{
  "chain_slug": "cardano",
  "name": "Cardano",
  "scorecard_profile": "L1",
  "evaluated_at": "2026-04-18",
  "evaluator": "layerqu-v2-scoring-agent-1",
  "v1_reference": "chainscreen-v1-archive",
  "dimensions": {
    "1_cryptographic_exposure": {
      "weight": 0.15,
      "score": 40,
      "sub_scores": {
        "1a_primitive_inventory": {
          "score": 14,
          "primitives_named": [
            "Ed25519 (tx sigs + VRF)",
            "KES Key-Evolving Signatures (Ed25519-based)",
            "BLAKE2b-256 (block hashes)",
            "BLAKE2b-224 (Shelley address derivation)",
            "PlonK/Halo2 (Midnight ZK-SNARKs; elliptic curve based)"
          ],
          "evidence": [
            "https://docs.cardano.org/about-cardano/learn/ouroboros-overview/",
            "https://coinpedia.org/news/charles-hoskinson-post-quantum-plan-revealed-backed-by-google-and-microsoft-research/",
            "https://docs.cardano.org/"
          ],
          "note": "KES rotation every ~36 hours limits exposure. eUTXO + BLAKE2b-224 hash addresses hide keys until first spend."
        },
        "1b_shor_grover_pq_tag": {
          "score": 13,
          "tags": {
            "Ed25519": "Shor-break",
            "KES (Ed25519-based)": "Shor-break",
            "BLAKE2b-256": "Grover-weaken-128bit",
            "BLAKE2b-224": "Grover-weaken-112bit",
            "PlonK/Halo2": "Shor-break (EC-based)"
          },
          "evidence": [
            "https://docs.cardano.org"
          ]
        },
        "1c_algorithm_family_diversity": {
          "score": 2,
          "families_represented": 0,
          "families": [],
          "note": "Nightstream lattice-based ZK replacement in development. Mainnet primitives classical-only."
        },
        "1d_nist_security_category": {
          "score": 3,
          "mappings": {},
          "note": "FIPS 203-206 alignment declared by IOG but no mainnet mapping yet."
        },
        "1e_implementation_quality": {
          "score": 8,
          "formal_verification": "Ouroboros peer-reviewed (Crypto/Eurocrypt). Haskell type system for cardano-node.",
          "constant_time": "standard libsodium Ed25519",
          "libraries": [
            "libsodium",
            "cardano-crypto-class",
            "cryptonite"
          ],
          "evidence": [
            "https://github.com/IntersectMBO/cardano-node"
          ]
        }
      },
      "total_artifacts": 3
    },
    "2_hndl_exposure": {
      "weight": 0.1,
      "score": 35,
      "sub_scores": {
        "2a_active_key_exposure": {
          "score": 8,
          "note": "eUTXO + BLAKE2b-224 hash-of-pubkey addresses. Keys hidden until first spend (Bitcoin-like). Estimated 30-50% ADA in exposed-key UTXOs."
        },
        "2b_cold_key_exposure": {
          "score": 9,
          "note": "Mainnet since Sept 2017 (Byron era, 102 months). Long history; many wallets never spent. IOG/Foundation/Emurgo ~20% allocation."
        },
        "2c_signature_longterm_validity": {
          "score": 8,
          "note": "KES rotation (~36hr) limits block-producer key exposure. Account Ed25519 sigs Shor-breakable but hashed address hides key pre-spend."
        },
        "2d_encryption_confidentiality": {
          "score": 10,
          "note": "Ouroboros Praos p2p via TLS; MuxTime protocol. Standard NaCl for node-to-node."
        }
      },
      "total_artifacts": 2
    },
    "3_metadata_privacy_exposure": {
      "weight": 0.13,
      "score": 25,
      "sub_scores": {
        "3a_tx_graph_visibility": {
          "score": 5,
          "note": "eUTXO pseudonymous. Midnight (privacy sidechain launched Mar 2026) adds optional privacy via ZK-SNARKs."
        },
        "3b_rpc_mempool_concentration": {
          "score": 7,
          "note": "3000+ SPOs; self-hosted nodes common; AWS concentration among SPOs noted."
        },
        "3c_cross_chain_bridge_correlation": {
          "score": 6,
          "note": "Limited bridges (Wanchain, Milkomeda). Cardano-native ecosystem."
        },
        "3d_retroactive_deanon_risk": {
          "score": 7,
          "note": "Ed25519 Shor-broken; hashed addresses limit retroactive pubkey exposure pre-spend but post-spend is exposed."
        }
      },
      "total_artifacts": 2
    },
    "4_migration_architecture": {
      "weight": 0.1,
      "score": 55,
      "sub_scores": {
        "4a_crypto_agility": {
          "score": 14,
          "note": "Hard Fork Combinator enables smooth protocol upgrades. eUTXO + Plutus V3 scripts allow custom verification logic. KES rotation model already uses forward-secure signatures."
        },
        "4b_account_abstraction_key_rotation": {
          "score": 10,
          "note": "eUTXO script addresses provide some AA-like flexibility. No native AA."
        },
        "4c_hard_fork_track_record": {
          "score": 16,
          "note": "Byron→Shelley (2020), Alonzo (2021), Vasil (2022), Chang (2024), Voltaire/CIP-1694 (Mar 2026). Smooth Hard Fork Combinator executions; no outages."
        },
        "4d_hybrid_deployment_readiness": {
          "score": 15,
          "note": "Proof chain strategy (Mithril certificates with PQC signatures for historical integrity) is explicitly hybrid. Nightstream adds lattice ZK alongside classical."
        }
      },
      "total_artifacts": 4
    },
    "5_deployment_execution": {
      "weight": 0.22,
      "score": 12,
      "sub_scores": {
        "5a_mainnet_pqc_pct": {
          "score": 0,
          "mainnet_pqc_pct": 0,
          "evidence": [],
          "note": "no mainnet PQC traffic"
        },
        "5b_pqc_code_in_client": {
          "score": 3,
          "note": "No PQC in cardano-node. Nightstream (lattice ZK) in development."
        },
        "5c_validator_pqc_adoption": {
          "score": 0,
          "note": "SPOs use Ed25519 + KES. No PQC."
        },
        "5d_published_milestones_count": {
          "score": 4,
          "count": 2,
          "note": "Nightstream project + Mithril PQC certificate strategy announced. No dated mainnet activation."
        },
        "5e_pqc_washing_delta": {
          "score": 5,
          "ratio": 1.3,
          "note": "Hoskinson vocal on PQC; Nightstream announced with Linux Foundation/Google/Microsoft Research but no shipped code. Modest overhang."
        }
      },
      "total_artifacts": 3
    },
    "6_supply_chain_vendor_readiness": {
      "weight": 0.22,
      "score": 10,
      "sub_scores": {
        "6a_wallet": {
          "score": 3,
          "top3": [
            "Lace",
            "Eternl",
            "Yoroi"
          ],
          "pqc_roadmap_count": 0,
          "evidence": []
        },
        "6b_bridge": {
          "score": 1,
          "top3": [
            "Wanchain",
            "Milkomeda",
            "limited"
          ],
          "pqc_roadmap_count": 0,
          "evidence": []
        },
        "6c_custodian": {
          "score": 4,
          "top3": [
            "Coinbase Custody",
            "Anchorage",
            "Kraken"
          ],
          "pqc_roadmap_count": 1,
          "evidence": [
            "Coinbase Custody general PQC-awareness"
          ]
        },
        "6d_rpc_hsm": {
          "score": 2,
          "top3": [
            "Blockfrost",
            "Koios",
            "Maestro"
          ],
          "pqc_roadmap_count": 0,
          "evidence": []
        }
      },
      "total_artifacts": 2
    },
    "7_governance_coordination": {
      "weight": 0.08,
      "score": 60,
      "sub_scores": {
        "7a_validator_stake_distribution": {
          "score": 12,
          "note": "3000+ SPOs, Nakamoto coefficient ~25-35 (Edinburgh estimates 50+). Best validator distribution in top 10 L1s."
        },
        "7b_upgrade_cadence_under_pressure": {
          "score": 15,
          "note": "Voltaire completed March 2026. Consistent hard fork cadence 2020-2026."
        },
        "7c_named_coordination_lead": {
          "score": 16,
          "note": "Intersect MBO (member-based org, March 2024), IOG (Charles Hoskinson), Cardano Foundation, Emurgo. Post-Voltaire tripartite governance: DReps, Constitutional Committee, SPOs."
        },
        "7d_adversarial_coordination_precedent": {
          "score": 17,
          "note": "Successfully executed L1→Voltaire transition. Hoskinson vocal on PQC tradeoffs. Most advanced on-chain governance among major L1s."
        }
      },
      "total_artifacts": 4
    }
  },
  "gates": {
    "hybrid_deployment": "PASS",
    "evidence_reconstruction": "PASS",
    "primitive_naming": "PASS"
  },
  "caps_applied": [
    "mosca_cap_60",
    "sutor_stage_cap_2"
  ],
  "qri": {
    "raw": 26,
    "after_caps": 26,
    "ci_plus_minus": 7,
    "band": 3,
    "band_name": "Planning"
  },
  "migration_stage": 1,
  "mosca_inequality": {
    "X_signature_shelf_life_years": "10-20 (eUTXO model hides unspent keys; spent outputs exposed indefinitely; KES rotation helps block-producer keys)",
    "Y_migration_time_years_range": "5-10 (Hard Fork Combinator + governance velocity; Hoskinson noted 10x perf penalty without HW accel)",
    "Z_10pct_year": 2036,
    "Z_50pct_year": 2041,
    "danger_zone_at_50pct": true
  },
  "four_scenario_grid": {
    "quantum_never": {
      "value_preserved_pct": 100,
      "privacy_preserved_pct": 100
    },
    "arrives_suddenly_pre_migration": {
      "value_preserved_pct": 40,
      "privacy_preserved_pct": 30
    },
    "arrives_slowly_post_migration": {
      "value_preserved_pct": 90,
      "privacy_preserved_pct": 80
    },
    "arrives_slowly_mid_migration": {
      "value_preserved_pct": 65,
      "privacy_preserved_pct": 50
    }
  },
  "burn_vs_rescue_policy": "undeclared (Hoskinson noted tradeoffs; no formal burn-vs-rescue position). eUTXO unspent UTXOs analogous to Bitcoin dormant.",
  "pqc_washing_ratio": 1.3,
  "vendor_tile_summary": {
    "wallet": {
      "top3": [
        "Lace",
        "Eternl",
        "Yoroi"
      ],
      "pqc_roadmap_count": 0
    },
    "bridge": {
      "top3": [
        "Wanchain",
        "Milkomeda",
        "limited"
      ],
      "pqc_roadmap_count": 0
    },
    "custodian": {
      "top3": [
        "Coinbase Custody",
        "Anchorage",
        "Kraken"
      ],
      "pqc_roadmap_count": 1
    },
    "rpc_hsm": {
      "top3": [
        "Blockfrost",
        "Koios",
        "Maestro"
      ],
      "pqc_roadmap_count": 0
    }
  },
  "narrative_summary": "Cardano has the most detailed PQC roadmap among major L1s (Hoskinson's Nightstream lattice-based ZK replacement for PlonK/Halo2, Mithril proof-chain certificate strategy, declared FIPS 203-206 alignment), paired with the best governance structure (Voltaire/CIP-1694 tripartite: DReps + Constitutional Committee + SPOs, completed March 2026). Hoskinson publicly warned of 10x perf penalty without HW acceleration — a rare empirical voice. eUTXO + BLAKE2b-224 hashed addresses hide unspent keys. KES rotation (~36hr) provides forward security for block production. No PQC code on mainnet; Midnight (launched March 2026) uses classical ZK-SNARKs pending Nightstream.",
  "evaluator_notes": "Hybrid gate PASSES (proof-chain strategy + Nightstream hybrid alongside classical). Sutor cap binds at 2 milestones. 3000+ SPOs = best validator distribution in batch. Band 3 Planning justified by named strategy despite zero shipped code.",
  "narrative_voiced": "Cardano is the only chain in the batch with a named PQC lead who will tell you the performance cost out loud. Hoskinson flagged the 10x penalty without hardware acceleration, which is a rare thing: a roadmap that admits its own expense before it has shipped a line of code."
}