Congress just agreed: $200B flowed last time this happened

Last Friday I told you about Q-Day, the moment quantum computers become powerful enough to break the encryption protecting your bank account, your brokerage, your retirement savings, and every classified database on the planet.

Monday, I told you that one of the companies the Moonshot Minute editorial team has been researching in that space got significantly cheaper, for reasons that had nothing to do with the quantum thesis.

Today is about where the money is going. Because while the market was focused on earnings headlines and tariff noise last week, something happened in Washington that almost nobody covered.

The Senate Commerce Committee passed the National Quantum Initiative Reauthorization Act without a single dissenting vote.

In a Congress that has spent years fighting over everything from government funding to social media regulation, quantum security cleared committee with zero opposition.

Google endorsed the bill publicly. So did Microsoft, IBM, D-Wave, and a half-dozen quantum startups. Bipartisan co-sponsors, bipartisan industry support, and no debate.

I've been in the financial publishing business long enough to know that when both parties agree on something with that kind of speed and that little friction, it tells me one thing: the procurement dollars are coming. All we have to do is position ourselves in front of the wave.

And I have the receipts.

Three Times Congress Agreed. Three Spending Waves That Followed

Let’s have a quick look at the last three times tech and infrastructure received either unanimous or overwhelming support.

• CHIPS and Science Act, 2022. 

Passed the Senate 64 to 33. Bipartisan. Authorized $280 billion, with $52 billion in direct subsidies for domestic semiconductor manufacturing.

Within two years, private industry had committed between $160 and $200 billion in new investment. Intel broke ground on a $20 billion complex in Ohio that could reach $100 billion. Samsung put $17 billion into Texas. TSMC expanded in Arizona. The federal government put up $52 billion and unlocked four times that amount in private capital.

One semiconductor name in the Moonshot Minute portfolio doubled on that buildout, and today its shares are still climbing, up almost 150%.

• Infrastructure Investment and Jobs Act, 2021. 

Passed the Senate 69 to 30, with 19 Republican senators crossing the aisle. $1.2 trillion for roads, bridges, broadband, the power grid, and EV charging infrastructure.

One grid infrastructure name in the Moonshot Minute portfolio is up over 55% since we added it in February, riding the exact buildout that legislation funded.

• Cybersecurity Information Sharing Act, 2015. 

Passed the Senate 74 to 21. Created the legal framework for companies to share cybersecurity threat intelligence with the federal government without fear of lawsuits.

Before that law, most companies sat on breach data. After it passed, cybersecurity spending went from roughly $75 billion to over $200 billion in less than a decade.

CrowdStrike, Palo Alto, Fortinet, Zscaler, the entire modern cybersecurity industry was built on the infrastructure that vote created.

The Stryker attack I wrote about in late March happened inside the world this law built, and that thesis led to a cybersecurity name being added to the Moonshot Minute portfolio and it’s now up almost 20% in a few weeks.

These three votes alone triggered three spending waves totaling hundreds of billions.

The Moonshot Minute portfolio was positioned ahead of all three each time and it’s one of the reasons why our subscribers stick around for so long.

And now, the quantum reauthorization just cleared committee the same way. Today, we're adding our first name in the space to the Moonshot Minute watchlist because the pattern is the same, and Premium Members benefited greatly each time this happened. Our only job is getting in front of the capital before it arrives.

The First Deadline Is Just 8 Months Away

The quantum spending that’s coming is already baked into compliance calendars. The deadlines are set, and the first one is eight months away.

The NSA's hard mandate. The NSA's updated security framework, called CNSA 2.0, requires all new national security systems to use quantum-safe encryption algorithms by January 2027. Every defense contractor, government IT vendor, and every system that touches classified networks must comply.

New acquisitions after that date must be quantum-proof or they don't get approved. Full migration of legacy systems is required by 2030 to 2035.

The G7 financial roadmap. In January, the G7 Cyber Expert Group, co-chaired by the U.S. Treasury and the Bank of England, published a roadmap for the financial sector. The core migration execution window runs from 2027 to 2034.

That means your bank, your brokerage, and your payment processor are all expected to begin moving to quantum-resistant encryption within the next 18 months. The G7 doesn't make suggestions.

When the U.S. Treasury and the Bank of England co-sign a migration timeline, the compliance machinery follows and is mandatory.

The EU deadline. EU member states are required to have national post-quantum strategies and cryptographic inventories completed by December 31, 2026. Critical financial systems, including banking infrastructure, must be migrated to quantum-resistant cryptography by December 31, 2030.

The picture we have here shows three regulatory bodies, with three overlapping timelines, and all converging on the same window.

How much spending are we talking about?

An institutional research firm published a note this week estimating that direct post-quantum cryptography spending could reach $3 to $8 billion by 2030.

However, that covers the encryption products themselves. The total infrastructure spend those migrations trigger, the hardware upgrades, the compliance audits, the system overhauls across every bank, brokerage, and defense contractor the mandates touch, will be many multiples of that number.

We've seen this before. The CHIPS Act put $52 billion on the table and unlocked $200 billion in private capital. Cybersecurity spending quadrupled in the decade after the 2015 information-sharing law passed.

Initial estimates in compliance-driven spending cycles consistently undercount the total ecosystem impact because they measure the product, not the buildout around it. This is that kind of cycle. It arrives because the deadline arrives.

The Tools Don't Exist Yet

As of early 2026, no vendor has completed the production certification required to run quantum-proof encryption in the hardware that secures regulated payment systems.

Every credit card swipe, every bank wire, every settlement in the country runs through that hardware, and it cannot currently execute the new encryption math in a way that meets regulatory standards. The first certified systems may not arrive until 2027.

The central banks already know this. The Bank for International Settlements ran a pilot project in 2025 called Project Leap, testing post-quantum cryptography in payment systems between central banks.

The institutions at the top of the financial system are testing because they know the infrastructure underneath is exposed.

The question is whether the institutions holding your money, the regional banks, the smaller brokerages, the fintech apps you use day to day, can keep up.

The NSA says January 2027. The G7 says 2027 to 2034. The EU says December 2030. Most of those institutions fall into the 90% that Bain research found had no migration plan at all.

New Watchlist Addition

The editorial team has been tracking this space for some time now. Last week’s essay mapped the four areas of research we’re focused on.

In Monday's email, I explained that some of those names got significantly cheaper for reasons that had nothing to do with the quantum thesis.

Today we're adding that company to the Moonshot Minute watchlist.

Below in the Premium section, Premium Members will find the name, our initial write-up on the company, why it landed on the watchlist now, and the specific conditions that will trigger a buy alert.

This is not a buy recommendation. The entry has to be right and this week the markets are behaving erratically. But the research has passed enough of our filters that Premium readers deserve to see where we are and what we're watching for.

That discipline is how the portfolio got to where it is. We don't rush entries.

The watchlist is where names live until the setup is clean, and Premium readers get to watch the process in real time so they're ready to act the moment the alert drops.

The results of that process over the past six weeks: a 42% gain on a takeover, three consecutive triple-digit closes, and a 137% exit on a position held just under ten months.

Twelve closed positions total, twelve winners, zero losses. The average gain across all closed trades sits around 74%.

Five positions doubled, got trimmed back to original cost basis, and are still climbing on house money. Premium members have zero capital at risk in those names and pure upside from here.

The quantum watchlist name is being held to the same standard. When the entry is right, Premium readers hear first.

What To Do This Week

Call your broker. Call your bank. Ask them one question: what is your plan for post-quantum encryption?

Most of them won't know what you're talking about. Some will give you a vague answer about "monitoring developments." A few, at the largest institutions, might have a real response.

The answer you get will tell you exactly where your money sits on the readiness spectrum. And if the answer is silence, you'll understand why we’ve been spending so much time in this space.

Q-Day is coming. Washington is preparing, Wall Street is waking up, and the compliance clock is already running.

The only question is whether the institutions holding your money will be ready, and whether you'll be positioned on the right side of the wave.

Double D

🔓 Premium Content Begins Here 🔒