{
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:2415f286-0af3-4135-b81f-5cfa7adbfd4b",
  "version": 1,
  "metadata": {
    "timestamp": "2026-10-07T21:23:41Z",
    "tools": {
      "components": [
        {
          "type": "application",
          "name": "Quantum Core PQ Scanner",
          "version": "0.5.1",
          "externalReferences": [
            { "type": "website", "url": "https://functorfund.com/quantum/" }
          ]
        }
      ]
    },
    "component": {
      "type": "application",
      "bom-ref": "scan-target",
      "name": "Functor-Fund"
    },
    "properties": [
      { "name": "quantum:filesScanned", "value": "62" },
      { "name": "quantum:cryptographicAssets", "value": "3" },
      { "name": "quantum:disclaimer", "value": "Heuristic source-code inventory. Not a formal audit, and absence of an asset is not proof it is absent from the system." }
    ]
  },
  "components": [
    {
      "type": "cryptographic-asset",
      "bom-ref": "crypto/algorithm/ecdsa-secp256k1",
      "name": "ECDSA over secp256k1",
      "cryptoProperties": {
        "assetType": "algorithm",
        "algorithmProperties": {
          "primitive": "signature",
          "cryptoFunctions": ["sign", "verify"],
          "curve": "secp256k1",
          "classicalSecurityLevel": 128,
          "nistQuantumSecurityLevel": 0
        },
        "oid": "1.3.132.0.10"
      },
      "evidence": {
        "occurrences": [
          { "location": "chain/crates/functor-node/src/eip712.rs", "line": 5 },
          { "location": "chain/crates/functor-node/src/eip712.rs", "line": 105 },
          { "location": "site/js/functor-sign.js", "line": 14 },
          { "location": "site/js/functor-sign.js", "line": 69 },
          { "location": "site/js/functor-sign.js", "line": 119 },
          { "location": "site/js/functor-sign.js", "line": 124 },
          { "location": "site/js/functor-sign.js", "line": 133 },
          { "location": "site/js/trade.js", "line": 14 },
          { "location": "site/js/trade.js", "line": 17 },
          { "location": "site/js/wallet.js", "line": 12 },
          { "location": "site/js/wallet.js", "line": 15 }
        ]
      },
      "properties": [
        { "name": "quantum:occurrenceCount", "value": "11" },
        { "name": "quantum:migrationPriority", "value": "high" },
        { "name": "quantum:classifiedAsWeakness", "value": "false" },
        { "name": "quantum:rules", "value": "PQC-ECC-001" }
      ]
    },
    {
      "type": "cryptographic-asset",
      "bom-ref": "crypto/algorithm/keccak",
      "name": "Keccak",
      "cryptoProperties": {
        "assetType": "algorithm",
        "algorithmProperties": {
          "primitive": "hash",
          "cryptoFunctions": ["digest"],
          "classicalSecurityLevel": 128,
          "nistQuantumSecurityLevel": 2
        }
      },
      "evidence": {
        "occurrences": [
          { "location": "chain/crates/functor-node/src/eip712.rs", "line": 9 },
          { "location": "chain/crates/functor-node/src/eip712.rs", "line": 11 },
          { "location": "chain/crates/functor-node/src/eip712.rs", "line": 12 },
          { "location": "chain/crates/functor-node/src/eip712.rs", "line": 33 },
          { "location": "chain/crates/functor-node/src/eip712.rs", "line": 45 },
          { "location": "chain/crates/functor-node/src/eip712.rs", "line": 49 },
          { "location": "chain/crates/functor-node/src/eip712.rs", "line": 108 },
          { "location": "chain/crates/functor-node/src/eip712.rs", "line": 192 },
          { "location": "chain/crates/functor-node/src/eip712.rs", "line": 198 },
          { "location": "chain/crates/functor-node/src/eip712.rs", "line": 225 }
        ]
      },
      "properties": [
        { "name": "quantum:occurrenceCount", "value": "10" },
        { "name": "quantum:migrationPriority", "value": "low" },
        { "name": "quantum:classifiedAsWeakness", "value": "false" },
        { "name": "quantum:rules", "value": "PQC-HASH-001" }
      ]
    },
    {
      "type": "cryptographic-asset",
      "bom-ref": "crypto/algorithm/sha256",
      "name": "SHA-256",
      "cryptoProperties": {
        "assetType": "algorithm",
        "algorithmProperties": {
          "primitive": "hash",
          "cryptoFunctions": ["digest"],
          "classicalSecurityLevel": 128,
          "nistQuantumSecurityLevel": 2
        },
        "oid": "2.16.840.1.101.3.4.2.1"
      },
      "evidence": {
        "occurrences": [
          { "location": "chain/crates/functor-core/src/state_hash.rs", "line": 16 },
          { "location": "chain/crates/functor-core/src/state_hash.rs", "line": 164 }
        ]
      },
      "properties": [
        { "name": "quantum:occurrenceCount", "value": "2" },
        { "name": "quantum:migrationPriority", "value": "low" },
        { "name": "quantum:classifiedAsWeakness", "value": "false" },
        { "name": "quantum:rules", "value": "PQC-HASH-001" }
      ]
    }
  ]
}