Zero Trust, Decommissioning, and Data Sunset Templates

This appendix provides operational templates for access control, runtime isolation, data sunset, provider exit, and hardware retirement.

Diagram loads as you read

Zero Trust, Decommissioning, and Data Sunset Templates · Figure 1

View diagram source

flowchart LR
    Template[Template] --> Policy[Policy]
    Policy --> Execution[Execution]
    Execution --> Evidence[Evidence]
    Evidence --> Review[Review]

U.1 Quantum access request

Illustrative listing · yaml

access_request:
  requester: user@example.com
  project_id: qproj-1234
  requested_capabilities:
    - simulate
    - submit_research_job
  target_classes:
    - gate_model_small
  data_class: internal_research
  duration_days: 30
  justification: reproduce approved benchmark
  approvals:
    manager: pending
    data_steward: pending
    platform_owner: pending

U.2 Capability matrix

Capability	Exploration	Research	Production	Regulated
simulate	yes	yes	yes	yes
submit hardware job	limited	yes	approved	approved
reserve capacity	no	approved	yes	approved
modify pulse/control	no	restricted	restricted	restricted
publish external claim	no	review	review	review
delete evidence	no	no	no	no

Diagram loads as you read

U.2 Capability matrix · Figure 2

View diagram source

flowchart TB
    Capability[Capability] --> Role[Role]
    Capability --> Project[Project]
    Capability --> Data[Data class]
    Capability --> Target[Target class]
    Capability --> Time[Time limit]

U.3 Decommissioning ticket

Illustrative listing · yaml

decommissioning_ticket:
  asset_id: provider-x-production-account
  asset_type: provider_account
  owner: quantum-platform
  reason: provider_exit
  effective_date: 2026-06-30
  dependencies:
    evidence_packages: 248
    open_incidents: 0
    active_claims: 3
  required_actions:
    - export_job_metadata
    - revoke_service_tokens
    - archive_billing_records
    - update_target_catalog
    - notify_project_owners
  approvals:
    security: required
    legal: required
    platform_owner: required

U.4 Data sunset decision tree

Diagram loads as you read

U.4 Data sunset decision tree · Figure 3

View diagram source

flowchart TB
    Artifact[Artifact] --> Claim{Supports claim?}
    Claim -- yes --> Preserve[Preserve]
    Claim -- no --> Contract{Contractual retention?}
    Contract -- yes --> Retain[Retain]
    Contract -- no --> Regulated{Regulated data?}
    Regulated -- yes --> Governed[Governed retention]
    Regulated -- no --> Expire[Expire]

U.5 Sanitization certificate

Illustrative listing · yaml

sanitization_certificate:
  certificate_id: san-2026-00142
  asset_id: lab-controller-7-ssd-2
  method: purge
  standard_basis: NIST_SP_800_88_R2
  performed_by: infrastructure-ops
  verified_by: security-engineering
  timestamp_utc: 2026-04-19T00:00:00Z
  evidence:
    log_hash: sha256:example
    ticket: decommission-7782

U.6 Provider exit checklist

Diagram loads as you read

U.6 Provider exit checklist · Figure 4

View diagram source

sequenceDiagram
    participant Owner
    participant Provider
    participant Broker
    participant Evidence
    Owner->>Broker: start exit
    Broker->>Provider: export metadata
    Broker->>Evidence: preserve lineage
    Broker->>Provider: revoke credentials
    Broker->>Owner: issue exit report

Checklist:

export job and billing metadata;
preserve evidence package mappings;
revoke provider credentials;
cancel reservations;
update target catalogs;
mark old targets retired;
notify users;
review public claims;
preserve exit certificate.

U.7 Zero-trust runtime audit event

Illustrative listing · json

{
  "event_type": "quantum.policy.decision",
  "principal": "user@example.com",
  "project_id": "qproj-1234",
  "workload_id": "workload-5678",
  "target_class": "gate_model_small",
  "decision": "allow_with_obligations",
  "obligations": ["capture_reproducibility_evidence", "max_cost_50_usd"],
  "timestamp": "2026-04-19T00:00:00Z"
}

U.8 Review workflow

Diagram loads as you read

U.8 Review workflow · Figure 5

View diagram source

flowchart LR
    Submit[Submit request] --> Policy[Automated policy]
    Policy --> Owner[Owner approval]
    Owner --> Execute[Execute]
    Execute --> Evidence[Evidence]
    Evidence --> Close[Close ticket]