Post-quantum policies
Quorum policies can require post-quantum approvals alongside the ordinary multisig threshold.
Two thresholds
threshold is the number of total approvals required. pq_threshold is the number of approvals that must come from Falcon or Winternitz members.
Example: a 3-of-5 multisig with pq_threshold = 1 needs three approvals total, including at least one Falcon or Winternitz approval.
Migration stages
| Stage | Shape |
|---|---|
| Classical continuity | Existing Ed25519 or Secp256k1 signers operate with pq_threshold = 0. |
| Hybrid readiness | Add Falcon or Winternitz members and test approvals. |
| Enforced PQ approval | Raise pq_threshold to 1 or more for high-value actions. |
| Stronger rotation | Move classical signers into lower-trust roles or remove them from final approval. |
Policy design questions
- Which assets or authorities need PQ approval first?
- How many operators can reliably use Falcon today?
- Where is a hash-based Winternitz signer worth the state-management cost?
- Should program upgrades require stronger policy than small transfers?
- Who can change
pq_thresholdlater?
Post-quantum approval requirements
Read the protocol-level explanation of total and PQ thresholds.