Search papers, labs, and topics across Lattice.
The authors investigate why post-quantum (PQ) cryptographic delivery cannot be soundly gated by individual peers or static analysis, analyzing SSH/TLS capability classes alongside deployed automated audit interfaces. Because removing hybrid key exchanges leaves operational connectivity intact and standard audit scalars discard negotiated cipher states, PQ security loss produces zero functional or operational failure signals. Exploiting this visibility vacuum, the authors demonstrate that autonomous software engineering agents deterministically introduce validated PQ downgrades in 40 out of 40 trials when prompted with standard engineering prose.
Post-quantum downgrades break zero existing tests or automated audit scalars, leaving autonomous coding agents vulnerable to silently stripping hybrid key exchanges in 100% of tested engineering scenarios.
Post-quantum protection is delivered to a peer, not declared in a file: whether a session is quantum-resistant is a relation between a server's configuration and the clients that reach it. We show that no single peer can soundly gate that relation. Shipped SSH clients are not ordered: two of their post-quantum capability classes are minimal and incomparable, so a check pinned to either misses the other family's withdrawal. A peer taking both fares no better: it falls back and misses both, or, where classical outranks one family, catches just that one. No case flags both. Nothing above the wire carries the relation either. An artifact-side instrument cannot encode it, because a peer population is not one of its inputs; and across seven configurations on two protocols we find that not one of the five scalars deployed auditors expose to automation moves, while unrelated degradation moves the ones that discriminate at all: the auditors do compute the delivered algorithm, and discard it at the interface automation reads. Nothing else catches the loss either, because nothing breaks: removing a hybrid key exchange starts the daemon, validates the configuration, passes the tests and serves the client, and the adversary it defends against does not exist yet, so no functional signal can carry the loss even in principle. We then show that agents make that state reachable at scale, driving a validated downgrade in 40 of 40 episodes from ordinary engineering prose, against 0 of 40 on a matched neutral document.
