Decentralization Manager proposal Decentralization Manager proposal #298 - Milestone 1: Open-Source Release of Core Decentralization Manager Tooling

OPENIssue

by pedrodneves16-06-2026

4M CC requested

Milestone 1: Open-Source Release of Core Decentralization Manager Tooling

| Milestone | CC Amount | Payment Trigger | | :---- | :---- | :---- | | M1 - Open-Source Release of Core Decentralization Manager Tooling | 4,000,000 CC | Committee acceptance + open-source release on Canton Foundation GitHub + BitSafe-operated CBTC reference instance live on MainNet as proof point |

Deliverables:

Topology orchestration with 8-step onboarding workflow
Setup wizard UI with party ID prefix input, peer selection, and progress tracking
Configurable m-of-n threshold (default n/2) with GovernanceSetThreshold action
On-chain indirection for governance actions, with customizable permission set
Network Status panel with connectivity monitoring and invitation management UI
Generalized Governance Core: propose/confirm/execute engine, generalized DAML governance models, REST API (25+ endpoints), governance dashboard, OIDC provider authentication integration
Plugin Manager UI for DAR upload, contract deployment, and plugin registration
Governance audit trail recording votes, threshold modifications, member-removal events, and action execution history
Dynamic Membership Management, phase 1: remove node from the set
Token Management Daml template
Custody Daml template
Security audit of the Generalized Governance Core and both Daml templates (Token Management, Custody), conducted by Quantstamp, engaged and scheduled for May
Open-source release under Apache 2.0 on the Canton Foundation GitHub organization, including developer documentation and a plugin guide
BitSafe-operated CBTC reference instance running on Canton MainNet. Delivered by BitSafe at its own cost as a live proof point; not funded by this grant

Acceptance Criteria. By the end of Milestone 1, all of the following are demonstrated on Canton MainNet:

Create a decentralized party. A third party can create a decentralized party end-to-end through the Decentralization Manager, using: topology orchestration; the setup wizard UI with party ID prefix input, peer selection, and progress tracking; configurable m-of-n threshold (default n/2) enforced via GovernanceSetThreshold; DAML-enforced configurable permissions; the Network Status panel with connectivity monitoring; and the invitation management UI.
Execute governance actions. Run governance end-to-end on the Generalized Governance Core: the propose/confirm/execute engine, generalized DAML governance models, REST API (25+ endpoints), governance dashboard, and OIDC authentication integration are all functional.
Upload packages, including ready-made templates. The Plugin Manager UI supports DAR upload, contract deployment, and plugin registration. The Token Management and Custody Daml templates are available as open-source reference implementations, and a third-party developer can upload a custom DAML package as a plugin and execute governance actions through the Governance Core.
Governance audit trail. The governance audit trail is enforced and queryable on-chain.
Open-source release. All funded deliverables are audited and open-sourced under Apache 2.0 on the Canton Foundation GitHub organization.
Audit published. Publication of security audit and remediation of all critical and high issues.
Live proof point. BitSafe's self-funded CBTC reference instance is running on the new system on Canton MainNet.

_Originally posted by @pedrodneves in https://github.com/canton-foundation/canton-dev-fund/issues/298#issuecomment-4719321907_