{
  "service": "z6-pqc-gateway",
  "version": "4.0.0",
  "key_establishment": {
    "algorithm": "ML-KEM-768",
    "standard": "NIST FIPS 203",
    "public_key_bytes": 1184,
    "ciphertext_bytes": 1088,
    "note": "NIST standard, used as specified. No custom construction."
  },
  "admission_control": {
    "scheme": "hash-bound mixed-radix proof-of-work",
    "structure": "64 elements of Z/6Z; a constraints mod 2 + b constraints mod 3",
    "difficulty": "2^a * 3^b (3-smooth ladder, 42 rungs, worst gap 2.0x)",
    "wire_bytes": 24,
    "verify_us": 1.5,
    "decapsulate_us": 585.39,
    "reject_ratio": 390,
    "provides": "stateless admission proof-of-work; HKDF context binding",
    "does_not_provide": "confidentiality (that is ML-KEM-768's job)",
    "quantum": "search problem; Grover halves each rung; size a,b for 2x classical bits",
    "grover_oracle": "99.98% SHA-256 by gate count (12.58M 2q ops vs 580 for the Z6 check)"
  },
  "status": {
    "maturity": "research software",
    "moat_attack_surface": "5 strategies run; none beat 0.693*6^k random search",
    "legacy_v3_routes": "deprecated; key derivation is transcript-derivable"
  },
  "endpoints": {
    "GET /api/server-key": "ML-KEM-768 public key",
    "POST /api/seal": "encapsulate-to-server sealing",
    "GET /api/moat-params": "admission difficulty + live context (a,b params)",
    "POST /api/moat-admit": "verify an admission token"
  },
  "docs": "https://secz6.oooooooooo.se"
}