Skip to content
BitSafe

Node operators

Use this path if you operate Canton infrastructure and will host Decentralization Manager. This page is a role-specific checklist; the linked guides own configuration and procedures.

What you own

Section titled “What you own”
  • One independently operated Decentralization Manager instance.
  • Authenticated access to the Canton Admin and Ledger APIs.
  • Operator identity, local credentials, persistent state, and backups.
  • A verified peer-communication endpoint and trusted peer records.
  • Monitoring, incident response, and coordinated upgrades.

Operator path

Section titled “Operator path”
GoalCanonical guide
Evaluate in a controlled environmentRun Decentralization Manager with Docker
Deploy for productionDecentralization Manager production deployment
Configure accessDecentralization Manager authentication and operator roles
Connect independent operatorsConnect Decentralization Manager peers
Join the BitSafe Node Operator NetworkJoin the BitSafe Node Operator Network: Onboarding Guide
Operate packages and contractsDecentralization Manager package and contract operations
Recover or upgradeDecentralization Manager backup, recovery, and mesh upgrades
Review trust boundariesDecentralization Manager security architecture

Join the BitSafe Node Operator Network

Section titled “Join the BitSafe Node Operator Network”

Operators who want to be considered for Canton applications that need independent hosts can follow Join the BitSafe Node Operator Network: Onboarding Guide.

The onboarding path covers:

  1. Deploy Decentralization Manager on an existing Canton node.
  2. Exchange peer and party details with BitSafe through an approved secure channel.
  3. Validate the TestNet connection and basic operational readiness.
  4. Repeat the approved peer exchange on MainNet.
  5. Complete registry activation and become eligible for application matching.

Commercial terms are agreed between each application and its participating operators. BitSafe may coordinate the operator group or act as application administrator. Operator earnings are not guaranteed.

Want to join the operator network?

Section titled “Want to join the operator network?”

Apply to join the BitSafe Node Operator Network

Production readiness

Section titled “Production readiness”
  • Pin an approved release and immutable image digest.
  • Disable insecure mode and enforce operator roles.
  • Restrict Canton and peer network paths.
  • Preserve and protect the Noise identity, database, credentials, and DARs.
  • Verify peer records through an authenticated channel.
  • Test backup, restore, monitoring, incident response, and mesh upgrades.
  • Complete one low-risk workflow and verify the resulting Canton state.

Scope boundary

Section titled “Scope boundary”

Attestor is a CBTC-specific role. This page covers Decentralization Manager instances, peers, packages, governance, and recovery.

Ready to apply?

Section titled “Ready to apply?”

Apply to join the BitSafe Node Operator Network

Next step

Section titled “Next step”

👉 Prepare the production environment: Decentralization Manager production deployment .