CRISM and Q-Day

Author: Paul E. Sorvik — architect of CRISM, CRISMOS, and CRISM Watch

Paul E. Sorvik — Principal Investigator · ORCID 0009-0008-5717-7110


Framing

“Q-day” names the moment a quantum computer can break the public-key cryptography the world currently runs on. CRISM bears on it in three distinct ways, and they are worth separating because each holds to a different standard and carries a different responsibility. Bundled together they sound like one grand claim; taken apart, two are solidly within what the architecture is for and one demands a boundary that must not be blurred. A fourth observation — that a quantum processor is simply another resource fulfilling a role — ties the three together.

Note: CRISM is explained in detail in the About Page

Role 1 — CRISM-Watch: a Q-day readiness clock

This is the strongest and cleanest application, and the one to build first. The approach of Q-day is signalled by a contested, hype-laden field of evidence: qubit counts, physical and logical error rates, logical-qubit milestones, improvements to factoring and related algorithms, and vendor announcements that range from sober to promotional. Adjudicating that field is precisely CRISM’s verification-and-validation identity. Heterogeneous, differently-trustworthy sources are folded into a single trust-weighted estimate of how close Q-day is and on what evidence; overclaims are quarantined rather than propagated; and the verdict is revocable, re-folding the instant new evidence lands.

Its value is defensive and uncontroversial. A well-grounded “how close, on what basis” reading is exactly what cryptographic migrators need to move to post-quantum schemes in time. CRISM-Watch turns a noisy, adversarial signal environment into an auditable readiness clock.

Role 2 — Accelerating the path: a research compass, not a lab

The second role points CRISM’s alternatives-ranking and scientific-discovery capability at quantum-computing research itself. Here CRISM resolves reasoning uncertainties: it can rank the candidate hardware paths — superconducting, trapped-ion, photonic, neutral-atom, topological — on viability and on the most efficient route to scale; surface decorrelated hypotheses that consensus is under-weighting; model approaches before they are built; and catch confabulated or over-anchored designs before resources follow them.

One boundary governs this role and must stay sharp: CRISM reasons and verifies; it does not run the physics. It does not operate the cryostat, the trap, or the photonic bench. So “brings Q-day closer” means a faster, better-grounded research compass and a tighter decision loop — not a substitute for experiment. Held to that line, the claim is credible and useful. Blurred past it, it overclaims.

Role 3 — Verifying the results themselves

The third role is the deepest, and it is a direct expression of the principle that nothing is ever simply had — it is continuously re-converged through redundant, decorrelated, cross-checked validation. A quantum result is no exception: decoherence is a form of bit-rot, and quantum error correction is itself a convergence discipline that re-derives the intended state rather than storing it.

The honest mechanism follows from that. CRISM cannot collapse a physical quantum uncertainty — classical reasoning nodes do not denoise a qubit or beat measurement statistics. What CRISM can be is the verification grid around the results: it folds repeated runs, cross-device agreement, classical spot-checks where they exist, and theoretical bounds into a trust-weighted, revocable verdict on whether a claimed result is genuine, noise, or overclaim. It adjudicates and verifies the result; it does not compute it. That single distinction is the entire credibility of the claim — and since verifying quantum-advantage and random-circuit-sampling claims is a genuine open problem, it is a problem the architecture is unusually well-shaped to address.

The unifying extension — a QPU is just another resource fulfilling a role

CRISM is substrate-indifferent: it asks of any resource only that it satisfy the requirements of the role it fills. A quantum processor is a substrate. It therefore drops into the architecture as a generator or oracle node, producing candidate results that the classical grounders then quarantine, ground-check, and fold — exactly as they treat any other node.

This pairing is not merely admissible; it is close to ideal. Classical and quantum error manifolds are nearly orthogonal, so classical grounders verifying a quantum generator is about the most decorrelated arrangement physically available — the strongest possible separation of failure modes. CRISM verifying quantum results, with the quantum device itself participating as a node, is the cleanest expression of the architecture meeting the substrate.

A necessary caveat — separate the science from the break

One distinction the word “Q-day” quietly fuses must be kept apart. Accelerating quantum computing as a science is broadly beneficial and worth pursuing. Hastening the cryptographic-break event is a global security externality, because bringing the break closer accelerates the threat as much as the capability.

The responsible posture follows directly: any acceleration of the path should be paired with the readiness side, and CRISM-Watch — the role that buys defenders the time to migrate — is the right primary Q-day application. Racing the break for its own sake is the one framing to avoid. This is not an external brake; it is the same safety-first, stewardship reflex that shapes the rest of the architecture, applied to its own roadmap.

In one line

CRISM does not break Q-day or build the machine that will; it watches Q-day approach, sharpens the path toward it, and verifies what the machines produce — and it can do the last with the quantum device sitting inside it as just another role.


CRISM Q-Day Watch — Status
3-node fold · updated 24 Jun 2026 · weekly refresh (Mondays)
Revocable verdict
No cryptographically relevant quantum computer exists today, and none is evidenced as months away. Defensible planning window: the 2030s — modal early-to-mid decade, material tail into the early 2040s. The aggressive early case rests on conditional, not-yet-demonstrated resource estimates, so it shifts plausibility, not capability. The live threat is harvest-now-decrypt-later, which makes the defensive deadline earlier than Q-day itself.
Three-node timeline spread (2026 → 2048)
Gemini · dreamer
2030–34 aggr.
Claude · grounder
early–mid 30s
ChatGPT · grounder
2036–41 cons.
2026 2030 deprecate 2035 disallow 2041 2048
Convergence core (all three nodes agree)
No CRQC today · live window is the 2030s · harvest-now-decrypt-later already operative · migrate off RSA/ECC now, key-establishment first. The timing disagreement traces to one hinge: how much weight to give conditional resource estimates vs demonstrated peer-reviewed capability. Zero confabulation in this run — the nodes disagree on evidentiary weight, not facts.
Critical-path dependencies (what gates Q-day)
Below-threshold logical error — logical qubit beats its physical partsachieved · small scale
Efficient encoding — cut overhead (qLDPC / 2:1 vs ~97:1 surface)advancing fast
Logical-qubit count — dozens (~48–96) → thousands interactingin progress
Universal gates + magic-state factories — production ≥ consumption; gate depthin progress
Real-time decoding & feedforward — syndrome throughput exceeds PCIe/optical limitsopen bottleneck
Sustained runtime + correlated-error suppression — hours–days; cosmic raysopen
Fabrication yield & interconnects — manufacture/network thousands→millionsopen
Real-time decoding is the cross-cutting dependency — it gates every hardware path, not just one. (It is also the bottleneck the un-anchored dreamer independently surfaced.)
Best-path projection (ranked · viability × efficient path)
#1 · front-runner
Neutral atom (Rydberg, reconfigurable)
Fastest-scaling; reconfigurable connectivity suits high-rate qLDPC. QuEra: 96 logical / 448 atoms, 2:1 qLDPC (Apr 2026); 1000+ atom arrays since 2024. Google added a neutral-atom lane (Mar 2026). Trade-off: slower gate clock. QuEra, Pasqal, Atom Computing, Infleqtion.
#2 · efficiency leader
Trapped ion
Highest fidelity, best demonstrated efficiency: Quantinuum Helios 98 physical → 48 logical, 2:1 “Skinny Logic” (May 2026). Roadmap: Sol (2027) → Apollo (thousands, universal FTQC, ~2030). Trade-off: scaling and gate speed. Quantinuum.
#3 · most mature
Superconducting
Fastest gates (~20× logical ops/sec), deepest engineering base, but high surface-code overhead (~97–225× physical/logical). Google Willow below-threshold; IBM’s FTQC path adopts qLDPC (bivariate-bicycle). Trade-off: physical-qubit cost. Google, IBM.
#4 · long bet
Photonic
Most fab-compatible (silicon-photonics lines). PsiQuantum + GlobalFoundries; Xanadu; Quandela MosaiQ roadmap to FT 2026–2033. Bet on manufacturability; FT regime later. Trade-off: maturity. PsiQuantum, Xanadu, Quandela.
Convergent bet
The paths are converging on one recipe: high-rate qLDPC codes on reconfigurable / high-connectivity hardware. Neutral atoms lead on scaling, trapped ions on efficiency, and even superconducting is pivoting to qLDPC — Google now runs two lanes. The next-~3-years differentiator is less which qubit and more who solves real-time decoding and magic-state throughput at scale first.
Signals, by trust weight
peer-reviewed
Below-threshold logical memory
Google Willow: 101-qubit distance-7, logical error ~1.43×10⁻³/cycle, ~2.4× memory lifetime. Microsoft/Quantinuum: 800× logical-error reduction (Nature, Jun 2026). A prerequisite, not a processor.
peer-reviewed
RSA-2048 baseline estimate
Gidney & Ekerå 2021: ~8 h with ~20M physical qubits (Quantum). A resource estimate, not a factorization.
preprint · conditional
Resource-estimate collapse
Gidney 2025: <1M qubits. qLDPC “Pinnacle”: ~100k. Cain/Preskill neutral-atom: Shor’s at ~10k atomic qubits. Real papers, optimistic assumptions — shifts the early tail, not demonstrated.
vendor target
“2029” figures
Google’s 2029 is an internal migration target, not a demonstrated or predicted RSA-breaking machine. Media framing overstates it.
Quarantined / flagged
 “Q-day is 2029” — vendor migration target, not arrival.
 “Willow proves scalable fault-tolerant computing” — one prerequisite, not the full stack.
 “~1M / ~100k / ~10k qubits will break RSA-2048” — conditional preprint estimates under optimistic assumptions.
 “Millions of qubits are the only remaining obstacle” — fidelity, gates, decoding, factories, interconnects, runtime are independently load-bearing.
Defensive clock (the actionable number)
NIST PQC standards finalized — FIPS 203 / 204 / 205Aug 2024
US Executive Order — federal key-establishment to PQCby 31 Dec 2030
US EO — federal signatures to PQCby 31 Dec 2031
NIST IR 8547 — RSA/ECC deprecatedafter 2030
NIST IR 8547 — quantum-vulnerable PKC disallowedafter 2035
UK NCSC roadmap — inventory / priority / complete2028 / 2031 / 2035
Generated by CRISM Q-Day Watch — Claude grounder + ChatGPT grounder + Gemini dreamer, folded with trust weighting and quarantine. Verdict is revocable and re-folds weekly or on a new peer-reviewed demonstration. Point-in-time snapshot; nodes carry their own uncertainty.

Leave a comment