SUPPORTED CAPABILITIES

Claims follow proof.

Any Node.js service using RSA or ECDSA is in scope — primitives that secure thousands of npm packages. Quantum Twin covers five quantum-vulnerable boundary classes today (RSA, ECDSA, ECDH/DH, Web Crypto, JWT).

A row is fully supported only when it has a detector, an automatic adapter, an independent verifier, positive and negative crypto tests, a sample test environment, Windows and Ubuntu proof, and documentation. Anything missing keeps a row experimental or discovery-only — never dressed up as more.

STRONGEST PATH

The path we prove end to end.

RSA signing and verificationFULLY SUPPORTED

Runtime: Node.js crypto
Migration: ML-DSA-65

DetectorSupported
AdapterSupported
VerifierSupported
WindowsSupported
UbuntuSupported

FULL MATRIX

Every boundary, honestly graded.

Filter by level. A check means that capability is proven for the boundary; a dash means it is not claimed yet.

Supported migration	Level	DetectorFinds this cryptography in your code.	AdapterCan automatically rewrite it to the post-quantum target.	VerifierHas repeatable checks that prove the result works.	Test environmentA committed sample system exercises this end to end.	WindowsProven on Windows CI.	UbuntuProven on Ubuntu CI.
Native node:crypto RSA sign/verify to ML-DSA-65	FULLY SUPPORTED	Yes	Yes	Yes	Yes	Yes	Yes
Native node:crypto RSA encryption envelope to ML-KEM-768 KEM-DEM	EXPERIMENTAL	Yes	Yes	Yes	Yes	Yes	No
Native node:crypto ECDSA sign/verify to ML-DSA-65	FULLY SUPPORTED	Yes	Yes	Yes	Yes	Yes	Yes
Native node:crypto ECDH/DH key agreement to ML-KEM-768 KEM-DEM	EXPERIMENTAL	Yes	Yes	Yes	No	Yes	No
Web Crypto and library RSA/ECDSA (node-rsa, JSEncrypt, JWT RS256/ES256)	DISCOVERY ONLY	Yes	No	No	No	No	No
Single Node repository and Node CLI/library	FULLY SUPPORTED	Yes	Yes	Yes	Yes	Yes	Yes
pnpm monorepo	EXPERIMENTAL	Yes	No	Yes	Yes	Yes	No
Multiple repositories	EXPERIMENTAL	Yes	Yes	Yes	Yes	Yes	No
Docker Compose systems	EXPERIMENTAL	Yes	No	No	Yes	Yes	No
Express, Fastify, NestJS, and Next.js server applications	EXPERIMENTAL	Yes	No	Yes	Yes	Yes	No
Mixed ESM/CommonJS workers and scheduled jobs	EXPERIMENTAL	Yes	No	Yes	Yes	Yes	No
Yarn workspaces	EXPERIMENTAL	Yes	No	Yes	Yes	Yes	No
TLS/X.509, JWT/JOSE, cloud KMS, HSM/PKCS#11, third-party crypto	DISCOVERY ONLY	Yes	No	No	No	No	No
Non-Node and browser/mobile/hardware cryptography	DISCOVERY ONLY	Yes	No	No	No	No	No

WHAT THE COLUMNS MEAN

Detector finds the cryptography. Adapter rewrites it automatically. Verifier proves the result. Test environment is a committed sample system that exercises it end to end.

VERIFIED MEANS

Specified engineering-contract checks passed on the named sample and platforms. It is not certification, formal verification, production approval, or proof of whole-system quantum safety.

SOURCE OF TRUTH

This page renders directly from support-matrix.json, so claims cannot drift from what the tests prove.