H33-PQ Verified™

H33-PQ sits above the entire trust stack

The standard names what gets evaluated. HATS evaluates it continuously. Each substrate layer contributes evidence to the score.

Verified → Assessed → Certified

The word “certified” carries legal and commercial baggage — who certified it? can dead-end a sale. H33-PQ leads with machine-generated evidence and escalates to human review only where buyers require it.

What H33-PQ Verified actually measures

The standard scores the entire trust stack — not just cryptographic algorithms. Each pillar is evaluated continuously by HATS.

Why H33-Root makes the standard stronger

A company can be PQ-compliant today and lose it tomorrow because somebody changed a signing path, introduced a non-PQ dependency, added a new vendor, or deployed a vulnerable agent.

H33-Root governs the authority to make those changes. Every score-affecting change is bound to a delegation chain — H33-PQ Verified + Authority Verified is strictly stronger than H33-PQ Verified alone.

Drop one block of HTML on your site

The badge is a self-contained block of HTML. No JavaScript dependency. Renders identically on any framework. Score and timestamp update from a tiny JSON endpoint H33 hosts at /api/h33-pq/{customer-id}.json.

<!-- H33-PQ Verified badge — drop anywhere on your site -->
<a href="https://h33.ai/standards/post-quantum-verified/?id={your-customer-id}"
   target="_blank" rel="noopener"
   data-h33-badge="{your-customer-id}"
   style="display:inline-flex;align-items:center;gap:12px;
          padding:12px 18px;background:#0f0f10;border:1.5px solid #C9956C;
          border-radius:10px;color:#fff;text-decoration:none;
          font-family:system-ui,sans-serif">
    <img src="https://h33.ai/assets/images/h33-badge-logo-32-dark.png"
         alt="H33" width="30" height="30" style="border-radius:5px">
    <div>
        <div style="font:700 9px/1 monospace;color:#C9956C;letter-spacing:2.5px">
            H33-PQ VERIFIED
        </div>
        <div data-h33-score>--/100</div>
        <div style="font:400 10px monospace;color:#aaa">Continuous Attestation</div>
        <div data-h33-attest style="font:400 10px monospace;color:#888">
            Last verified: pending
        </div>
        <div style="font:700 9px/1 monospace;color:#666;letter-spacing:1.4px;margin-top:4px">
            POWERED BY HATS
        </div>
    </div>
</a>
<script src="https://h33.ai/assets/h33-pq-badge.js" async></script>

The optional h33-pq-badge.js fetches the latest score and timestamp from the customer endpoint every 60 seconds. Without it, the badge still renders — it just shows the last server-rendered state.

What HATS needs to evaluate the five pillars

For a customer to earn H33-PQ Verified, HATS needs read-access (or telemetry) to evaluate each pillar. None of this is novel infrastructure — instrumentation against existing systems.