Proposal: a Ledger API Proxy run on top of Canton Ledger API to provide authentication and audit trail (RFP 25, Identity and Access Control and RFP 27, Security Monitoring, Auditability and Evidence)
VotingPR- SIG
- needs-SIG
- Champion
- —
- Author org
- —
- Ask
- source pending
Abstract
LedgerShield is a Canton Ledger API Proxy run on top of Ledger API, providing an additional layer of access token issuer and deep granularity permission control without manually issueing OIDC app or access token and store an audit log of all the request again it queryable in a DuckDB database
Milestones
No milestones recorded.
Budget impact
- % of approved-to-date
- —
- % if all RFV pass
- —
RFV scenario unavailable — using approved-to-date as denominator (degraded mode).
- Ask (CC)
- amount pending
Comments by org
52 comments · 2 orgs · last activity Oct 18, 2026
| Organisation | Comments |
|---|---|
| Unknown | 50 |
| Canton Foundation | 1 |
| Digital Asset | 1 |