Proof

The newest DevNet run that passed every check.

How this run signed

• One ledger login submitted for every party and read each settlement back. It could not act for a party without that party’s signature.
• Every party signed its own transactions with its own key. All the keys sat on the machine that ran the script, so this shows the ledger needs each party’s signature, not that separate people held the keys.
• Skipped “credential: lpA token cannot read as lpB”: one shared login acts for every party on this node, so LP credentials cannot be separated here.
• Skipped “credential: verifier token cannot submit as admin”: the verifier reads as one of the seats' ledger users.

What probe 20261007T125624Z found about DRAW’s logins

• As expected the demo seats' backend client acts for the five demo parties and nothing else
• As expected the verifier's client only reads, as the fund's party

result.json

Each row is one party’s own ledger query after the call settled, made through the one login that submitted for every party. Leaks counts any contract a party saw that it is not a party to.

visibility-final.json

After each settlement, a read-back step reads the transaction and the fund’s holdings from the ledger and writes the receipt before the notice counts as funded. In this DevNet run that step read as the same ledger user that submitted for every party.

The fund manager's totals equal the sum of the notices and the coin the fund actually received.

totals.json

• Held overdue refused before due time
• Held lpA cannot exercise on lpB obligation
• Held lpA cannot change its own obligation state
• Held wrong amount does not fund
• Held wrong payer does not fund
• Held wrong reference does not fund
• Held replayed allocation from lpA does not fund lpB
• Held replayed allocation does not fund lpA twice
• Held verifier rejects lpA settlement evidence offered for lpB
• Held lpB still unfunded after every bad attempt
• Held rejected allocations withdrawn, none left for admin to execute
• Held lpC obligation is Overdue after the due time, not Funded

A real browser clicks through the deployed site against the ledger. Each journey wrote its own steps and screenshots as it ran. This is the newest run of each. The sign-in runs so far all used the team’s own HackCanton login as the LP.

A capital call on the demo seats

PASS 10/10

1. landing loads
2. LP A committed
3. fund manager onboarded
4. call issued
5. LP A locked its payment
6. LP B cannot open LP A notice
7. fund manager settled, read-back confirmed
8. LP A sees verified funded
9. a second browser gets its own demo fund
10. starting over leaves this browser without a fund

LandingManager overviewCall issuedLP paidLP B cannot readSettledLP verifiedSecond browserStarted over

When it ran: DevNet, HackCanton shared node. DRAW’s backend login signs for every demo seat, and a different login reads each settlement back.

web-journey-20261007205208 against drawcalls.xyz

An LP with its own HackCanton login approves the call in its Canton Coin wallet

FAIL 0/9

When it ran: DevNet, HackCanton shared node. DRAW’s backend login signs for every demo seat, and a different login reads each settlement back.

web-hackcanton-wallet-20261007205753 against drawcalls.xyz

An LP with its own HackCanton login pays from its wallet in DRAW

FAIL 0/7

When it ran: DevNet, HackCanton shared node. DRAW’s backend login signs for every demo seat, and a different login reads each settlement back.

web-hackcanton-20261007205441 against drawcalls.xyz

A LocalNet run in which every party signed its own transactions with an Ed25519 key, on package 0.2.0. The participant can’t act for a party without its signature, and another party’s key is refused.

Seeded calls with good and bad payments, compared against an independent reference model. Seed 20261002, verdict PASS, package 0.2.0.

result.json, cases.jsonl

The same capital call run on an operator database with a paid flag, and on DRAW.

result.json

• Daml Script suites PASS, 9 suites, package 0.3.0. result.json
• Deliberately broken guards caught by the tests: 15 of 15. result.json