Proposal: Daml Security Framework
RejectedPR- SIG
- needs-SIG
- Champion
- —
- Author org
- —
- Ask
- source pending
Abstract
This proposal delivers the first security framework for the Daml smart contract language: a 12-class vulnerability taxonomy, a 45-item pre-deployment audit checklist, and a static analysis CLI (daml-check) with detectors for the 6 highest-severity vulnerability classes. A working proof-of-concept scanner with two detectors is already published at https://github.com/1D0n/daml-security-framework ---
Milestones
| Title | Due date | Target | Amount (CC) |
|---|---|---|---|
| _Vulnerability Taxonomy and Architecture_ | — | — | — |
| _Static Analysis CLI — daml-check_ | — | — | — |
| Total | — | ||
Budget impact
- % of approved-to-date
- —
- % if all RFV pass
- —
RFV scenario unavailable — using approved-to-date as denominator (degraded mode).
- Ask (CC)
- amount pending
Comments by org
1 comment · 1 org · last activity Oct 13, 2026
| Organisation | Comments |
|---|---|
| Canton Foundation | 1 |