War on the Rocks Publishes 'Before Q-Day: The Race to Quantum First'
AIRecht Editor
War on the Rocks published Before Q-Day: The Race to Quantum First on July 20, 2026 — a new essay by Mauritz Kop, founder of the Stanford Center for Responsible Quantum Technology, and Joseph Federici, Senior Policy Analyst at the U.S.-China Economic and Security Review Commission. The essay extends the argument of A Bletchley Park for the Quantum Age, which we covered when it appeared in November 2025, into a full quantum grand strategy: the United States and its allies should field strategically significant quantum capabilities before China does, and should run that effort as one race, under one office. You can read the full essay on War on the Rocks.
The opening line sets the stakes: "Somewhere, a hard drive is filling up with secrets no one can read yet." Adversaries are harvesting encrypted traffic today in the expectation that a future quantum computer will decrypt the quantum-vulnerable public-key layer protecting it. The U.S.-China Economic and Security Review Commission has urged the United States to reach Quantum First — actionable quantum capabilities fielded before China — by 2030. Federici authored the Commission's underlying report, Vying for Quantum Supremacy, and served as Chief of Staff to the Under Secretary of the Air Force.
One Race, Five Fronts
The essay treats cryptography, quantum-AI, quantum networks, quantum sensing, and the quantum supply chain as a single strategic problem that today sits scattered across separate offices. On post-quantum cryptography, the authors document how recent research has revised published resource estimates for cryptographically relevant quantum computation downward, and how the June 22, 2026 executive order now sets deadlines for covered uses on federal high-value assets and high-impact systems: post-quantum key exchange by the end of 2030 and post-quantum digital signatures by the end of 2031. The authors press the scope point: banks, utilities, and hospitals run the same vulnerable encryption and are, in their words, "only being asked politely."
On sensing, the essay sketches the X-Ray City — an explicitly speculative scenario in which drone-borne quantum magnetometers fuse with AI and video into a persistent surveillance layer over ordinary streets. The authors write that they identify no existing policy treatment of networked, AI-fused quantum sensing, and the privacy and human-rights implications they raise deserve their own legal analysis. On networks, the essay details China's carrier-grade quantum-secure communications network of more than 12,000 kilometers of fiber across 80 cities, and warns that a network-standards layer written in Beijing would shape the terms for everyone who connects later. On the supply chain, it maps chokepoints in helium-3, dilution refrigeration, and single-photon detectors that, in the authors' assessment, no single country can resolve alone.
The governance recommendation is direct: put one office in charge of the whole quantum ecosystem, anchored at the National Security Council, with a senior director for quantum readiness, quarterly deputy-level reviews, and an escalation path to principals. The authors borrow a German word for it: Chefsache — the boss's problem, handled personally.
From Bletchley Park's integrated system to the quantum ecosystem: the essay extends the 2025 Bletchley method to all five fronts.
From Bletchley Park to Quantum First
Readers of this blog will recognize the lineage. In the 2025 essay, Kop argued that Bletchley Park succeeded as an integrated system — science, engineering, operations, and alliance management under one roof — and that allied democracies should apply that same method to the post-quantum cryptography migration. The new essay carries the Bletchley method from the migration to the entire quantum ecosystem: the same integration argument, now spanning sensing, networking, AI, and industrial policy, with a named goal and a named office.
The alliance track has also matured. The 2025 essay proposed an "Allied Codebook Abroad." The new piece specifies the instruments: shared standards for quantum network nodes so allied national networks can eventually interconnect; export controls confined to what takes years to master — repeater hardware, testbeds, and access to quantum network services; mutual recognition of European and Japanese certification where testing is rigorous; and a science-enabling quantum computer at the Department of Energy under the Genesis Mission, with a 2028 aim, which the authors propose opening to trusted allies as the strongest reason to join the American system.
The Stanford Scholarship Behind the Essay
Kop writes that the essay grows from the work of the Stanford Center for Responsible Quantum Technology, which he founded, and carries that work into the national security debate. The Center was inaugurated in 2023 during a Stanford visit by Mark Rutte, now Secretary General of NATO. Researchers associated with the Center have published principles and governance frameworks for responsible quantum innovation in Science, Nature Physics, and IOP Quantum Science and Technology, and in the Harvard, Yale, Columbia, and Berkeley law journals. The corpus is archived in the Stanford Law Library's Responsible Quantum Technology collection, and we traced its recent reception in Quantum Law Goes Mainstream.
Separately, the William and Flora Hewlett Foundation announced its $100 million Emerging Technology and Security Initiative on July 16, 2026, with quantum computing among its named priorities. The conversation continues on October 21 at the Quantum Nexus workshop and roundtable Kop convenes as Senior Fellow at the Centre for International Governance Innovation in Waterloo, with SLAC National Accelerator Laboratory Director John Sarrao and Stanford's Larry Diamond among the announced speakers.
What Quantum First Means for European Boards and Counsel
A U.S. strategy essay, read from Europe, previews questions that European boards and counsel should expect on their own agendas. Our editorial analysis below traces the likely direction of future obligations. First, the American migration deadlines are built to travel: through procurement chains, through the State Department's push for allied adoption of the NIST post-quantum standards, and through the G7 Cyber Expert Group's quantum roadmap — a dynamic we analyzed in our G7 quantum governance post. European suppliers to U.S. agencies or regulated customers may encounter comparable cryptographic bill of materials questions through those procurement chains.
Second, the cryptographic inventory is turning into a board-level question on both sides of the Atlantic. We set out the Dutch and EU version of that development in De cryptografische inventaris wordt een bestuursdossier, and the procurement questions that follow from it in Quantumveilig is nog geen lekvrij. The essay recommends post-quantum procurement clauses in future covered federal contracts, subject to implementing rules. NIS2 and DORA give covered entities a risk-governance basis for asking the cryptographic questions; a cryptographic-bill-of-materials requirement would need a separate legal or contractual source.
Third, export controls and certification will shape the European quantum market. The essay's design rule — each control must deny a concrete military capability, in the least trade-restrictive way available, and leave civilian science alone — echoes the proportionality reasoning familiar from European quantum law, and its endorsement of mutual recognition of European certification could inform a future EU negotiating position. We analyzed the June 2026 American executive orders from this angle in Industriepolitiek en quantumrecht.
Read the Essay
The full essay is available on the War on the Rocks Cogs of War hub, and Kop's announcement, with the Stanford and Waterloo context, on LinkedIn. The views expressed in the essay are the authors' own. Its closing line summarizes the strategic wager: "The country that spends the lead time best will hold the advantage for decades."
For many suppliers, quantum-safe migration reaches the legal department through the contract file first. Our self-service contract scan for AI, software, and SaaS agreements maps the relevant contractual exposure; technical migration planning belongs in the accompanying engineering workstream.
Last updated: July 20, 2026