Security reviews of core network components #410 - Milestone 6: _(LAPI) Ledger and JSON API_

Milestone 6: _(LAPI) Ledger and JSON API_

• Scope: The Ledger API and its JSON variant have been independently reviewed in 2025. Since then, there have been several important additions in the form of the interactive submission, paged interfaces, and self-administration mode. The scope of this milestone will include performing an internal audit with emphasis on the new functionality, updating the documentation to make it accessible to independent auditors, assisting them during the review, and remediating any issues eventually found.
• Estimated Delivery: Q1 2027
• Estimated Effort: 9PW
• Selected Independent Auditor: RFQ

| Milestone | Description | Amount | Note | |---|---|---|---| | _(LAPI) Ledger and JSON API_ | Audit 6 | 480,000 CC | For DA upon completion of audit and remediation of all high-severity findings, and an approximate budget of up to 350,000 CC for the third-party auditor.This section can be repeated multiple times if additional audits are required. |

Total Funding Request: 6,420,000 CC for DA and a budget of up to 3,850,000 CC for the 11 third-party audits.

_Originally posted by @pedrodneves in https://github.com/canton-foundation/canton-dev-fund/issues/410#issuecomment-4907986446_