Timeline Risk Assessment Framework

Quantum Progress Indicators:

LEVEL 1 - Incremental (Expected Progress):
├── Physical qubit count doubling
├── Incremental error rate improvements
├── New quantum computer announcements
└── Impact: Confirms base case, no timeline change

LEVEL 2 - Significant (Noteworthy Progress):
├── Below-threshold error correction at scale (100+ logical qubits)
├── New qubit technology demonstrating advantage
├── Major algorithm optimization reducing requirements
└── Impact: Shift probability toward earlier scenarios

LEVEL 3 - Breakthrough (Timeline Acceleration):
├── 1,000+ logical qubits demonstrated
├── Shor's algorithm run on meaningful key sizes (100+ bits)
├── Cryptographically relevant factoring demonstrated
└── Impact: Major shift toward rapid breakthrough scenario

LEVEL 4 - Emergency (Imminent Threat):
├── RSA-1024 or ECC-160 broken in practice
├── Nation-state announces cryptographic quantum capability
├── Mass quantum attacks detected
└── Impact: Emergency migration required

Indirect Signals:

Government Actions:
├── Accelerated PQC mandate timelines
├── Emergency security directives
├── Classified briefings to financial sector
└── Increased urgency suggests insider knowledge

Industry Behavior:
├── Major cloud providers requiring PQC
├── Financial institutions emergency upgrades
├── Insurance products for quantum risk
└── Market pricing of quantum risk

Research Publications:
├── Cryptographer sentiment shifts
├── Peer-reviewed timeline estimates
├── Algorithm improvement publications
└── Error correction breakthrough papers

Suspicious Signals:
├── Sudden funding surges to quantum programs
├── Key researchers going "dark" (classified work)
├── Unexplained cryptographic failures
└── Government cryptocurrency purchase programs

---

Defining Personal Action Triggers:

Trigger Format:
"When [specific observable event] occurs, I will [specific action]"

Example Triggers:

Trigger 1: Monitoring
├── Event: Google/IBM announce 10,000 physical qubits with good fidelity
├── Action: Increase monitoring frequency to monthly
└── Rationale: Significant but not emergency progress

Trigger 2: Preparation
├── Event: 100+ logical qubits demonstrated with Shor's algorithm
├── Action: Begin active migration of high-value exposed addresses
└── Rationale: Demonstrates path to CRQC is real

Trigger 3: Urgent Migration
├── Event: NIST issues emergency PQC directive
├── Action: Complete all migrations within 6 months
└── Rationale: Expert consensus on imminent threat

Trigger 4: Emergency
├── Event: Confirmed quantum attack on production cryptography
├── Action: Emergency fund movement to PQ-protected addresses
└── Rationale: Threat is realized
```

Response Levels:

GREEN (Current State):
├── Condition: No significant breakthrough, base case intact
├── Actions: Annual review, monitor key indicators
├── Migration: Planning only, no urgency
└── Timeframe: Normal schedule

YELLOW (Heightened Awareness):
├── Condition: Level 2 indicators observed
├── Actions: Quarterly review, test migration procedures
├── Migration: Begin with high-risk addresses
└── Timeframe: 2-3 year migration window

ORANGE (Active Preparation):
├── Condition: Level 3 indicators or multiple Level 2
├── Actions: Monthly review, active migration in progress
├── Migration: All exposed addresses
└── Timeframe: 6-12 month completion target

RED (Emergency):
├── Condition: Level 4 indicators or credible imminent threat
├── Actions: Immediate migration, consider temporary measures
├── Migration: Everything, immediately
└── Timeframe: Days to weeks

---

Early Migration Costs:

Direct Costs:
├── Transaction fees for fund movements
├── Time spent on migration process
├── Learning new wallet/key management
└── Potential exchange withdrawal limits

Indirect Costs:
├── Reduced liquidity during migration
├── Complexity of managing new addresses
├── Risk of migration errors
└── Early adoption of immature PQ tools

Opportunity Costs:
├── Time not spent on other activities
├── Capital efficiency if holding in cold storage
└── Mental bandwidth for monitoring

Migration Benefits:

Risk Reduction:
├── Eliminate HNDL vulnerability for migrated funds
├── Protection against breakthrough scenarios
├── Peace of mind for long-term holdings
└── Insurance against tail risk

Strategic Benefits:
├── First-mover advantage in PQ ecosystem
├── Experience with new tools before emergency
├── Time to recover from migration mistakes
└── Orderly process vs. panic migration

Option Value:
├── Can always delay further if timeline extends
├── Cannot recover if timeline accelerates and unprepared
└── Asymmetric risk favors earlier preparation

When to Act:

Expected Value Calculation:
├── P(quantum threat) × Value(protection)
├── vs.
├── Certain cost of migration
└── Act when expected benefit > certain cost

Rule of Thumb:
├── High-value holdings: Act early (cost is small relative to risk)
├── Moderate holdings: Act when PQ tools mature
├── Small holdings: Act when convenient
└── Exposed long-term: Prioritize regardless of size

Your Personal Threshold:
├── How much is "enough" quantum risk to act?
├── 5%? 10%? 20%?
├── Higher threshold = later action
└── Define YOUR number and stick to it

---

Annual Quantum Risk Review:

1. Update Timeline Estimates:

1. Check Indicators:

1. Review Action Triggers:

1. Portfolio Review:

1. Document and Schedule:

Recommended Monitoring Sources:

Primary (Check Quarterly):
├── Global Risk Institute Annual Quantum Report
├── NIST PQC project updates
├── IBM/Google quantum roadmap updates
└── Nature/Science quantum computing publications

Secondary (Check Annually):
├── Academic quantum computing surveys
├── Government quantum strategy documents
├── Industry analyst reports
└── Cryptocurrency security research

Alert Sources (Real-time):
├── Google Scholar alerts for "quantum cryptography"
├── Major tech company press releases
├── Cryptography researcher Twitter/blogs
└── r/QuantumComputing (filter for quality)

---

Proven: Expert estimates have been slowly shifting earlier; quantum progress is real but still far from CRQC.

Uncertain: Exact timeline; whether breakthroughs will accelerate or plateaus will delay; classified capabilities.

Risky: Overconfident timeline predictions (either direction); failing to update based on evidence; paralysis from uncertainty.

---

Assignment: Create your own probability-weighted timeline with action triggers.

Part 1: Assign probabilities to 4 scenarios (must sum to 100%) with written reasoning (25%)
Part 2: Define 5 personal action triggers in "When X, I will Y" format (25%)
Part 3: Create graduated response plan (GREEN/YELLOW/ORANGE/RED) (25%)
Part 4: Identify your personal "act now" probability threshold with justification (15%)
Part 5: Design annual review calendar with specific information sources (10%)

Time Investment: 3-4 hours

---

1. The most likely CRQC timeline scenario (base case) is: Answer: 2035-2040 (45-55%)

2. A Level 3 indicator would be: Answer: 1,000+ logical qubits demonstrated

3. Why is early preparation asymmetrically favorable? Answer: Can delay if timeline extends, can't recover if accelerates

4. How often should timeline assessment be formally reviewed? Answer: Annually

5. What makes a good action trigger? Answer: Specific observable event + specific action

---

End of Lesson 7