{
  "chain_slug": "penumbra",
  "name": "Penumbra",
  "scorecard_profile": "privacy-L2",
  "evaluated_at": "2026-04-18",
  "evaluator": "layerqu-v2-scoring-agent-4",
  "v1_reference": "chainscreen-v1-archive",
  "dimensions": {
    "1_cryptographic_exposure": {
      "weight": 0.12,
      "score": 35,
      "sub_scores": {
        "1a_primitive_inventory": {
          "score": 15,
          "primitives_named": [
            "decaf377 (group based on BLS12-377 curve)",
            "Groth16 zk-SNARKs over BLS12-377",
            "Poseidon hash",
            "Ed25519 (consensus via CometBFT)",
            "Rescue-Prime"
          ],
          "evidence": [
            "https://protocol.penumbra.zone/",
            "Penumbra spec"
          ],
          "note": "Strong primitive inventory — decaf377 + BLS12-377 + Poseidon named."
        },
        "1b_shor_grover_pq_tag": {
          "score": 18,
          "tags": {
            "decaf377 (discrete log on BLS12-377)": "Shor-break",
            "Groth16 over BLS12-377": "Shor-break (pairing-based)",
            "Poseidon": "Grover-weaken",
            "Ed25519": "Shor-break"
          },
          "evidence": [
            "Penumbra protocol spec"
          ],
          "note": "All primitives named with quantum tags."
        },
        "1c_algorithm_family_diversity": {
          "score": 0,
          "families_represented": 0,
          "families": []
        },
        "1d_nist_security_category": {
          "score": 0,
          "mappings": {}
        },
        "1e_implementation_quality": {
          "score": 2,
          "formal_verification": "partial — Henry de Valence (ex-Zcash) cryptographer",
          "constant_time": "intended",
          "libraries": [
            "penumbra-zone/penumbra"
          ],
          "evidence": [
            "https://github.com/penumbra-zone/penumbra"
          ]
        }
      },
      "total_artifacts": 3
    },
    "2_hndl_exposure": {
      "weight": 0.1,
      "score": 18,
      "sub_scores": {
        "2a_active_key": {
          "score": 4,
          "note": "Shielded by default — full diversifier privacy, but spending keys derive from Ed25519-style material."
        },
        "2b_cold_key": {
          "score": 5,
          "note": "Same. Shielded pool all UM is inside."
        },
        "2c_sig_long_term": {
          "score": 4,
          "note": "Privacy commitments are long-lived — decaf377 group element commitments, ring signatures. Shor break retroactively de-anons ALL historical shielded tx."
        },
        "2d_encryption_conf": {
          "score": 5,
          "note": "Standard TLS. Private DEX (ZSwap) batch sealed-bid auctions — sealed-bid privacy relies on same Shor-breakable crypto."
        }
      },
      "total_artifacts": 2
    },
    "3_metadata_privacy_exposure": {
      "weight": 0.25,
      "score": 35,
      "sub_scores": {
        "3a_graph_visibility": {
          "score": 18,
          "note": "Fully shielded by default — no transparent txs. Highest privacy profile."
        },
        "3b_rpc_concentration": {
          "score": 10,
          "note": "Small ecosystem — Penumbra Labs-operated nodes."
        },
        "3c_bridge_correlation": {
          "score": 8,
          "note": "IBC connects Penumbra to Cosmos — metadata leaks at IBC boundary despite shielded internals."
        },
        "3d_retroactive_deanon": {
          "score": 0,
          "note": "CRITICAL: Groth16 over BLS12-377 and decaf377 discrete-log commitments ARE Shor-broken. Every historical shielded Penumbra tx is retroactively de-anonymizable when Shor arrives. Worst-case Chaum scenario. Max score forced to 0-5."
        }
      },
      "total_artifacts": 2
    },
    "4_migration_architecture": {
      "weight": 0.12,
      "score": 20,
      "sub_scores": {
        "4a_crypto_agility": {
          "score": 5,
          "note": "Cosmos SDK module-based — theoretical extensibility, but zk-SNARK primitives are deeply embedded."
        },
        "4b_aa_key_rotation": {
          "score": 5,
          "note": "Limited AA."
        },
        "4c_hard_fork_track_record": {
          "score": 6,
          "note": "Young mainnet (2024)."
        },
        "4d_hybrid_deployment_readiness": {
          "score": 4,
          "note": "No plausible hybrid zk-SNARK envelope on BLS12-377."
        }
      },
      "total_artifacts": 1
    },
    "5_deployment_execution": {
      "weight": 0.18,
      "score": 0,
      "sub_scores": {
        "5a_mainnet_pqc_pct": {
          "score": 0,
          "mainnet_pqc_pct": 0,
          "evidence": []
        },
        "5b_pqc_code_in_consensus": {
          "score": 0,
          "loc_or_bytes": 0
        },
        "5c_validator_pqc_keys": {
          "score": 0,
          "pct": 0
        },
        "5d_published_milestones": {
          "score": 0,
          "count": 0,
          "milestones": []
        },
        "5e_pqc_washing_delta": {
          "score": 0,
          "ratio": 1
        }
      },
      "total_artifacts": 0
    },
    "6_supply_chain_vendor_readiness": {
      "weight": 0.18,
      "score": 3,
      "sub_scores": {
        "6a_wallet": {
          "score": 1,
          "top3": [
            "Penumbra Wallet",
            "Keplr (Cosmos)",
            "Prax"
          ],
          "pqc_roadmap_count": 0
        },
        "6b_bridge": {
          "score": 1,
          "top3": [
            "IBC"
          ],
          "pqc_roadmap_count": 0
        },
        "6c_custodian": {
          "score": 0,
          "top3": [],
          "pqc_roadmap_count": 0,
          "note": "No major custodian support."
        },
        "6d_rpc_hsm": {
          "score": 1,
          "top3": [
            "Penumbra Labs nodes"
          ],
          "pqc_roadmap_count": 0
        }
      },
      "total_artifacts": 0
    },
    "7_governance_coordination": {
      "weight": 0.05,
      "score": 30,
      "sub_scores": {
        "7a_validator_stake_distribution": {
          "score": 6,
          "note": "Small validator set."
        },
        "7b_upgrade_cadence_under_pressure": {
          "score": 8,
          "note": "Post-launch iteration."
        },
        "7c_named_coordination_lead": {
          "score": 10,
          "note": "Penumbra Labs + Henry de Valence."
        },
        "7d_adversarial_coordination_precedent": {
          "score": 6,
          "note": "No precedent."
        }
      },
      "total_artifacts": 1
    }
  },
  "gates": {
    "hybrid_deployment": "FAIL",
    "evidence_reconstruction": "PASS",
    "primitive_naming": "PASS"
  },
  "caps_applied": [
    "Mosca (5a<20%)",
    "Sutor (5d=0)",
    "Preskill (<3 artifacts multiple dims → ×0.5)",
    "Casado (4 tiles pqc=0)",
    "Hybrid gate FAIL → QRI cap 60"
  ],
  "qri": {
    "raw": 15,
    "after_caps": 12,
    "ci_plus_minus": 15,
    "band": 2,
    "band_name": "Acknowledged"
  },
  "migration_stage": 0,
  "mosca_inequality": {
    "X_signature_shelf_life_years": "infinite (historical shielded state is forever reconstructable)",
    "Y_migration_time_years_range": "10-15",
    "Z_10pct_year": 2036,
    "Z_50pct_year": 2041,
    "danger_zone_at_50pct": true
  },
  "four_scenario_grid": {
    "quantum_never": {
      "value_preserved_pct": 100,
      "privacy_preserved_pct": 100
    },
    "arrives_suddenly_pre_migration": {
      "value_preserved_pct": 5,
      "privacy_preserved_pct": 0
    },
    "arrives_slowly_post_migration": {
      "value_preserved_pct": 70,
      "privacy_preserved_pct": 5
    },
    "arrives_slowly_mid_migration": {
      "value_preserved_pct": 25,
      "privacy_preserved_pct": 0
    }
  },
  "burn_vs_rescue_policy": "undeclared",
  "pqc_washing_ratio": 1,
  "vendor_tile_summary": {
    "wallet": {
      "top3": [
        "Penumbra Wallet",
        "Keplr (Cosmos)",
        "Prax"
      ],
      "pqc_roadmap_count": 0
    },
    "bridge": {
      "top3": [
        "IBC"
      ],
      "pqc_roadmap_count": 0
    },
    "custodian": {
      "top3": [],
      "pqc_roadmap_count": 0
    },
    "rpc_hsm": {
      "top3": [
        "Penumbra Labs nodes"
      ],
      "pqc_roadmap_count": 0
    }
  },
  "narrative_summary": "Penumbra is the starkest retroactive-deanon case in the batch. Private-by-default shielded chain built on Groth16 + BLS12-377 + decaf377 discrete logs. Every historical tx's privacy is mathematically reversible when Shor arrives — Chaum's worst-case. Band 2 (Acknowledged) due to low raw scores + small ecosystem, but underlying risk is severe. Zero privacy preserved in suddenly-pre-migration scenario.",
  "evaluator_notes": "CRITICAL surprise in batch. Privacy chain with highest retroactive-deanon exposure. Scoring 3d=0/25 reflects that shielded privacy is entirely built on Shor-breakable primitives. Nano-cap ($1.9M MC per v1) limits immediate blast radius but methodologically Penumbra is the cautionary privacy example.",
  "narrative_voiced": "Penumbra is the only chain where the worst-case scenario is silent. Shielded-by-default privacy built on Groth16 over BLS12-377 plus decaf377 discrete logs. Every historical tx is mathematically reversible once Shor lands. The shielded pool becomes the glass pool, retroactively, forever. Chaum's nightmare, shipped."
}