{
  "chain_slug": "neo",
  "name": "NEO",
  "scorecard_profile": "L1",
  "evaluated_at": "2026-04-18",
  "evaluator": "layerqu-v2-scoring-agent-4",
  "v1_reference": "chainscreen-v1-archive",
  "dimensions": {
    "1_cryptographic_exposure": {
      "weight": 0.15,
      "score": 38,
      "sub_scores": {
        "1a_primitive_inventory": {
          "score": 14,
          "primitives_named": [
            "ECDSA secp256r1 (P-256)",
            "SHA-256",
            "RIPEMD-160"
          ],
          "evidence": [
            "https://github.com/neo-project/neo/issues/4239"
          ],
          "note": "Notable: P-256 not secp256k1."
        },
        "1b_shor_grover_pq_tag": {
          "score": 14,
          "tags": {
            "ECDSA secp256r1": "Shor-break",
            "SHA-256": "Grover-weaken",
            "RIPEMD-160": "Grover-weaken (80-bit post-quantum)"
          }
        },
        "1c_algorithm_family_diversity": {
          "score": 2,
          "families_represented": 0,
          "families": [],
          "note": "Research issue names Dilithium/Falcon/Kyber — not yet architected."
        },
        "1d_nist_security_category": {
          "score": 4,
          "mappings": {
            "ECDSA P-256": "NIST P-256 curve"
          }
        },
        "1e_implementation_quality": {
          "score": 4,
          "formal_verification": "limited",
          "constant_time": "standard",
          "libraries": [
            "neo-cli C#",
            "neo-go",
            "neo-python"
          ],
          "evidence": [
            "https://github.com/neo-project"
          ]
        }
      },
      "total_artifacts": 2
    },
    "2_hndl_exposure": {
      "weight": 0.1,
      "score": 20,
      "sub_scores": {
        "2a_active_key": {
          "score": 4,
          "note": "ECDSA pubkey exposed on first tx. 95-100% exposure."
        },
        "2b_cold_key": {
          "score": 4,
          "note": "Same."
        },
        "2c_sig_long_term": {
          "score": 6,
          "note": "dBFT validator keys permanent on-chain."
        },
        "2d_encryption_conf": {
          "score": 6,
          "note": "Standard TLS."
        }
      },
      "total_artifacts": 1
    },
    "3_metadata_privacy_exposure": {
      "weight": 0.13,
      "score": 30,
      "sub_scores": {
        "3a_graph_visibility": {
          "score": 5,
          "note": "Transparent."
        },
        "3b_rpc_concentration": {
          "score": 8,
          "note": "Neo Global Resources + O3 Labs."
        },
        "3c_bridge_correlation": {
          "score": 10,
          "note": "Poly Network + LayerZero."
        },
        "3d_retroactive_deanon": {
          "score": 7,
          "note": "Baseline."
        }
      },
      "total_artifacts": 1
    },
    "4_migration_architecture": {
      "weight": 0.1,
      "score": 30,
      "sub_scores": {
        "4a_crypto_agility": {
          "score": 8,
          "note": "NEO N3 has pluggable crypto modules.",
          "evidence": [
            "https://docs.neo.org"
          ]
        },
        "4b_aa_key_rotation": {
          "score": 5,
          "note": "Limited AA."
        },
        "4c_hard_fork_track_record": {
          "score": 9,
          "note": "Neo3 upgrade (2021), ongoing Neo 4 research."
        },
        "4d_hybrid_deployment_readiness": {
          "score": 8,
          "note": "Pluggable crypto + GitHub issue #4239 proposes hash-size increase + PQC signatures."
        }
      },
      "total_artifacts": 3
    },
    "5_deployment_execution": {
      "weight": 0.22,
      "score": 6,
      "sub_scores": {
        "5a_mainnet_pqc_pct": {
          "score": 0,
          "mainnet_pqc_pct": 0,
          "evidence": []
        },
        "5b_pqc_code_in_consensus": {
          "score": 0,
          "loc_or_bytes": 0
        },
        "5c_validator_pqc_keys": {
          "score": 0,
          "pct": 0
        },
        "5d_published_milestones": {
          "score": 4,
          "count": 1,
          "milestones": [
            "GitHub issue #4239 (research)"
          ],
          "evidence": [
            "https://github.com/neo-project/neo/issues/4239"
          ]
        },
        "5e_pqc_washing_delta": {
          "score": 2,
          "ratio": 1
        }
      },
      "total_artifacts": 1
    },
    "6_supply_chain_vendor_readiness": {
      "weight": 0.22,
      "score": 4,
      "sub_scores": {
        "6a_wallet": {
          "score": 1,
          "top3": [
            "NeoLine",
            "O3",
            "Neon"
          ],
          "pqc_roadmap_count": 0
        },
        "6b_bridge": {
          "score": 1,
          "top3": [
            "Poly Network",
            "LayerZero"
          ],
          "pqc_roadmap_count": 0
        },
        "6c_custodian": {
          "score": 1,
          "top3": [
            "BitGo",
            "Ledger (retail)"
          ],
          "pqc_roadmap_count": 0
        },
        "6d_rpc_hsm": {
          "score": 1,
          "top3": [
            "Neo Global Resources",
            "O3 Labs"
          ],
          "pqc_roadmap_count": 0
        }
      },
      "total_artifacts": 1
    },
    "7_governance_coordination": {
      "weight": 0.08,
      "score": 35,
      "sub_scores": {
        "7a_validator_stake_distribution": {
          "score": 3,
          "note": "Only 7 consensus nodes — most centralized major chain."
        },
        "7b_upgrade_cadence_under_pressure": {
          "score": 12,
          "note": "Neo3 migration successful."
        },
        "7c_named_coordination_lead": {
          "score": 12,
          "note": "Erik Zhang + Da Hongfei. Neo Global Resources Feb 2026."
        },
        "7d_adversarial_coordination_precedent": {
          "score": 8,
          "note": "Chinese regulatory adaptation."
        }
      },
      "total_artifacts": 1
    }
  },
  "gates": {
    "hybrid_deployment": "FAIL",
    "evidence_reconstruction": "PASS",
    "primitive_naming": "PASS"
  },
  "caps_applied": [
    "Mosca (5a<20%)",
    "Sutor (5d=1 but research-only, Migration Stage max 2)",
    "Preskill (several <3 artifacts → ×0.5)",
    "Casado",
    "Hybrid gate FAIL → QRI cap 60"
  ],
  "qri": {
    "raw": 17,
    "after_caps": 14,
    "ci_plus_minus": 15,
    "band": 2,
    "band_name": "Acknowledged"
  },
  "migration_stage": 1,
  "mosca_inequality": {
    "X_signature_shelf_life_years": "5-10",
    "Y_migration_time_years_range": "7-12",
    "Z_10pct_year": 2036,
    "Z_50pct_year": 2041,
    "danger_zone_at_50pct": false
  },
  "four_scenario_grid": {
    "quantum_never": {
      "value_preserved_pct": 100,
      "privacy_preserved_pct": 100
    },
    "arrives_suddenly_pre_migration": {
      "value_preserved_pct": 5,
      "privacy_preserved_pct": 15
    },
    "arrives_slowly_post_migration": {
      "value_preserved_pct": 80,
      "privacy_preserved_pct": 70
    },
    "arrives_slowly_mid_migration": {
      "value_preserved_pct": 35,
      "privacy_preserved_pct": 35
    }
  },
  "burn_vs_rescue_policy": "undeclared",
  "pqc_washing_ratio": 1,
  "vendor_tile_summary": {
    "wallet": {
      "top3": [
        "NeoLine",
        "O3",
        "Neon"
      ],
      "pqc_roadmap_count": 0
    },
    "bridge": {
      "top3": [
        "Poly Network",
        "LayerZero"
      ],
      "pqc_roadmap_count": 0
    },
    "custodian": {
      "top3": [
        "BitGo",
        "Ledger (retail)"
      ],
      "pqc_roadmap_count": 0
    },
    "rpc_hsm": {
      "top3": [
        "Neo Global Resources",
        "O3 Labs"
      ],
      "pqc_roadmap_count": 0
    }
  },
  "narrative_summary": "NEO is Band 2 (Acknowledged). GitHub issue #4239 is unusual for this batch — names Dilithium, Falcon, Kyber as PQC evaluation candidates, plus SHA3-512/BLAKE2b-512 hash-size upgrade. Research-only — no code. 7-node dBFT is most centralized among major chains, which paradoxically simplifies a coordinated PQC upgrade. NeoQS (quantum-safe) discussed publicly for years; never shipped.",
  "evaluator_notes": "NEO scores above Solana in Dim 1 due to naming 3 PQC candidates in public GitHub issue. Still Band 2 — no deployed code. 7-node consensus = strong coordination potential, weak decentralization.",
  "narrative_voiced": "NEO is the chain with seven consensus nodes and a public GitHub issue naming Dilithium, Falcon and Kyber. Most decentralised chains cannot coordinate a crypto upgrade. NEO could coordinate one on a group call. Whether that is trust or fragility depends on who owns the seven nodes."
}