Post-quantum attestation: what procurement teams should ask
Long-lived proofs face harvest-now-decrypt-later risk. ML-DSA-65 attestation paths are live in the AffixIO API.
Procurement should ask which algorithms sign outcomes, how rotation works, and whether proofs verify offline years later.
Reproduce in WP-036 live PQC sandbox. Use the Merkle verifier tool.