K10 · bounded transition and assurance evidence

Phased Cryptographic Transition Plan

Direct answer

The K10 reference plan contains 9 phases and remains DEGRADED because rollout and supplier exit lack mandatory evidence. Transition is rejected when predecessor exit criteria are incomplete.

Authority, operation, and disclosure boundary. K10 publishes static tools, deterministic synthetic fixtures, review queues, offline observation records, migration and merge reports, abstract dependency analysis, reference transition plans, audit trails, signed offline receipts, redaction records, and a release-time dashboard. It does not perform live monitoring, deployment, procurement award, facility certification, network reconnaissance, protected-system operation, legal authorization, or factual adjudication.

Nine-phase transition

Cryptographic transition phases
SequencePhaseStateEntry criteriaExit criteria
1Discovery and inventoryIN_PROGRESSNamed accountable owner; Affected assets identified; Required evidence and stop conditions declaredMandatory evidence current; Blocking defects resolved or accepted by authority; Successor and rollback states recorded
2Bounded pilotPLANNEDNamed accountable owner; Affected assets identified; Required evidence and stop conditions declaredMandatory evidence current; Blocking defects resolved or accepted by authority; Successor and rollback states recorded
3Hybrid operationPLANNEDNamed accountable owner; Affected assets identified; Required evidence and stop conditions declaredMandatory evidence current; Blocking defects resolved or accepted by authority; Successor and rollback states recorded
4Controlled rolloutBLOCKEDNamed accountable owner; Affected assets identified; Required evidence and stop conditions declaredMandatory evidence current; Blocking defects resolved or accepted by authority; Successor and rollback states recorded
5Rollback readinessDESIGNEDNamed accountable owner; Affected assets identified; Required evidence and stop conditions declaredMandatory evidence current; Blocking defects resolved or accepted by authority; Successor and rollback states recorded
6Legacy verificationDESIGNEDNamed accountable owner; Affected assets identified; Required evidence and stop conditions declaredMandatory evidence current; Blocking defects resolved or accepted by authority; Successor and rollback states recorded
7Archive re-signingPLANNEDNamed accountable owner; Affected assets identified; Required evidence and stop conditions declaredMandatory evidence current; Blocking defects resolved or accepted by authority; Successor and rollback states recorded
8Supplier exitBLOCKEDNamed accountable owner; Affected assets identified; Required evidence and stop conditions declaredMandatory evidence current; Blocking defects resolved or accepted by authority; Successor and rollback states recorded
9Cryptographic inventory attestationIN_PROGRESSNamed accountable owner; Affected assets identified; Required evidence and stop conditions declaredMandatory evidence current; Blocking defects resolved or accepted by authority; Successor and rollback states recorded

Plan state

DEGRADEDoverall reference state
3blocking dependencies
PARTIALinventory attestation

Blocking dependencies

  • CMG-HW-HSM
  • CMG-SUPPLIER-HSM
  • CMG-DOWNGRADE

Rollback and legacy verification

Every phase declares rollback conditions and requires current evidence before transition. Rollout and supplier exit remain blocked in the synthetic plan.

A phase plan, standardized algorithm, test vector, or dependency graph is not deployed cryptography, quantum resistance, supplier readiness, or service continuity.