无中断：没有任何单一对等方能够可靠地把关后量子交付
Nothing Breaks: No Single Peer Can Soundly Gate Post-Quantum Delivery
浏览论文内容
中文总结 AI 辅助
本文证明没有任何单一对等方或工件侧工具能可靠检测后量子交付的降级，并展示智能体可从工程文本驱动验证过的降级，导致量子抗性悄然丢失。
中文摘要 AI 辅助
后量子保护是交付给对等方的，而不是在文件中声明的：一个会话是否具有量子抗性，是服务器配置与访问它的客户端之间的一种关系。我们证明，没有任何单一对等方能够可靠地把关这种关系。已发布的SSH客户端并非有序排列：它们的两个后量子能力类别是最小且不可比较的，因此固定于其中任一类的检查会遗漏另一类家族的撤回。同时考虑两者的对等方也好不到哪里去：它会回退并同时遗漏两者，或者，在经典算法优于一个家族的情况下，只能捕获那一个家族。没有任何情况能同时标记两者。线路上方也没有任何东西承载这种关系。工件侧的工具无法编码它，因为对等方群体不是其输入之一；在两种协议的七种配置中，我们发现审计员部署给自动化使用的五个标量中没有一个发生变化，而无关的降级却会移动那些具有区分能力的标量：审计员确实计算了交付的算法，却在自动化读取的接口处将其丢弃。其他任何东西也无法捕获这种损失，因为没有任何东西会中断：移除混合密钥交换后，守护进程正常启动，配置验证通过，测试通过并服务客户端，而它所防御的对手尚不存在，因此即使原则上，也没有任何功能信号能够承载这种损失。然后我们证明，智能体能够使这种状态在大规模范围内可达，在40次试验中的40次中，从普通工程文本驱动了一次验证过的降级，而在匹配的中性文档上则为0次中的0次。
英文摘要
Post-quantum protection is delivered to a peer, not declared in a file: whether a session is quantum-resistant is a relation between a server's configuration and the clients that reach it. We show that no single peer can soundly gate that relation. Shipped SSH clients are not ordered: two of their post-quantum capability classes are minimal and incomparable, so a check pinned to either misses the other family's withdrawal. A peer taking both fares no better: it falls back and misses both, or, where classical outranks one family, catches just that one. No case flags both. Nothing above the wire carries the relation either. An artifact-side instrument cannot encode it, because a peer population is not one of its inputs; and across seven configurations on two protocols we find that not one of the five scalars deployed auditors expose to automation moves, while unrelated degradation moves the ones that discriminate at all: the auditors do compute the delivered algorithm, and discard it at the interface automation reads. Nothing else catches the loss either, because nothing breaks: removing a hybrid key exchange starts the daemon, validates the configuration, passes the tests and serves the client, and the adversary it defends against does not exist yet, so no functional signal can carry the loss even in principle. We then show that agents make that state reachable at scale, driving a validated downgrade in 40 of 40 episodes from ordinary engineering prose, against 0 of 40 on a matched neutral document.
