444, filed 4 August 2026, for the disposition, the tool-for-statutory-purposes reading, the "it is the user who accesses" conclusion on the preliminary record and the caselaw statement; Van Buren v. United States, 593 U.S. 374 (2021), as cited there. Anthropic, "Model Hardware Standard: research preview", 27 August 2026, for the specification, the Genentech assay figures and the safety-roadmap sentences. Mauritz Kop, "A Bletchley Park for the Quantum Age", War on the Rocks, 6 November 2025, for the recommendation to test deployed systems and the distributed accredited laboratories; Mauritz Kop and Joseph Federici, "Before Q-Day: The Race to Quantum First", War on the Rocks, 20 July 2026, for the lead-time sentence and the National Security Council recommendation; the first author is the founder of this site. Quentir, Signature Brief 2026.9, "October 19 Comes Before 2030", September 2026, for the dated events of the post-quantum calendar, each of which resolves to a primary source in the Brief's own ledger. The five earlier Quentir posts linked inline are this site's own prior readings and carry their own source lists. The reading that the four documents share one shape, a requirement named before the test, the coverage decision, the joint evaluation or the record that would let anyone meet or verify it, is Quentir's own.
Published intelligence, built to inform your own decisions. Published: September 4, 2026.