Status: complete and merged
- Local project initialization.
- Project-local P-256 signing.
- Simulator-only authorization.
- Governed Aer execution.
- Signed verification and execution evidence.
- Independent offline chain verification.
- Trust-mode diagnostics.
- Hardware authorization prohibited.
Status: planned
- Encrypted local IBM credential storage.
- IBM provider add, test, list, and remove commands.
- Self-managed hardware signing identities.
- Signing-key creation and import.
- GCP-free IBM planning and execution.
- Explicit hardware enablement.
- Cost, backend, shot, and expiration controls.
- Clean WSL acceptance testing.
Status: future
- AWS KMS.
- Azure Key Vault.
- HashiCorp Vault.
- PKCS#11 and enterprise HSMs.
- Organization policy and multi-party approvals.
Planned capabilities remain labeled as planned until their code, security invariants, packaging, and external acceptance all pass.