Skip to content

Proposal: Canton CRO - Party/Participant Recovery Orchestration

CLOSEDPull Request
by canton-cro16-07-2026Declined
node-deployment-operationsneeds-champion

Development Fund Proposal Submission

Proposal file: /proposals/2026-07-CantonCRO-recovery-orchestration.md

---

Summary

Canton CRO is an open-source CLI that turns the documented 13-step party/participant recovery procedure into a safe, repeatable, provable operation: plan, live preflight, apply, resume, and recovery drills. This is a working tool, not a design proposal: all 13 steps run against real Canton 3.5.8, and a real broken-import recovery drill (genuine Canton error, safe stop, restore, resume) runs in CI on every push.

---

Checklist

  • [x] Proposal file added under /proposals/
  • [x] Milestones and funding amounts defined
  • [x] Acceptance criteria included
  • [x] Alignment with Canton priorities described

---

Notes for Reviewers

  • SIG label: node-deployment-operations
  • Champion: open to any Tech & Ops Committee member organization; outreach in progress. The funding split will be finalized with the confirmed champion, and the final tranche is adoption-gated.
  • Evidence is reproducible in under an hour: bash cli/scripts/live-drill.sh (13 real steps) and bash cli/scripts/live-fault-drill.sh (break -> diagnose -> restore -> resume) at https://github.com/canton-cro/canton-cro
  • Threat model, operator runbook and the live run log are in the repo.