System Health & Paymaster Status
Verify all services: Canton Sandbox, ADI Anvil Fork, Hedera Testnet, and read live paymaster contract state from the blockchain.
Create Auction on Canton
Seller deploys a Daml Auction contract with scoring weights, invited bidders, and an auditor. The contract is created on the Canton ledger — only the seller and invited parties can see it.
Open Bidding Window
Seller exercises the OpenBidding choice on the Daml contract. Canton transitions it from Created → BiddingOpen. Only the seller can trigger this.
Generate Sponsor Authorization for BidderA
The backend sponsor signer creates a cryptographic authorization. This is the off-chain signature embedded in paymasterAndData that allows the BlindBidNativePaymaster to sponsor gas for BidderA — zero native balance needed.
BidderA Submits Sealed Bid
BidderA creates a SealedBid contract on Canton. Only BidderA and the Seller can see this — BidderB is completely blind. In production, this on-chain action would be sponsored by the paymaster (zero gas).
Generate Sponsor Authorization for BidderB
Same ERC-4337 paymaster flow for BidderB. Each bidder gets their own sponsor signature bound to their address, the auction, and a short expiry window.
BidderB Submits Sealed Bid
BidderB's SealedBid is a separate Canton contract. Canton enforces that BidderA cannot see BidderB's bid and vice versa.
Close Bidding & Publish Audit
Seller closes the bidding window on Canton. A hash commitment is published to Hedera Consensus Service proving that bidding closed at this exact timestamp.
Private Multi-Criteria Scoring
Seller scores all bids using the weighted formula (price 40%, delivery 25%, penalty 15%, reputation 20%). Canton privately reads reputation attestations. Only the Seller sees the full breakdown.
Award Auction to Winner
Seller awards to the highest-scoring bidder. An AwardedAuction contract is created with an explainable award proof — showing criteria and weight ranges, but NEVER actual bid values to losers.
Generate Fiat-to-Token Quote
System generates a signed quote converting the winner's bid price ($62,000 USD) to ADI tokens. The quote includes exchange rate, max slippage (50 bps), and a 10-minute expiry window.
Deposit into ADI Escrow Contract
Winner pays 0.05 ADI into the BlindBidEscrow smart contract. This is a real on-chain transaction on the ADI Anvil fork — the contract holds funds until Canton triggers release.
Release Escrow Funds to Seller
Canton confirms all conditions are met and triggers the release. The BlindBidEscrow contract transfers funds to the seller's address — a second real on-chain transaction.
Publish Settlement Audit to Hedera
Hash commitment published to Hedera HCS with the REAL ADI transaction hash from escrow. Anyone can verify the timing and sequence — nobody can reverse it into business data.
Paymaster Failure Demonstrations
Required by the ADI Paymaster track: show explicit failure cases for expired sponsorship, invalid signature, disallowed call selector, and rate limit exceeded.