Grant Application - Post-quantum readiness inventory for the Zcash stack

Submitted as issue #515 . What this is Zcash has said publicly it wants post-quantum signatures around 2027. Before cryptography can be migrated, it has to be located. I am proposing to produce, for the Zcash repositories in scope, a machine-readable cryptographic inventory (CycloneDX CBOM) and a post-quantum migration map that says, per algorithm and per role, what it is used for, whether Shor or Grover applies, and what has to change. $12,000, three two-week milestones, one person. I have now done the whole stack, unpaid, before any decision The application cited one repository. While it sits, I did the other five, so you can judge the work rather than the pitch. Every one is a signed bundle that verifies in one command with the public key it contains — no trust in me required. Repository Files Inventory Shor-vulnerable Findings High Medium librustzcash @ 8672a4b2 333 46 19 51 2 10 zebra @ 147a6a8b 439 27 14 19 2 2 lightwalletd @ 4abfe9cd 34 8 3 14 0 0 zcash-android-wallet-sdk @ a95780ac 350 14 2 33 0 6 zcash-swift-wallet-sdk @ 4895ee05 205 12 2 32 0 7 zodl-android @ 229dd3bf 1,609 5 0 2 0 0 Total 2,970 112 40 151 4 25 One thing to read correctly in that table: severity depends o