Planned for around 2029: validators vote with quantum-safe, hash-based signatures merged by leanVM.
Why it matters: Consensus would no longer depend on anything a quantum computer can break.
On the map: hash-based signatures aggregated in leanVM, replaces BLS
Map note, rests on: hash security + one signature per slot + sound aggregation
Strawmap fork K* (around 2029)[1]: validators attest with hash-based XMSS-style signatures, aggregated into one leanVM proof[2], replacing BLS entirely in consensus.
It rests on hash security, on never signing twice per slot, and on leanVM aggregation being sound. With it, consensus no longer depends on any assumption Shor's algorithm breaks.
If any of these breaks, this breaks too.
If this breaks, these break with it.
Nothing on the map depends on it: it is an end point of the roadmap.
Next-step links, not dependencies: these don't fall together.