Treasury's 22 October 2026 COINS Act Proposal Adds Quantum Algorithms and Applications to the Outbound Investment Prohibition: What Section 851.226(j) Says Before 7 December
What Treasury proposed on 22 October 2026
On 22 October 2026 the US Treasury issued a notice of proposed rulemaking to implement the Comprehensive Outbound Investment National Security Act, the COINS Act, which Congress passed in the Fiscal Year 2026 National Defense Authorization Act. The proposal rebuilds the Outbound Investment Security Program that has applied since 2 January 2025 under 31 C.F.R. Part 850. It covers six technology sectors, adds Cuba, Iran, North Korea, Russia and Maduro-era Venezuela to China as countries of concern, and keeps comments open until 7 December 2026.
Why the quantum line moves to software
The existing rule already prohibits US investment in covered companies that build quantum computers and their critical components, and in quantum sensing and networking limited by military, intelligence, mass-surveillance or other specified end uses. The proposal would add the development of quantum algorithms and applications; its preamble promises an end-use limitation for that clause, which the draft rule text does not visibly carry. In AI the notification tier disappears: any covered investment in a company developing what the proposal now calls a super intelligence system would be prohibited. The obligation to classify each deal sits with the investor, under a reasonable and diligent inquiry standard and without a Treasury list of covered companies. Nothing changes until a final rule sets an effective date. This post reads the proposal closely and asks where a quantum software company would fall.
Google's Magic-State Cultivation Result in Science, 15 October 2026: What the Willow Experiment Tests in the Under-a-Million-Qubit RSA-2048 Estimate
What Google published in Science on 15 October 2026
Google Quantum AI reports in Science that magic-state cultivation, a technique its researchers proposed in 2024, works on real hardware. On the Willow processor the team measured an upper bound of about 1 × 10-4 on the error of cultivated T-type magic states, roughly 40 times lower than without cultivation, counting only the runs with no detected error; about 8% of attempts were kept. In a separate step it grafted a cultivated state from a small color code into a distance-5 surface code. Magic states supply the non-Clifford operations needed for universal fault-tolerant computation, and they are among its most costly ingredients.
Why the result matters for RSA-2048 and post-quantum planning
Craig Gidney's May 2025 estimate that a machine with fewer than one million noisy qubits could factor a 2048-bit RSA key in under a week relies partly on cultivation to shrink the space spent on magic states. The new paper is the first hardware test of that assumption. It confirms the mechanism at small scale and leaves the scale-up open: the measured error bound of about one in 10,000 sits roughly six orders of magnitude above the one-in-10-billion magic-state quality cited for breaking RSA-2048. This post reads the paper closely and sets it beside NIST's proposed transition dates for post-quantum cryptography and the separate procurement and platform deadlines already running.
DARPA Moves IBM, IonQ, Atom Computing and Diraq Into Stage C of the Quantum Benchmarking Initiative on 7 October 2026: What Government Testing of Their Hardware Must Show by 2033
What DARPA announced on 7 October 2026
The U.S. Defense Advanced Research Projects Agency moved four companies into Stage C of its Quantum Benchmarking Initiative: Atom Computing with neutral-atom arrays, Diraq with silicon CMOS spin qubits, IBM with modular superconducting processors and IonQ with trapped ions. They join Microsoft and PsiQuantum, which reached Stage C through an earlier DARPA pilot. Since mid-2024 the initiative has evaluated more than 20 companies. Its question is whether any approach can reach utility-scale operation, meaning computational value above cost, by 2033.
How Stage C differs from the first two stages
Stages A and B judged concepts and research plans, with awards of up to $1 million and $15 million. In Stage C a government evaluation team works alongside each company and tests its hardware to see whether the proposed machine can be constructed as designed and operated as intended. DARPA's program page puts Stage C awards at up to $300 million per performer.
Why outside testing matters for buyers and investors
Quantum roadmaps have so far been judged mostly on the vendors' own milestones. IBM, for one, says it expects to deliver its first fault-tolerant system in 2029. DARPA will now report its independent verification results to other U.S. government stakeholders. If those findings become accessible beyond government, hospitals, banks, ministries and investors that buy on roadmaps could gain a second reference point.
Prof. Mauritz Kop Invited to the Inaugural ACM PQQS 2026 in Silicon Valley, With Turing Award Laureate Charles Bennett, Dan Boneh, and Google Quantum AI's Ryan Babbush
Prof. Mauritz Kop, Founder of the Stanford Center for Responsible Quantum Technology and of Quentir, has been invited to speak at ACM PQQS 2026, where Turing Award laureate Charles Bennett of IBM Research also gives a keynote. The first ACM Conference on Post-Quantum and Quantum-based Security runs from November 2 to 4, 2026 in Silicon Valley near San Jose. The program lists his affiliations at CIGI and the U.S. Air Force Academy, and his talk is titled The Race to Quantum First: Building a Secure and Responsible Quantum Future.
A New ACM Venue for Quantum-Era Security
ACM's security community built PQQS as a new annual forum for post-quantum cryptography, quantum cryptography, and the security of quantum computing systems. The program combines twenty-six peer-reviewed papers with keynotes by Charles Bennett of IBM Research, Stanford's Dan Boneh, Google Quantum AI's Ryan Babbush, ETH Zurich's Renato Renner, and Cisco Research's Ramana Kompella, invited talks by Bart Preneel, Reza Nejabati, Vipul Goyal, Yevgeniy Dodis, and J.R. Rao, and a panel with Dustin Moody, who leads the NIST post-quantum cryptography project, and Michele Mosca.
Kop's Talk: Procurement, the LSI Test, and Allied Coalition Scale
Kop's talk treats the race to quantum first as a contest for power and proposes a governance agenda that makes responsible innovation an instrument of strategic leadership: public procurement that accelerates post-quantum adoption, the LSI test for security measures, a hospital example for critical infrastructure, coalition scale among allies, and a European Quantum Act architecture. It builds on Stanford RQT's foundational work and on his War on the Rocks essays read across the U.S. national security community.
Prof. Mauritz Kop Invited to Co-Opting AI: Quantum at the University of Virginia, on Quantum, AI, and Geopolitics With Paul Davies and Shohini Ghose
Prof. Mauritz Kop, Founder of the Stanford Center for Responsible Quantum Technology and of Quentir, has been invited to speak at Co-Opting AI: Quantum, the University of Virginia's public conversation on Wednesday, October 28, 2026, from 4:00 to 5:15 PM Eastern Time. The online event is hosted by UVA's Digital Technology for Democracy Lab, NYU's Institute for Public Knowledge, and Sloane Lab, with the physicists Paul Davies and Shohini Ghose and with Professor Mona Sloane as host.
Co-Opting AI: Quantum on October 28 Examines What Quantum Inherits From AI
The organizers frame the episode around an inheritance: quantum computing is arriving into institutions, supply chains, and geopolitical formations already shaped by AI. Quantum computers already reach users through the cloud platforms that serve AI, and both technologies now sit inside export-control and supply-chain strategy. That is where Kop's work on the race to quantum first applies, and where decisions taken before 2030 will shape the quantum order.
Davies, Ghose, Kop, and Sloane on One Program
Davies, director of the Beyond Center at Arizona State University, and Ghose, who served on the Advisory Council for Canada's National Quantum Strategy, bring physics and national strategy. Sloane, who has convened Co-Opting AI since 2019, brings the sociology of technology. Kop brings the Stanford RQT scholarship, his War on the Rocks essays, and his advisory work for the U.S. Government, including the Pentagon and the Department of State, on quantum strategy. The session is open to the public and will be recorded for registered viewers.
A Regulation, an Order, a Committee, a Tender: Quantum's Sovereign Summer
One summer, four instruments
Between June 17 and August 4, 2026, four governments moved on quantum technologies with four different legal tools. The European Union adopted Regulation 2026/1386, making foreign-investment screening mandatory in every member state for quantum, semiconductors and specified AI technologies. A US executive order set dated post-quantum migration deadlines for federal high-value and high-impact systems: key establishment by the end of 2030, digital signatures by 2031. China's industry ministry chartered a national quantum standards committee, MIIT/TC10. Israel announced a procurement initiative for a domestically built quantum computer.
Four levers, one pattern
Each government reached for the lever where its leverage already lies. The United States governs the systems it operates, the EU governs the capital that buys in, China writes the standards industry will inherit, and Israel moves to buy a national platform beyond its first domestic machine. Each instrument also defers its binding content to a later text: migration plans and pilots, national screening mechanisms by early 2028, standards and tender documents still unpublished.
Why the calendar matters
This analysis reconstructs the timeline from the primary instruments and the contemporaneous record, reads the four instruments as one governance event, and sets out the dated moments that will decide what each of them means in practice for builders, investors and public institutions.
Science: A New Golden Age: The White House, Quantum, and the Genesis Mission
A national science design meets quantum
The White House report Science: A New Golden Age argues that federal science should shape the arena in which discovery happens. Its central case is the Genesis Mission, an AI-for-science program built around Department of Energy laboratories, scientific instruments, computing systems and public-private partnerships. Quantum information science runs through the report as both a strategic field and a demanding test of that institutional design.
The discovery engine needs a verifier
Quantum materials, error-correction searches and device characterization fit the Mission’s emphasis on large scientific search spaces. Yet faster generation creates a second burden. The report calls for verification capacity equal to the new discovery machinery. Recent quantum-computing claims show why: confidence bounds, independent replication and strong classical challengers determine whether an apparent advantage can survive scrutiny. Quantum verification infrastructure therefore belongs inside the discovery system, not at its edge.
Coordination will decide the reach
The Genesis Mission supplies a model for connecting national laboratories, private research capacity and shared facilities. Quantum adds cryptography, networks, sensing, AI and supply chains to the same strategic calendar. The open implementation question is whether those domains will share priorities, access rules and measures of progress. That choice will shape whether AI for science accelerates isolated experiments or a durable national quantum capability.
IBM Put the Skeptics Inside the Quantum Experiment
Three results, one problem of trust
IBM and its research partners published three quantum-advantage claims in late July 2026. Each reaches a regime where direct classical checking becomes difficult or unavailable. That is where the papers become interesting. They do not ask readers to accept a faster or larger machine on reputation alone. They build different checks into the work: error detection and statistical bounds, independent mitigation methods, cross-platform repetition and tests that shift the checking problem onto a characterized noise model.
The cost of rejecting bad runs
In the University of Chicago experiment, a 70-qubit circuit used spacetime codes to detect faults. Postselection suppressed gate errors tenfold and produced a fidelity lower bound of 0.284 with 95% confidence. The price was steep: the effective sampling rate fell by a factor of 860. That number makes the paper useful beyond physics. It exposes the quantum verification cost instead of hiding it behind a final performance claim.
A claim designed to meet its challengers
The other papers compare mitigation methods, repeat selected circuits on Quantinuum hardware, test smaller instances where exact solutions exist and recover known analytical limits. None has yet completed peer review, and none settles the wider contest between quantum and classical computation. Together, however, they show a better institutional shape for quantum advantage claims: the method for finding error travels with the claim, while independent researchers still get the final word.
The Quantum Foundry Deal That Cleared Without Its Safeguards
A foundry changes hands
IonQ completed its acquisition of SkyWater Technology on July 31, 2026, bringing a major US semiconductor foundry inside a quantum-computing company. The transaction promises tighter coordination between design, fabrication and testing. It also places a supplier used by several quantum developers under the ownership of one of their competitors. That tension turned an industrial transaction into a live test of quantum supply-chain competition.
Two commissioners, two market theories
The Federal Trade Commission ended its review after Chairman Andrew Ferguson and Commissioner Mark Meador reached different conclusions. Ferguson said the deal could create short-term foreclosure and confidentiality risks. He favored an order covering equal access, information firewalls, switching assistance, arbitration and independent monitoring. Meador found the available record too weak to show likely competitive harm, pointing to other fabrication routes, low foreclosure shares and new public investment in domestic capacity.
The unresolved access question
The acquisition closed without those conditions. IonQ says SkyWater will retain its merchant-foundry model and continue serving customers. The public record therefore leaves a precise trusted foundry access question: whether commercial promises and ordinary contracts will preserve neutral treatment during the years before alternative US capacity becomes fully available. Quentir reads the split as an early signal that quantum industrial policy and antitrust are now operating on the same physical bottleneck.
The Quantum Laboratory Has an Overnight Shift
An agent is taking the overnight shift
Four preprints posted within two days put AI agents inside quantum sensing, neutral-atom experiments, error-correcting-code discovery and hardware design. In one diamond-sensing run, software selected a nitrogen-vacancy center, calibrated its resonant frequency, measured coherence and added a pulse sequence to investigate a weak feature. A separate workflow moved from a paper or patent to an overnight campaign on two cloud-accessible neutral-atom processors. These are early research reports, yet they show autonomous quantum experiments becoming concrete enough to govern.
The failures are part of the finding
The neutral-atom authors also describe an inadequate observable and a plausible but wrong hardware diagnosis, both caught by domain experts. Another paper, ContractHIL-HLS, translates natural-language requirements into interfaces, constraints, validation checks and rollback rules, then feeds hardware results back into revision. The emerging issue is the chain of delegated judgment: who set the goal, which actions software selected, what the instrument measured and which person accepted the interpretation.
The handoff becomes an institutional object
Quentir reads the cluster as a move toward instrument delegation. Scientific credit, product assurance, intellectual property and procurement meet at the handoff between machine-selected action and an accepted result. Laboratories may gain speed and preserve more failed branches than ordinary notebooks capture. Trust will depend on visible permission, independent validation and named human acceptance, especially when these methods later shape sensors, chips, diagnostics or security systems.
Peptide Space Has a Population Problem
The blind spot begins in immune genetics
Human leukocyte antigen genes vary sharply across populations, while the datasets used to train peptide-design models are much richer for some HLA alleles than for others. A July 2026 bioRxiv preprint from a DTU-led team asks whether a different source of randomness can help a generative model search the sparse parts of peptide space. The group trained on 105,970 peptide-HLA pairs and compared conventional priors with samples from a 32-mode photonic processor.
Quantum sampling changes the search
The model using a quantum-derived prior produced modestly more predicted strong binders overall, with its clearest gains among alleles where the classical baseline performed poorly. The researchers then synthesized candidates for three understudied alleles and tested whether the peptides stabilized MHC class I complexes in the laboratory. Many did, although one difficult allele also produced failures. The result is biologically interesting because it reaches beyond a simulation while remaining far from a therapeutic claim.
The claim stays narrower than quantum advantage
The authors state that their system remains classically simulable and does not demonstrate quantum advantage. Peptide-MHC binding also does not prove immune activation. The governance significance lies elsewhere: a hardware choice may influence which populations a biomedical model serves well. That connects biomedical AI governance with procurement, data representativeness and the terms under which a supplier’s technical claim enters a future product file.
Six Qubits Meet a Planet’s Worth of Data
A small machine enters a planetary data system
ESA has begun installing Equal1’s Bell-1 at its Earth-observation center in Frascati. The machine has six silicon spin qubits, operates at about 0.3 kelvin and draws 1.6 kW, close to the power demand of one high-end enterprise server. Its scale is modest beside ESA’s data holdings. That mismatch is the point. The agency is testing whether a compact, on-premises quantum computer can become a useful part of a hybrid stack built around classical high-performance computing.
The work begins with bounded use cases
The one-year internal research period is expected to include hybrid quantum neural networks for land-use and land-cover classification and work on satellite mission planning. ESA plans a pilot demonstration by the end of 2026, followed by a workshop with Equal1 after the pilot. The program creates a public test of hybrid quantum computing under real institutional conditions: noisy geospatial data, existing infrastructure, small hardware and applications that matter to climate science and disaster response.
The outcome depends on comparison
Installation alone says little about advantage. Useful results will separate quantum contribution from classical preprocessing, compare the same task against strong classical baselines and disclose error, runtime, energy use and data-movement costs. That is how a six-qubit experiment can improve Earth observation governance even if no dramatic speedup appears. A carefully bounded negative result may save public institutions from scaling the wrong architecture, while a reproducible gain could show where compact quantum hardware belongs inside ordinary data centers.
NVIDIA’s 347-Fold Quantum Decoder Result Has a Hardware Footnote
The multiplier has coordinates
NVIDIA reports that its Ising Decoder ColorCode 1 Fast produced a 347.7-fold improvement in logical error rate and a 7.3-fold runtime improvement over raw Chromobius decoding in one stated benchmark: a distance-31 triangular color code at a physical error rate of 0.3%. The speed comparison also has a hardware split. The pre-decoder ran at FP8 precision on one NVIDIA GB300 GPU, while Chromobius ran on one Grace Neoverse-V2 CPU, using single-shot X-basis measurements. The result gives quantum error correction a striking new performance number with unusually visible conditions.
AI is proposed for the correction loop
The system uses a small three-dimensional convolutional neural network as a pre-decoder. In simulation, it handles many local error syndromes, then passes the remaining problem to Chromobius. NVIDIA presents that architecture as a path toward real-time decoding; the cited work does not report integration with a quantum processor or a live feedback system. Model depth, synthetic training data and hardware-specific noise assumptions shape the reported result.
Governance moves down the stack
NVIDIA has released the model, training recipes and supporting tools as open resources. That helps scrutiny and adaptation, while leaving independent validation and hardware transfer open. For procurement, security and capability forecasting, the proposed AI pre-decoder belongs inside the assessed configuration. A headline multiplier cannot stand alone; its benchmark coordinates and operating conditions determine what the claim can support.
When a Quantum Computer Misses the Temperature
A thermometer for simulation
Gibbs states describe how a physical system distributes itself across energy levels at a given temperature. They sit beneath work in chemistry, materials science, thermodynamics and some forms of machine learning. A newly published experiment on IonQ trapped-ion hardware prepared these states with a hybrid quantum-classical method and then measured how closely the machine matched the target. The result gives quantum simulation fidelity an unusually intuitive test: did the computer reproduce the temperature it was asked to model?
The machine returned a warmer answer
The researchers found that fidelity fell as the target became colder and as the simulated system grew. More strikingly, a state prepared for one inverse temperature often resembled a warmer state more closely. Hardware noise had a thermodynamic signature. That matters because a small temperature mismatch can change which molecular configurations or material phases appear probable, even when the circuit ran as designed.
Why the mismatch travels
The paper is a compact study, not a claim of scientific advantage. Its institutional importance lies in how clearly it connects physics to assurance. A useful quantum model validation regime will need to report the distance between requested and realized conditions, the architecture used, and how error grows with scale. The same discipline belongs in scientific procurement, pharmaceutical research governance and public claims about useful quantum machines.
The Quantum Contest Moves Upstream
The contest before the computer
Two July funding calls reveal where the quantum race is moving. Google Research is asking universities for algorithms that can work within the severe limits of early fault-tolerant machines. Germany’s Fraunhofer INQUBATOR is asking companies to bring real problems in medicine, cybersecurity, insurance and automotive logistics into a ten-month testing program. Together, the calls turn early fault-tolerant quantum computing into a contest over which questions deserve scarce research time.
Why use-case selection matters
A grant call looks administrative, yet its categories can shape laboratories, patents, skills and public investment. The winning proposals will help define what counts as a plausible quantum application before the hardware is mature enough to settle the argument. That gives program design an unusual form of market power: it can direct scientists toward particular social needs while giving firms an early view of technical limits.
The public bargain inside the funding
The strongest proposals will connect resource estimates to human consequences. A medical optimization claim carries different duties from a materials or logistics claim because errors, access and accountability fall on different people. Quentir reads the two calls as a test of quantum industrial policy: whether public and corporate sponsors can reward intellectual ambition without allowing speculative use cases to harden into procurement assumptions.
Can a quantum computer stay calibrated long enough to matter?
Why calibration now matters
An 8 July 2026 Nature paper on reinforcement-learning control of quantum error correction makes a quiet but important point: useful quantum computers cannot keep stopping to tune themselves. They need physical control that can adapt during computation, because the relevant workloads may run for days or months. That turns quantum error correction from a laboratory threshold story into a runtime governance question, with practical consequences for anyone tracking how fast cryptographically relevant capability is moving.
The security connection
The same runtime issue matters for post-quantum planning. If powerful quantum computers arrive through better control, memory and classical-control hardware rather than through a sudden headline qubit count, migration timelines will look different. The article reads the Nature result alongside ETH Zurich’s mechanical-memory architecture, HiSEP-Q 2 control hardware and an ETSI GS QKD 014 VPN prototype, all pointing to the hidden machinery beneath public roadmaps.
Quentir’s read
The practical signal is that post-quantum readiness should watch the control layer, not only algorithm standards or vendor roadmaps. Calibration, drift, memory and standards integration now sit close to the civic problem: whether encrypted medical, financial, identity and public records can remain trustworthy while quantum capability improves beneath the policy surface. This is a technical story, but it is also a public-trust story.
The Machine Behind the Machine: ASML and America’s AI-Quantum Industrial Future
The chokepoint inside the chip race
ASML sits at the point where AI ambition, semiconductor capacity, quantum hardware, export controls and supply-chain diplomacy converge. Its EUV and High-NA EUV systems are not ordinary factory equipment. They are the physical instruments that make the most advanced logic and memory roadmaps manufacturable, and they depend on a dense international supplier base that cannot be rebuilt quickly by statute or slogan.
Why America should read ASML operationally
For the United States, the practical question is broader than whether new fabs are announced in Arizona, Ohio, Texas or New York. The harder question is whether the American semiconductor revival has enough lithography capacity, service depth, trained operators, metrology discipline, export-control coordination and upstream component resilience to turn capital expenditure into durable yield. ASML’s current record shows both the promise and the fragility: first High-NA installation in 2024, Q1 2026 net sales of €8.8 billion, and a 2025 supplier base of about 5,100 companies.
The strategic outlook
This special edition treats ASML as a strategic instrument. Control of advanced lithography shapes the pace of AI accelerators, high-bandwidth memory, advanced packaging roadmaps, silicon photonics, cryogenic control electronics and eventually scalable quantum devices. The United States does not need to own ASML to benefit from it. It does need a mature policy for the semiconductor supply chain in which tools, talent, export licenses, allies and service logistics are treated as one system.
The quantum sovereignty stack has a contract layer
Why this matters
Quantum is starting to move through a different commercial channel. The newest signals from Australia, Canada, China, Hong Kong and NIST point away from one universal quantum market. They point to national compute capacity, strict local data rules, secure communications work and supplier promises that have to survive procurement review.
The operating question
The useful question is no longer whether quantum computers will eventually be faster. For regulated sectors, the question is where sensitive workloads may run, who owns the model or sensor output, and whether the cryptography around the system can rotate when NIST, NSA or a supervisor changes the baseline. That is a quantum sovereignty question as much as a technical one.
Quentir's read
This post reads the week as a chronology: Queen's and Sherbrooke linking sovereign AI compute to quantum and PQC, NIST sharpening crypto-agility practice, Archer buying IonQ access for an Australia-facing stack, and HKMA warning that AI finance stress and quantum threats now belong in the same supervisory conversation. It also separates standards movement from supplier storytelling: CSWP 39 is a governance source, while Archer's fraud-detection result is an early benchmark that still needs scoping. The commercial object is contract-ready quantum governance.
Quantum hardware claims need error budgets now
Why accuracy is the signal
Quantum hardware news is starting to sound less like a race for the largest device and more like a test of usable performance. Quantinuum’s Helios reporting, Fujitsu’s Kawasaki roadmap and new quantum-sensing claims all point in the same direction: buyers will need to ask what accuracy, repetition rate, connectivity and operating context sit underneath each quantum hardware claim.
The procurement gap
That shift matters because the commercial story has moved faster than the contract language around it. Fujitsu says 96% of surveyed executives expect quantum computing to deliver value, while only 58% are discussing strategy. Ohio State’s NSF-backed sensing testbed and Xdotz’s industrial current-sensing demonstration add another layer: quantum systems are moving toward energy, biomedical, finance and industrial settings where ordinary warranties and liability clauses may not describe the new technical risk.
Quentir’s reading
The useful unit is an error budget for quantum adoption: how many operations, measurements or sensor readings are needed before a claim becomes operationally meaningful, who validates the number, and which contract term carries the duty when the system is embedded in a workflow. That is a different question from excitement about qubits. It is where standards, procurement and IP allocation begin to meet.
What Counts as Quantum-Safe After the Department of War Strategy?
The new line around quantum-safe
The Department of War post-quantum cryptography strategy, reported on 1 July 2026, does more than set a deadline. It narrows what can count as quantum-safe security for defense networks: native asymmetric PQC and CNSA 2.0 paths are in; QKD, quantum networking, non-local randomness, proxy-only overlays, simple key-size increases and symmetric pre-shared-key workarounds are out.
What Q-Day means
Q-Day is the point at which a cryptographically relevant quantum computer can break widely used public-key cryptography. The practical risk starts earlier, because long-lived data, signatures, certificates and authentication records can be harvested now and attacked later. That is why the strategy treats Q-Day as a migration horizon rather than a calendar prediction.
Why the exclusions matter
That exclusion list changes the procurement conversation. A vendor cannot rely on a quantum-labeled channel, a gateway wrapper or a future network claim if the protected system still depends on legacy cryptography underneath. The useful question becomes simpler and harder: which primitive protects which data flow, which system owner accepts the migration duty, and which deadline governs retirement of the old path?
Quentir’s reading
The strategy also travels beyond defense. It specifies NIST, IETF and NATO cooperation on crypto-agility, while OMB implementation guidance pushes agencies toward inventories, provider coordination, automation where feasible and 120-day migration planning. For contractors and cloud suppliers, PQC migration governance is becoming less about announcing a quantum program and more about proving that old algorithms can be found, replaced and kept out.