Documentation

Daml contract source - OpenZeppelin/canton-token-template/simple-token/daml/SimpleToken/Allocation.daml -- | Allocation for DvP settlement. -- SimpleAllocation: backed by a locked holding, supports execute/cancel/withdraw. module SimpleToken.Allocation where import Splice.Api.Token.MetadataV

Daml contract source - OpenZeppelin/canton-token-template/simple-token/daml/SimpleToken/AllocationRequest.daml -- | Allocation request template for DvP test scenarios. -- Allows an executor to request allocations from senders. module SimpleToken.AllocationRequest where import DA.TextMap qual

Daml contract source - OpenZeppelin/canton-token-template/simple-token/daml/SimpleToken/ContextUtils.daml -- | Choice context utilities for the simple token standard. -- Copied from Splice.Amulet.TokenApiUtils to avoid transitive dependency on splice-amulet. module SimpleToken.ContextUtils w

Daml contract source - OpenZeppelin/canton-token-template/simple-token/daml/SimpleToken/Holding.daml -- | Holdings for the simple token standard implementation. -- SimpleHolding: unlocked holding with flat Decimal amount. -- LockedSimpleHolding: locked holding with admin-only lock holder and

Daml contract source - OpenZeppelin/canton-token-template/simple-token/daml/SimpleToken/Preapproval.daml -- | Transfer preapproval for direct transfers. -- Nonconsuming: any sender can transfer to the receiver without consuming this contract. module SimpleToken.Preapproval where import Splic

Daml contract source - OpenZeppelin/canton-token-template/simple-token/daml/SimpleToken/Rules.daml -- | SimpleTokenRules: the factory contract implementing TransferFactory and AllocationFactory. -- Supports multiple instruments via supportedInstruments list. -- Implements 3-way transfer disp

Daml contract source - OpenZeppelin/canton-token-template/simple-token/daml/SimpleToken/TransferInstruction.daml -- | Transfer instruction for two-step transfers. -- Created when receiver has no preapproval; requires explicit accept/reject/withdraw. module SimpleToken.TransferInstruction whe

daml-lint — Public Audit Results Static analysis scan of 5 FOSS DAML projects using daml-lint. All findings are NOT VALIDATED by the respective project teams — they are raw tool output with manual triage. Date: 2026-03-04 Tool version: daml-lint v0.1.0 (Rust, cargo build --release) *

daml-lint > [!WARNING] > This software is experimental and not intended for production use. Use at your own risk. Static analysis scanner for [DAML](https://www.digitalasset.com/deve

Security Policy Security vulnerabilities should be disclosed to the project maintainers, or alternatively by email to <security@openzeppelin.com>. Reporting a Vulnerability We're extremely grateful for security researchers and users that report vuln

Daml contract source - OpenZeppelin/daml-lint/test-fixtures/bad_patterns.daml module Splice.Round where import DA.Time -- Detector #1: missing ensure on Decimal fields template OpenMiningRound with admin : Party amuletPrice : Decimal tickDuration : Decimal round : Int where signatory admin e

Daml contract source - OpenZeppelin/daml-lint/test-fixtures/good_patterns.daml module SimpleToken.Holding where -- Should pass all detectors: proper ensure, bounded fields, etc. template SimpleHolding with admin : Party amount : Decimal where signatory admin ensure amount > 0.0 choice Transf

Daml contract source - OpenZeppelin/daml-props/daml/DamlProps/Examples/Amulet/Model.daml -- | Pure state-machine model of splice AmuletRules transfer engine. -- Models checkTransferConstraints (AmuletRules.daml:783-788) and reward minting. -- Two executor variants: buggy (mirrors splice as-i

Daml contract source - OpenZeppelin/daml-props/daml/DamlProps/Examples/Amulet/Properties.daml -- | Property-based tests for the amulet model. -- Demonstrates AUDIT3 H2 bug detection: zero-input featured-app transfers -- mint reward coupons without burning any amulet. module DamlProps.Example

Daml contract source - OpenZeppelin/daml-props/daml/DamlProps/Gen.daml -- | Generator combinators for property-based testing. -- Hedgehog-inspired but without typeclasses. module DamlProps.Gen where import DamlProps.Seed import DA.List ((!!)) -- | A generator produces a value of type @a@ fro

Daml contract source - OpenZeppelin/daml-props/daml/DamlProps/Invariant.daml -- | Invariant definitions for property-based testing. -- Provides built-in invariants and combinators for user-defined ones. module DamlProps.Invariant where -- | Ledger state snapshot: amounts held by each party.

Daml contract source - OpenZeppelin/daml-props/daml/DamlProps/Property.daml -- | Property definition and forAll combinator. -- Users define properties as functions from generated values to Script assertions. module DamlProps.Property where import DamlProps.Gen import DamlProps.Seed -- | Conf

Daml contract source - OpenZeppelin/daml-props/daml/DamlProps/Runner.daml -- | Top-level test runner. -- Runs N seeds, reports failures, integrates with dpm test via DAML Script. module DamlProps.Runner where import DamlProps.Gen import DamlProps.Seed import DamlProps.Sequence import DamlPro

Daml contract source - OpenZeppelin/daml-props/daml/DamlProps/Seed.daml -- | PRNG wrapper around DA.Random.Minstd. -- Provides seed splitting and range-bounded generation. module DamlProps.Seed where import DA.Random (Minstd, minstd_init, minstd_rand) data Seed = Seed with prng : Minstd mkSe

Daml contract source - OpenZeppelin/daml-props/daml/DamlProps/Sequence.daml -- | Sequence runner: generates and executes random action sequences. -- Users define action types and execution functions; this module provides -- the scaffolding for generation, execution, and invariant checking. m

Daml contract source - OpenZeppelin/daml-props/daml/DamlProps/Shrink.daml -- | Delta-debugging shrinker. -- Reduces a failing action sequence to the minimal subsequence that still fails. module DamlProps.Shrink where import DamlProps.Sequence (Step, sequenceFails) -- | Shrink configuration.

daml-props — Public Audit Results Property-based testing of DAML contracts using random action sequences, invariant checking, and delta-debugging shrinkage. All findings are NOT VALIDATED by the respective project teams — they are tool output only. Date: 2026-03-04 Tool version: daml-p

daml-props > [!WARNING] > This software is experimental and not intended for production use. Use at your own risk. Property-based testing for DAML. Pure DAML, no external dependencies. Inspi

Security Policy Security vulnerabilities should be disclosed to the project maintainers, or alternatively by email to <security@openzeppelin.com>. Reporting a Vulnerability We're extremely grateful for security researchers and users that report vuln

daml-verify — Public Audit Results Formal verification of DAML contract invariants using the Z3 SMT solver. Properties are proved to hold for all possible inputs under stated preconditions. All findings are NOT VALIDATED by the respective project teams — they are tool output only. **Date:*

daml-verify > [!WARNING] > This software is experimental and not intended for production use. Use at your own risk. Lightweight formal verification for DAML contracts using the [Z3 S

Security Policy Security vulnerabilities should be disclosed to the project maintainers, or alternatively by email to <security@openzeppelin.com>. Supported Versions The following versions are currently supported and receive security updates. Alpha,

PartyLayer website and demo The Next.js app behind partylayer.xyz: product pages, developer documentation, wallet directory and interactive kit demo. This is a workspace development guide; application developers should start with the public quick start.

DevNet gateway runbook Ops guide for running the gateway against real DevNet Amulet. The gateway does all ledger and registry work server side; the browser never receives a ledger token. Run these steps on or next to the maintainer's DevNet validator. Everything before "Configure and run the gatew

PartyLayer DvP example The M3 DvP (delivery versus payment) vertical: a single-page dApp where a settlement venue runs an atomic two-leg trade over the CIP-0056 (Canton Token Standard) allocation surface. A trade IS an allocation request; each counterparty allocates its leg; the venue settles