Forward-Deployed Engineering for Post-Quantum Migration: A Testable Case for a Distinct Quantum Safe FDE Role
AI deployments are arriving in federal and regulated customers continuously, and in June 2026 the U.S. federal post-quantum cryptography (PQC) migration moved to dated execution under Executive Order 14412 and OMB Memorandum M-26-15, which expects a continuously updated cryptographic inventory. The two collide at that inventory. An AI deployment can add or alter cryptography across up to twelve reference surfaces, and some of those changes, on the vendor’s side of the service boundary, can be known only from vendor evidence; others the customer can see but cannot reliably classify. A deployment-level cryptographic change notice is therefore needed, and federal policy designates no vendor-side role to produce it. The paper proposes the Quantum Safe FDE, a forward-deployed engineer who records what each deployment actually creates and delivers the notice to the customer’s migration lead, fractionally across a sector’s customers. The proposal is a testable hypothesis: that a specialist combining embedded access to the as-built deployment, applied cryptographic judgment, and accountable production of the record, separated from deployment and sales incentives, produces more complete and timely notices than automation plus remote review at acceptable marginal cost. A three-arm feasibility pilot, scored against independent ground truth, tests it. Version 1.17, 17 September 2026. Position paper, not peer reviewed. Supplementary Materials S1 (pilot criteria) and S2 (technical detail) are included as separate files.
Authors
- Robert Campbell (ORCID: https://orcid.org/0009-0004-1798-1455)
- Joseph Camera
Publication Details
- Journal
- Zenodo (CERN European Organization for Nuclear Research)
- Published
- 2026-09-17
- DOI
- https://doi.org/10.5281/zenodo.22819220
- Primary Topic
- Cryptography and Data Security
- Type
- preprint