AC1) there's a new crypto-policies-pq-preview subpackage AC2) crypto-policies-pq-preview provides a TEST-PQ subpolicy and nothing else AC3) crypto-policies-pq-preview depends on liboqs and oqsprovider AC4) TEST-PQ can be successfully applied onto all base policies AC5) Applying produces warnings about PQ algorithms being experimental AC6) Applying TEST-PQ generates policy changes only for backends supporting PQ (openssl, nss, gnutls and openssh) AC7) crypto-policies-pq-preview package description (and release notes) states that TEST-PQ is a technology preview AC8) (Optional) Package maintainers of of backends supporting PQ signed-off policy generated by DEFAULT:TEST-PQ (openssl, nss, gnutls and openssh) AC9) (optional) There is a functional test for each backend supporting PQ testing at least the X25519MLKEM768 and SecP256r1MLKEM768 hybrid key agreement schemes (openssl now, nss and gnutls later)

Post-quantum cryptography is not ready for production use in RHEL-10.0, but it's very important to allow testing it early to ease migration later. This is why we're providing a TEST-PQ subpolicy in a separate crypto-policies-pq-preview package. Applying TEST-PQ on top of a different policy (e.g., `update-crypto-policies --set DEFAULT:TEST-PQ for DEFAULT`) is the only current way of trying out postquantum cryptography in RHEL system-wide.