The honest question: six post-quantum systems and a B+ — every grade re-derived against its own band row, and the reason each one holds printed under its bar

The question was put plainly: every one of the systems carries post-quantum primitives, some of them in hybrid form, so how does the assessment still read 7 out of 10 on Security Engineering, on Systems Architecture, on Software Engineering? It deserved a plain answer, and the only honest way to produce one is to open the criteria file at each dimension's band table and check the row's terms one at a time against what exists at the bytes. That was done for all seven dimensions. The grade scale is whole-point: A- means the band below the top is cleared and there is material evidence of the top band; A means the top band is cleared on the substance with one named sub-criterion short. The distinction matters, because it is what separates a grade from a compliment.

Four dimensions moved to A-. Software Engineering: Monzo L5 authority and Dropbox IC4 scope are evidenced across seven repositories, and the top band's shape — a technical vision set ahead of implementation, across systems — is materially present in one post-quantum and honesty grammar written first and holding on all seven; what keeps A out is what a solo builder cannot manufacture, external code review, a hosted build platform, engineers other than the author depending on the vision. Systems Architecture: seven different systems, all three iSAQB competence areas, continuous improvement on the record, and completed modernisations — Guardian-ARM extracted from the marketplace's security layer into its own product, this site moved to the edge behind a hermetic build, Tartarus moved from pure-Python to native constant-time cryptography; held from A by the absence of diagrams a stranger can follow, of any external architecture review, and by one broker route still unverified. Innovation: two products introduced under the CIS gate — the marketplace, live since May 2026, and Guardian-ARM's gauntlet on the public edge — with three more introducing inside the week. Workflow & Orchestration: nearly every DORA Core capability in use on every repository, deploys on demand, small batches measured; hosted continuous integration exists on one repository of seven. The whole follows, as one judgement of the portfolio and never as an average: A-, held from A by revenue, three introductions, a hosted build platform and a human third-party review that do not yet exist. Security Engineering did not move, and this is the part of the answer that matters most. The cryptography is not the cap. Post-quantum primitives wired and proven on six systems is why the dimension is not a B. But the Strong row of the security table asks for SLSA Build L2 — a hosted build platform producing provenance a consumer can verify — and a laptop-built, laptop-signed artifact is Build L1 whatever is inside it. That is a property of the build platform, not of the code, and it is stated in the criteria file's own words. The dimension now prints that reason under its bar, as every dimension now prints what lifts it and what holds it.

The rest of the night's work was on the surfaces the grades live on. Every system wears its post-quantum seal now, including the two whose primitives are staged or newly proven, and the seal's emerald lamp is reserved for a system that is live on the visitor's own clock; every seal reflects, each on a timing hashed from its own name, so no two shimmer together, and a static seal still says in words that it was not measured. The brain that carries the two sovereign siblings lost every flare — the beam between the hemispheres, the blooms, the halos — and gained a nervous system: impulses that run along the fibres as a bright front with a fading tail, a commissure of fibres crossing between the hemispheres node to mirrored node, and the prongs conducting inward and outward on their own clocks; the card rests, the hero thinks, and the hero costs no more per frame than the version it replaced, measured in the same rig. The About surface has four panes, Support living at the foot of Identity, the verdict centred under its grade at every width, the close control clear of every word, and a commit floor that names its own re-meter date. The brand is the way home from every surface. And Tartarus Cloud's brochure now carries what its v14.7.6 manual proves: post-quantum TLS with hybrid downgrade rejection live on the gateway, a post-quantum egress proxy live on loopback, a zero-trust token broker, a fail-closed egress sanitizer, engine failover with ledgered key rotation, and the eight test-only primitives named rather than hidden — with its known limits named beside them.