Threat Resilience and Network Trust Templates — Operating Quantum Computers

This appendix provides copyable templates for threat modeling, resilience drills, and quantum-network trust reviews.

Diagram loads as you read

Threat Resilience and Network Trust Templates · Figure 1

View diagram source

flowchart LR
    Template[Template] --> Fill[Fill fields]
    Fill --> Review[Review]
    Review --> Evidence[Attach evidence]
    Evidence --> Retain[Retain]

Quantum threat-model record

Illustrative listing · yaml

aid: qtm-0001
asset:
  name: calibration snapshot
  owner: platform-ops
  classification: restricted
boundary:
  source: provider-api
  destination: evidence-store
threats:
  - stale snapshot replay
  - unauthorized modification
  - incomplete export
controls:
  preventive:
    - signed snapshot manifest
    - maximum calibration age policy
  detective:
    - target diff monitor
    - hash verification
  corrective:
    - quarantine affected runs
    - invalidate claims
residual_risk:
  rating: medium
  rationale: provider-side metadata may be incomplete
review:
  owner: security-review
  cadence: quarterly

Abuse-case worksheet

Field	Entry
abuse case
actor
asset
boundary crossed
preconditions
impact
preventive control
detective control
corrective control
evidence required
residual risk

Diagram loads as you read

Abuse-case worksheet · Figure 2

View diagram source

flowchart TB
    Actor[Actor] --> Preconditions[Preconditions]
    Preconditions --> Abuse[Abuse action]
    Abuse --> Impact[Impact]
    Impact --> Controls[Controls]
    Controls --> Evidence[Evidence]

Resilience degradation register

Illustrative listing · yaml

mode: simulator_only
trigger:
  - provider outage
  - evidence store write failure for hardware jobs
allowed:
  - compile
  - dry_run
  - simulator_execution
blocked:
  - hardware_execution
  - external_claim
required_markers:
  - degraded_mode
  - no_hardware_claim
approval:
  automatic: true
  approver: platform-sre
exit_criteria:
  - provider status healthy
  - evidence write path verified

Retry budget template

Field	Value
workload id
max attempts
max additional shots
calibration age tolerance
allowed target substitution
claim invalidation rule
approver

Diagram loads as you read

Retry budget template · Figure 3

View diagram source

flowchart LR
    Attempt[Attempt] --> Budget{Budget left?}
    Budget -- yes --> Revalidate[Revalidate assumptions]
    Revalidate --> Retry[Retry]
    Budget -- no --> Abort[Abort]

Quantum-network trust review

Illustrative listing · yaml

network_review:
  link_id: qlink-001
  quantum_channel:
    medium: fiber
    path_owner: shared
    loss_budget_db: TBD
  classical_channel:
    authentication: required
    replay_protection: required
  key_manager:
    export_policy: restricted
    inventory_reconciliation: daily
  trusted_nodes:
    - id: node-a
      custody_owner: site-security
      physical_access_review: monthly
  telemetry:
    required_metrics:
      - link_availability
      - key_rate
      - qber
      - auth_failure_rate
      - key_buffer_level
  incident_rules:
    ambiguous_custody: freeze_key_export
    auth_failure: quarantine_link

Evidence-room disclosure matrix

Reviewer	Level 0 summary	Level 1 aggregates	Level 2 metadata	Level 3 raw data	Level 4 sensitive controls
public	yes	limited	no	no	no
customer	yes	yes	yes	limited	no
auditor	yes	yes	yes	yes	limited
hardware partner	yes	yes	yes	limited	controlled

Diagram loads as you read

Evidence-room disclosure matrix · Figure 4

View diagram source

flowchart LR
    Reviewer[Reviewer role] --> Policy[Disclosure policy]
    Policy --> View[Scoped view]
    View --> Watermark[Watermark and log]