// 00 · core finding
The Pattern in One Sentence
Dual-Velocity: A class of phenomena — predominantly enterprise, security, and policy-driven — where specialist communities (measured via Wikipedia pageviews) maintain sustained, high-level engagement for years while public search attention (Google Trends) remains near zero. When public ignition finally occurs, it is not gradual. It is a single-month breakout triggered by a regulatory or institutional event.
This is not a measurement artifact. It is a structural property of how certain technologies diffuse — through institutional channels first, invisible to public search behavior until a legible frame forces mainstream awareness.
The Zorthex v2.0 dataset contains 4 confirmed Dual-Velocity cases with full three-source verification. All four broke out in the same window: June–August 2025. That synchronization is itself a finding.
// 01 · the convergence chart
Four Signals. One Window. Jan 2025 – Jun 2026
Google Trends (0–100) · All four DV cases · Jan 2025–Jun 2026 · CSV locked 1 Sep 2026
Post-Quantum Crypto
Zero Day Vulnerability
AI Watermarking
Endpoint Security
Threshold 25/100
Before August 2025: three of the four cases were below the structural threshold. After August 2025: all four are above it. The convergence is not staggered over months — it is compressed into a 6-week window.
// 02 · the four cases
Case-by-Case: The Divergence Data
The defining signature of Dual-Velocity is the ratio between Wikipedia engagement (specialist) and Google Trends (public). A high Wikipedia baseline combined with near-zero Google Trends is the signal. The wider the gap, the more pronounced the pattern.
Post-Quantum Cryptography
Wiki ~338/day · GT ~2/100 · 2015–2024
9 years of specialist reading. Security architects, CISO teams, compliance officers preparing for quantum migration — while public search stayed near zero. Breakout Aug 2025 (70/100). Peak Apr 2026 (100/100). L = ~91 months. Strongest DV case in dataset.
Zero Day Vulnerability
Wiki ~15/day · GT ~8/100 · pre-2020
L = 231 months — the longest documented lag in the Zorthex dataset. Security researchers tracking zero-days operationally for decades while the concept remained invisible to mainstream search. Log4Shell (Dec 2021) triggered the first major public spike. Now STRUCTURAL with 37+ consecutive months above threshold.
AI Watermarking
Wiki ~144/day · GT ~2/100 · 2023–mid 2025
Youngest case in the set — t_start October 2023 (Biden Executive Order 14110 mandating AI watermarking standards). Within 2 years: Wikipedia engaged at technical baseline, GT near zero. Breakout Aug 2025 (47/100). Peak May 2026 (100/100), then retreated to 22/100 in August 2026. 13 consecutive months above threshold reached, then broken. Classification: OBSERVATION — spike and retreat. EU AI Act watermarking announcements (May 2026) drove the peak; attention faded after implementation.
Endpoint Security
Wiki ~90/day · GT ~14/100 · pre-2025
Pure B2B phenomenon — enterprise security teams managing endpoints operationally for years with no mainstream vocabulary. GT barely above noise floor pre-2025. Breakout Jun 2025, peak Jun 2026 (100/100). 16 consecutive months above threshold — STRUCTURAL confirmed. Current score Aug 2026: 46/100. Wikipedia declining (36/day, −35% vs 2025) while GT holds strong: classic transition from specialist to mainstream.
// 03 · comparative data
Side by Side
| Phenomenon |
L (months) |
GT pre-2025 |
Wiki baseline |
Breakout |
Peak |
Status |
| Post-Quantum Crypto |
~91 |
~2/100 |
~338/day |
Aug 2025 |
100 · Apr 2026 |
OBSERVATION* |
| Zero Day Vulnerability |
231 |
~8/100 |
~15/day |
Dec 2021 |
100 · Dec 2021 |
STRUCTURAL |
| AI Watermarking |
~32 |
~2/100 |
~144/day |
Aug 2025 |
100 · Jun 2026 → 24 Aug |
OBSERVATION (retreated) |
| Endpoint Security |
~144 |
~14/100 |
~90/day |
Jun 2025 |
100 · Jun 2026 · 46 Aug |
STRUCTURAL (16mo) |
* September 2026 revision: PQC and AI Watermarking both reached 100/100 peak then retreated below threshold — classified OBSERVATION (breakout occurred, not consolidated). Zero Day and Endpoint Security confirmed STRUCTURAL (30 and 16 consecutive months). Wikipedia baselines: per individual ZCR reports and dataset v2.0.
// 04 · the august 2025 cluster
Why Did Four Cases Break Out Simultaneously?
⚡ August 2025 Synchronization — Declared Finding
Post-Quantum Crypto
Aug 2025: 70/100 · from ~5/100
AI Watermarking
Aug 2025: 47/100 · from ~2/100
Endpoint Security
Jun–Aug 2025: 26→65/100
Zero Day Vulnerability
Jul–Aug 2025: 57→68/100 (already above threshold)
Three of four cases crossed the structural threshold within the same 6-week window. This is documented in the Zorthex v2.0 dataset as the August 2025 cluster — a broad attention wave across security, AI governance, and cryptographic infrastructure simultaneously.
The most likely structural explanation: the convergence of multiple regulatory timelines in mid-2025. NIST PQC compliance clocks, EU AI Act implementation, and enterprise security mandates created a synchronized institutional pressure that forced mainstream legibility across domains that had previously remained specialist-only.
Methodological note: The August 2025 cluster is declared in the Zorthex v2.0 dataset as a real-world attention wave, not a methodological artifact. Cases whose first-above-threshold date falls in this window carried an OBSERVATION flag. September 2026 revision: the 12-month window has now been tested. Result: 2 of 4 achieved STRUCTURAL (Zero Day 30mo, Endpoint Security 16mo); 2 of 4 spiked to 100/100 then retreated below threshold (PQC 5mo, AI Watermarking 13mo then broken). The cluster is real — but consolidation is not uniform.
// 05 · implications
What Dual-Velocity Means Operationally
For Enterprise Timing
Dual-Velocity phenomena have a long invisible phase where the technology is operationally deployed but publicly unknown. By the time Google Trends crosses threshold, the early-mover advantage is already closed. The signal to act is Wikipedia, not Google Trends.
For Investment Due Diligence
A high Wikipedia baseline with near-zero Google Trends is a leading indicator, not a lagging one. It means specialist adoption is underway before mainstream awareness. Historically in this dataset, this precedes public breakout by 2–9 years.
For Regulatory Strategy
All four DV cases in this analysis are policy-trigger phenomena. The public breakout was caused by a regulatory document, not a market event. This means the compliance clock and the attention clock are the same clock — when regulators move, public awareness follows within months.
For Competitive Positioning
The window between Wikipedia activation and Google Trends breakout is the operational advantage window. In PQC: 9 years. In AI Watermarking: 2 years. In Endpoint Security: years of B2B deployment before consumer vocabulary formed. That window is measurable. Zorthex measures it.
// 06 · what to watch
Forward Monitoring Framework
IF
Google Trends July 2026 ≥ 25/100 for PQC and AI Watermarking
THEN
Resolved (Sep 2026): July and August 2026 data is in. Result: Zero Day and Endpoint Security confirmed STRUCTURAL. PQC and AI Watermarking did NOT consolidate — both spiked to 100/100 then retreated. The cluster is confirmed as a real attention wave, but consolidation split 2/2. The divergence itself is informative: sustained phenomena (Zero Day, Endpoint) vs event-driven spikes (PQC, Watermarking).
IF
A fifth phenomenon shows Wikipedia baseline ≥ 100/day with GT ≤ 10/100
THEN
New DV candidate. Current candidates from the dataset: AI Explainability (Wiki ~79/day 2026, GT 42/100 — has crossed threshold, now STRUCTURAL at 19mo), Digital Identity (Wiki ~169/day, GT low). XAI has exited Dual-Velocity and entered mainstream — consistent with EU AI Act enforcement pressure.
IF
EU AI Act enforcement begins to produce sanction opinions (2026–2027)
THEN
AI Explainability and AI Watermarking would likely see a second attention wave. The pattern: initial regulatory publication triggers breakout, first enforcement actions trigger consolidation. EU AI Act GT score August 2026: 42/100 (above threshold, 14 consecutive months — STRUCTURAL). The regulatory trigger is now confirmed as a sustained attention driver.
// 07 · declared limitations
What This Analysis Does Not Claim
This is a pattern description, not a predictive model. Dual-Velocity is an observed structural property of specific cases — it does not predict which phenomena will exhibit it, or when breakout will occur.
Wikipedia is a proxy, not a measurement of deployment. High Wikipedia pageviews indicate informational engagement — not operational adoption. An organisation can be fully deployed on a technology with zero Wikipedia reads if implementation is entirely API/infrastructure level.
The August 2025 cluster may be a confound. The synchronization of four breakouts in one window may reflect a general attention wave (AI/security regulation in 2025) rather than a structural property of DV phenomena. Declared and flagged. The 12-month confirmation window will clarify.
n=4 is small. Four confirmed cases is sufficient to name a pattern, not sufficient to derive a statistical law. The dataset is growing — v3.0 will include additional DV candidates. This analysis is descriptive, not inferential.
// 08 · sources & related reports
Data Sources
| Case |
Google Trends CSV |
Wikipedia |
Full Report |
| Post-Quantum Cryptography |
Locked 22 Jun 2026 |
Locked 22 Jun 2026 |
ZCR-2026-002 |
| Zero Day Vulnerability |
Locked 22 Jun 2026 |
Dataset v2.0 |
ZCR forthcoming |
| AI Watermarking |
Locked 22 Jun 2026 |
Dataset v2.0 |
ZCR forthcoming |
| Endpoint Security |
Locked 22 Jun 2026 |
Dataset v2.0 |
ZCR forthcoming |
All Google Trends CSVs available at
github.com/zorthex2026/zorthex-diffusion-lag.
Wikipedia pageviews via Wikimedia REST API.
If you follow this pipeline and obtain different results — that is a contribution.
Contact: zorthex.official@gmail.com