{
  "chain_slug": "algorand",
  "name": "Algorand",
  "scorecard_profile": "L1",
  "evaluated_at": "2026-04-18",
  "evaluator": "layerqu-v2-scoring-agent-1",
  "v1_reference": "chainscreen-v1-archive",
  "dimensions": {
    "1_cryptographic_exposure": {
      "weight": 0.15,
      "score": 72,
      "sub_scores": {
        "1a_primitive_inventory": {
          "score": 18,
          "primitives_named": [
            "Ed25519 (default signatures + VRF)",
            "Falcon-1024 / FN-DSA (LogicSig PQC accounts)",
            "BLS12-381 (state proofs)",
            "SHA-512/256"
          ],
          "evidence": [
            "https://algorand.co/blog/technical-brief-quantum-resistant-transactions-on-algorand-with-falcon-signatures",
            "https://algorand.co/technology/post-quantum"
          ],
          "note": "Complete inventory; explicit PQC primitive named."
        },
        "1b_shor_grover_pq_tag": {
          "score": 16,
          "tags": {
            "Ed25519": "Shor-break",
            "Falcon-1024": "PQ-safe (NIST FIPS 206 / FN-DSA)",
            "BLS12-381": "Shor-break",
            "SHA-512/256": "Grover-weaken-128bit"
          },
          "evidence": [
            "https://algorand.co/technology/post-quantum"
          ]
        },
        "1c_algorithm_family_diversity": {
          "score": 12,
          "families_represented": 1,
          "families": [
            "lattice (Falcon)"
          ],
          "note": "One PQC family deployed (lattice via Falcon-1024). Monoculture risk: no hash-based fallback (e.g. SLH-DSA)."
        },
        "1d_nist_security_category": {
          "score": 14,
          "mappings": {
            "Falcon-1024": "NIST Category 5 (256-bit classical equiv)"
          },
          "evidence": [
            "https://csrc.nist.gov/projects/pqc-dig-sig"
          ]
        },
        "1e_implementation_quality": {
          "score": 12,
          "formal_verification": "Falcon implementation audited; Ed25519 uses constant-time libraries",
          "constant_time": "standard",
          "libraries": [
            "Algorand falcon-signatures (Rust/C)"
          ],
          "evidence": [
            "https://github.com/algorandfoundation/falcon-signatures"
          ]
        }
      },
      "total_artifacts": 5
    },
    "2_hndl_exposure": {
      "weight": 0.1,
      "score": 35,
      "sub_scores": {
        "2a_active_key_exposure": {
          "score": 8,
          "note": "Default Ed25519 accounts expose pubkeys on first tx. 95%+ accounts on Ed25519 per v1."
        },
        "2b_cold_key_exposure": {
          "score": 10,
          "note": "81 months mainnet age; modest cold exposure. Foundation/Kiln ~40% concentration exposed."
        },
        "2c_signature_longterm_validity": {
          "score": 8,
          "note": "Historical Ed25519 sigs forgeable post-Shor. State proofs rely on BLS12-381."
        },
        "2d_encryption_confidentiality": {
          "score": 9,
          "note": "Standard TLS; no PQC KEM in node comms."
        }
      },
      "total_artifacts": 2
    },
    "3_metadata_privacy_exposure": {
      "weight": 0.13,
      "score": 25,
      "sub_scores": {
        "3a_tx_graph_visibility": {
          "score": 5,
          "note": "Pseudonymous transparent ledger."
        },
        "3b_rpc_mempool_concentration": {
          "score": 6,
          "note": "Algonode, PureStake, Foundation RPC; moderate concentration."
        },
        "3c_cross_chain_bridge_correlation": {
          "score": 7,
          "note": "Wormhole + State Proofs bridging; linkable."
        },
        "3d_retroactive_deanon_risk": {
          "score": 7,
          "note": "VRF on Ed25519 curve — Shor breaks VRF proofs, leaking sortition history. Foundation identified this risk."
        }
      },
      "total_artifacts": 2
    },
    "4_migration_architecture": {
      "weight": 0.1,
      "score": 78,
      "sub_scores": {
        "4a_crypto_agility": {
          "score": 20,
          "note": "LogicSig enables PQC signature verification without hard fork. Smooth upgrade process documented."
        },
        "4b_account_abstraction_key_rotation": {
          "score": 18,
          "note": "Rekey primitive allows key-type rotation. LogicSig accounts effectively AA."
        },
        "4c_hard_fork_track_record": {
          "score": 20,
          "note": "81 months of smooth upgrades, no contested forks, xGov governance live."
        },
        "4d_hybrid_deployment_readiness": {
          "score": 20,
          "note": "Falcon LogicSig deployed alongside Ed25519 default — de facto hybrid. Architecturally hybrid is live."
        }
      },
      "total_artifacts": 4
    },
    "5_deployment_execution": {
      "weight": 0.22,
      "score": 35,
      "sub_scores": {
        "5a_mainnet_pqc_pct": {
          "score": 6,
          "mainnet_pqc_pct": 0.5,
          "evidence": [
            "https://algorand.co/blog/technical-brief-quantum-resistant-transactions-on-algorand-with-falcon-signatures"
          ],
          "note": "First mainnet PQC tx Nov 3 2025; Falcon LogicSig opt-in. <1% of tx volume. Stage 3 threshold met."
        },
        "5b_pqc_code_in_client": {
          "score": 10,
          "note": "Falcon library in SDK but native consensus Falcon module not yet merged (2026 roadmap). Testnet code exists; mainnet LogicSig pathway live."
        },
        "5c_validator_pqc_adoption": {
          "score": 0,
          "note": "Consensus still Ed25519. No validator PQC keys."
        },
        "5d_published_milestones_count": {
          "score": 12,
          "count": 4,
          "note": "Four published milestones: (1) Falcon LogicSig (done Nov 2025), (2) native consensus module 2026, (3) Ledger firmware 2026, (4) on-chain quantum-safe toggle vote."
        },
        "5e_pqc_washing_delta": {
          "score": 7,
          "ratio": 1.4,
          "note": "Shipped Falcon LogicSig + SDK; announced full consensus migration for 2026 — moderate overhang."
        }
      },
      "total_artifacts": 4
    },
    "6_supply_chain_vendor_readiness": {
      "weight": 0.22,
      "score": 18,
      "sub_scores": {
        "6a_wallet": {
          "score": 5,
          "top3": [
            "Pera Wallet",
            "Defly",
            "Ledger HW"
          ],
          "pqc_roadmap_count": 1,
          "evidence": [
            "Ledger firmware for PQC keys 2026 roadmap (Algorand Foundation stated)"
          ]
        },
        "6b_bridge": {
          "score": 3,
          "top3": [
            "Wormhole",
            "Algorand State Proofs"
          ],
          "pqc_roadmap_count": 0,
          "evidence": []
        },
        "6c_custodian": {
          "score": 5,
          "top3": [
            "Coinbase Custody",
            "Anchorage",
            "BitGo"
          ],
          "pqc_roadmap_count": 0,
          "evidence": []
        },
        "6d_rpc_hsm": {
          "score": 5,
          "top3": [
            "Algonode",
            "PureStake",
            "Foundation RPC"
          ],
          "pqc_roadmap_count": 0,
          "evidence": []
        }
      },
      "total_artifacts": 2
    },
    "7_governance_coordination": {
      "weight": 0.08,
      "score": 65,
      "sub_scores": {
        "7a_validator_stake_distribution": {
          "score": 12,
          "note": "Nakamoto coef 12; Foundation/Kiln ~40%."
        },
        "7b_upgrade_cadence_under_pressure": {
          "score": 18,
          "note": "Smooth protocol upgrades no contested forks. xGov on-chain grants active."
        },
        "7c_named_coordination_lead": {
          "score": 20,
          "note": "Algorand Foundation with named PQC team. Silvio Micali (cryptography) in leadership."
        },
        "7d_adversarial_coordination_precedent": {
          "score": 15,
          "note": "No direct adversarial precedent, but proactive PQC deployment ahead of threat is strong signal."
        }
      },
      "total_artifacts": 3
    }
  },
  "gates": {
    "hybrid_deployment": "PASS",
    "evidence_reconstruction": "PASS",
    "primitive_naming": "PASS"
  },
  "caps_applied": [
    "mosca_cap_60 (5a=6, sub_score under threshold)"
  ],
  "qri": {
    "raw": 47,
    "after_caps": 47,
    "ci_plus_minus": 5,
    "band": 5,
    "band_name": "Prototyped"
  },
  "migration_stage": 3,
  "mosca_inequality": {
    "X_signature_shelf_life_years": "5-15 (Ed25519 default with rotation via rekey; Falcon for opt-in users)",
    "Y_migration_time_years_range": "5-8",
    "Z_10pct_year": 2036,
    "Z_50pct_year": 2041,
    "danger_zone_at_50pct": false
  },
  "four_scenario_grid": {
    "quantum_never": {
      "value_preserved_pct": 100,
      "privacy_preserved_pct": 100
    },
    "arrives_suddenly_pre_migration": {
      "value_preserved_pct": 25,
      "privacy_preserved_pct": 10
    },
    "arrives_slowly_post_migration": {
      "value_preserved_pct": 95,
      "privacy_preserved_pct": 85
    },
    "arrives_slowly_mid_migration": {
      "value_preserved_pct": 70,
      "privacy_preserved_pct": 50
    }
  },
  "burn_vs_rescue_policy": "undeclared (no formal statement; Foundation implicitly favors migration via rekey)",
  "pqc_washing_ratio": 1.4,
  "vendor_tile_summary": {
    "wallet": {
      "top3": [
        "Pera Wallet",
        "Defly",
        "Ledger HW"
      ],
      "pqc_roadmap_count": 1
    },
    "bridge": {
      "top3": [
        "Wormhole",
        "State Proofs"
      ],
      "pqc_roadmap_count": 0
    },
    "custodian": {
      "top3": [
        "Coinbase Custody",
        "Anchorage",
        "BitGo"
      ],
      "pqc_roadmap_count": 0
    },
    "rpc_hsm": {
      "top3": [
        "Algonode",
        "PureStake",
        "Foundation RPC"
      ],
      "pqc_roadmap_count": 0
    }
  },
  "narrative_summary": "Algorand is the highest-executed PQC chain in batch: first mainnet PQC transaction executed November 3, 2025 using Falcon-1024 (NIST FN-DSA) via LogicSig accounts. 4-step roadmap to full consensus PQC by end-2026. Mosca cap (5a=0.5% PQC traffic) limits QRI ceiling to 60. Silvio Micali-founded Foundation drives deepest cryptographic sophistication among L1s.",
  "evaluator_notes": "Only chain in batch with mainnet PQC execution. Monoculture concern (lattice-only, no hash-based fallback). Consensus still Ed25519. QRI band 5 Prototyped reflects real deployment but limited adoption.",
  "narrative_voiced": "Algorand is the only chain on this list that has actually sent a post-quantum transaction on mainnet, using Falcon-1024 via LogicSig on 3 November 2025. The interesting part is how little it changed. Default accounts still sign with Ed25519 and consensus is unchanged, so the headline ships before the substance does."
}