{
  "chain_slug": "starknet",
  "name": "Starknet",
  "scorecard_profile": "rollup-L2",
  "evaluated_at": "2026-04-17",
  "evaluator": "layerqu-v2-scoring-agent-5",
  "v1_reference": "chainscreen-v1-archive",
  "dimensions": {
    "1_cryptographic_exposure": {
      "weight": 0.15,
      "score": 62,
      "sub_scores": {
        "1a_primitive_inventory": {
          "score": 15,
          "primitives_named": [
            "Stark curve ECDSA (user signatures)",
            "Pedersen hash (Stark-native)",
            "Poseidon (Stark-native, ZK-friendly)",
            "FRI (STARK proof system, hash-based)",
            "Keccak-256 (EVM interop)"
          ],
          "evidence": [
            "v1:chainscreen-v1-archive/data/chains/starknet.json"
          ],
          "note": "Stark curve distinct from secp256k1; proof system is FRI-based (hash-only)."
        },
        "1b_shor_grover_pq_tag": {
          "score": 15,
          "tags": {
            "Stark curve ECDSA": "Shor-break (elliptic curve)",
            "Pedersen hash": "Grover-weaken",
            "Poseidon": "Grover-weaken",
            "FRI": "PQ-safe (hash-based, Grover-weaken only)"
          },
          "evidence": [
            "v1:chainscreen-v1-archive/data/chains/starknet.json"
          ],
          "note": "Proof system (FRI) is PQ-safe; user signatures (Stark curve ECDSA) are Shor-breakable."
        },
        "1c_algorithm_family_diversity": {
          "score": 12,
          "families_represented": 1,
          "families": [
            "hash-based (FRI/Poseidon proof layer)"
          ],
          "note": "FRI is hash-based and PQ-safe; represents one PQ family on proof layer. User signature layer still classical."
        },
        "1d_nist_security_category": {
          "score": 10,
          "mappings": {
            "Stark curve ECDSA": "~128-bit classical (0-bit PQ for sigs)",
            "FRI": "128-bit PQ (hash-based)"
          },
          "evidence": [],
          "note": "FRI proof system meets NIST PQ category 1 security by hash hardness."
        },
        "1e_implementation_quality": {
          "score": 10,
          "formal_verification": "Cairo formal verification toolchain; Stone/Stwo provers audited",
          "constant_time": "standard",
          "libraries": [
            "Papyrus (Rust)",
            "Juno (Go)",
            "Pathfinder (Rust)"
          ],
          "evidence": []
        }
      },
      "total_artifacts": 2
    },
    "2_hndl_exposure": {
      "weight": 0.1,
      "score": 42,
      "sub_scores": {
        "2a_active_key_exposure": {
          "score": 10,
          "note": "Native AA from day one: no EOAs. User keys inside smart accounts; can rotate. Reduces active HNDL."
        },
        "2b_cold_key_exposure": {
          "score": 12,
          "note": "Chain is ~36 months old. Smaller dormant surface than L1."
        },
        "2c_signature_longterm_validity": {
          "score": 10,
          "note": "Historical Stark curve signatures are Shor-breakable but AA allows key rotation; inclusion is enforced by FRI proofs (PQ-safe)."
        },
        "2d_encryption_confidentiality": {
          "score": 10,
          "note": "Standard TLS; no PQC KEM in RPC layer."
        }
      },
      "total_artifacts": 1
    },
    "3_metadata_privacy_exposure": {
      "weight": 0.1,
      "score": 35,
      "sub_scores": {
        "3a_tx_graph_visibility": {
          "score": 8,
          "note": "Transparent ledger; L2 tx graph visible via sequencer and explorers."
        },
        "3b_rpc_mempool_concentration": {
          "score": 10,
          "note": "Starkware-operated sequencer (centralized). Decentralized sequencing on roadmap."
        },
        "3c_cross_chain_bridge_correlation": {
          "score": 10,
          "note": "Native Ethereum bridge correlates addresses L1<->L2."
        },
        "3d_retroactive_deanon_risk": {
          "score": 7,
          "note": "No shielded pool on Starknet; retroactive de-anon risk limited to tx graph inference, not PQ-amplified."
        }
      },
      "total_artifacts": 1
    },
    "4_migration_architecture": {
      "weight": 0.18,
      "score": 82,
      "sub_scores": {
        "4a_crypto_agility": {
          "score": 22,
          "note": "Native AA since genesis. Cairo VM supports arbitrary signature validation. No hard fork needed to add ML-DSA or Falcon verifiers."
        },
        "4b_account_abstraction_key_rotation": {
          "score": 24,
          "note": "Full AA: every account is a contract. Per-account signature scheme, per-account rotation, multisig, social recovery — deployed from day one. Strongest AA in evaluated set."
        },
        "4c_hard_fork_track_record": {
          "score": 18,
          "note": "Cairo v1 migration (2023-2024) completed; Regenesis coordinated. Sequencer upgrades smooth. No contested forks."
        },
        "4d_hybrid_deployment_readiness": {
          "score": 18,
          "note": "Proof system already PQ-safe (FRI). Hybrid path = pair AA-rotatable user sigs with existing STARK proofs. No mainnet hybrid signature yet; Starkware has acknowledged PQ trajectory."
        }
      },
      "total_artifacts": 2
    },
    "5_deployment_execution": {
      "weight": 0.22,
      "score": 35,
      "sub_scores": {
        "5a_mainnet_pqc_pct": {
          "score": 8,
          "mainnet_pqc_pct": 50,
          "evidence": [],
          "note": "Proof layer (FRI) is already PQ-safe and is ~50% of chain crypto burden. User signature layer (Stark curve ECDSA) is not PQ; counted partially."
        },
        "5b_pqc_code_in_client": {
          "score": 10,
          "note": "STARK/FRI proving code in Stone/Stwo provers is shipped PQ-safe code. No ML-DSA signature code in client yet."
        },
        "5c_validator_pqc_adoption": {
          "score": 5,
          "note": "Single sequencer (Starkware). N/A for validator adoption."
        },
        "5d_published_milestones_count": {
          "score": 7,
          "count": 3,
          "note": "Milestones: (1) STARK provers shipped PQ-safe, (2) Coinbase PQ board recognition, (3) Stwo next-gen prover."
        },
        "5e_pqc_washing_delta": {
          "score": 5,
          "ratio": 1.5,
          "note": "Low: claims match shipped FRI code; no user-signature PQC yet."
        }
      },
      "total_artifacts": 2
    },
    "6_supply_chain_vendor_readiness": {
      "weight": 0.2,
      "score": 15,
      "sub_scores": {
        "6a_wallet": {
          "score": 4,
          "top3": [
            "Argent X",
            "Braavos",
            "Ledger (via Argent)"
          ],
          "pqc_roadmap_count": 0,
          "evidence": []
        },
        "6b_bridge": {
          "score": 3,
          "top3": [
            "StarkGate (canonical)",
            "Orbiter",
            "LayerSwap"
          ],
          "pqc_roadmap_count": 0,
          "evidence": []
        },
        "6c_custodian": {
          "score": 4,
          "top3": [
            "Coinbase Custody",
            "BitGo",
            "Anchorage"
          ],
          "pqc_roadmap_count": 0,
          "evidence": []
        },
        "6d_rpc_hsm": {
          "score": 4,
          "top3": [
            "Alchemy",
            "Infura",
            "Blast API"
          ],
          "pqc_roadmap_count": 0,
          "evidence": []
        }
      },
      "total_artifacts": 1
    },
    "7_governance_coordination": {
      "weight": 0.05,
      "score": 45,
      "sub_scores": {
        "7a_validator_stake_distribution": {
          "score": 8,
          "note": "Single Starkware sequencer; decentralization in progress."
        },
        "7b_upgrade_cadence_under_pressure": {
          "score": 14,
          "note": "Regenesis and Cairo v1 migration demonstrate coordination capacity."
        },
        "7c_named_coordination_lead": {
          "score": 12,
          "note": "Named: Eli Ben-Sasson (founder), Starkware team, Starknet Foundation."
        },
        "7d_adversarial_coordination_precedent": {
          "score": 11,
          "note": "STRK airdrop controversy 2024; foundation governance immature."
        }
      },
      "total_artifacts": 1
    }
  },
  "gates": {
    "hybrid_deployment": "CONDITIONAL (FRI proof layer is PQ-safe; user sig layer still classical)",
    "evidence_reconstruction": "PASS",
    "primitive_naming": "PASS"
  },
  "caps_applied": [
    "mosca_cap_60 (user sig layer 5a<50%)",
    "aaronson_cap_preserved (FRI PQ-safe proof layer)"
  ],
  "qri": {
    "raw": 50,
    "after_caps": 46,
    "ci_plus_minus": 7,
    "band": 4,
    "band_name": "Transitioning-Partial"
  },
  "migration_stage": 2,
  "mosca_inequality": {
    "X_signature_shelf_life_years": "3-8 (rotatable via AA)",
    "Y_migration_time_years_range": "2-5 (AA substrate already live)",
    "Z_10pct_year": 2036,
    "Z_50pct_year": 2041,
    "danger_zone_at_50pct": false
  },
  "four_scenario_grid": {
    "quantum_never": {
      "value_preserved_pct": 100,
      "privacy_preserved_pct": 100
    },
    "arrives_suddenly_pre_migration": {
      "value_preserved_pct": 55,
      "privacy_preserved_pct": 40
    },
    "arrives_slowly_post_migration": {
      "value_preserved_pct": 85,
      "privacy_preserved_pct": 60
    },
    "arrives_slowly_mid_migration": {
      "value_preserved_pct": 70,
      "privacy_preserved_pct": 50
    }
  },
  "burn_vs_rescue_policy": "AA-rescue likely (per-account rotation native); no ratified policy",
  "pqc_washing_ratio": 1.5,
  "vendor_tile_summary": {
    "wallet": {
      "top3": [
        "Argent X",
        "Braavos",
        "Ledger (via Argent)"
      ],
      "pqc_roadmap_count": 0
    },
    "bridge": {
      "top3": [
        "StarkGate",
        "Orbiter",
        "LayerSwap"
      ],
      "pqc_roadmap_count": 0
    },
    "custodian": {
      "top3": [
        "Coinbase Custody",
        "BitGo",
        "Anchorage"
      ],
      "pqc_roadmap_count": 0
    },
    "rpc_hsm": {
      "top3": [
        "Alchemy",
        "Infura",
        "Blast API"
      ],
      "pqc_roadmap_count": 0
    }
  },
  "narrative_summary": "Starknet is structurally PQ-advantaged: its STARK/FRI proof system is hash-based (PQ-safe) and its native account abstraction makes signature migration a per-account upgrade, not a hard fork. The gap is user signatures (Stark curve ECDSA) remain classical with no shipped PQ signature scheme. Upside: Coinbase PQ board recognition, PQ-safe proofs already in production — among the best structural posture in L2.",
  "evaluator_notes": "Highest QRI in batch. Unique double advantage: PQ-safe proof system + native AA. Migration Architecture (82) is top-tier. Deployment Execution partial credit for FRI layer. Gates: primitive-naming PASS; hybrid CONDITIONAL (half the stack is PQ).",
  "narrative_voiced": "Starknet is one of the few chains where half the stack is already post-quantum. The FRI proof system is hash-based and PQ-safe, and native account abstraction makes each user's signature a per-account upgrade rather than a hard fork. The gap is the user signature layer itself, still on Stark curve ECDSA with no shipped PQ scheme."
}