S07: Post-Quantum for Platforms

NIST standardized ML-KEM, ML-DSA, and SLH-DSA in 2024. CNSA 2.0 deadline is January 2027. Browsers ship X25519Kyber768. OpenSSL 3.5 (mid-2026) is the inflection. By 2029, all NSS-regulated TLS must be quantum-safe. By 2035, no RSA or ECC anywhere.

Post-quantum is a platform workstream, not a flag flip. Crypto inventory, hybrid TLS rollout by tier, signature migration for supply-chain attestations, and hardware migration start in 2026 or miss the window. This series is the four-part playbook.