1A KEM Is Not Diffie-Hellman: Rewiring Protocol Code for ML-KEMSwapping one call for another breaks message order, state, authentication and error handling. Here is what changes when agree becomes encapsulate.Advanced 2Seeds, Expanded Keys and Key Stores: Where Post-Quantum Private Keys LiveA post-quantum private key can be stored three ways, and the choice made at generation is permanent. Here is how to choose, and which key stores can hold what today.Advanced 3Parameter Sets as Policy: Profiles, Weakest Links and One EstateChoosing between 768 and 1024, or 65 and 87, is rarely a technical preference. It is a policy decision, and the weakest component can quietly undo it.Advanced 4Choosing a Post-Quantum Library: Capability, Formats, Validation and MaturityMost mainstream libraries now implement the new standards, but not the same parts of them, not in the same forms, and not with the same assurance. Five questions decide the choice.Advanced 5Signing at Scale: External Mu, Context Strings and Dual SignaturesLarge artifacts, keys that never leave a key store, and two signatures during the transition: the architecture of post-quantum signing in real pipelines.Advanced 6Proving It Is the Right Implementation: ACVP, CMVP and Tests in CIValidation certificates, test vectors and your own tests each prove something different, and each has a blind spot. Here is what they cover, and how to combine them into one gate.Advanced