Node operators

Use this path if you operate Canton infrastructure and will host Decentralization Manager. This page is a role-specific checklist; the linked guides own configuration and procedures.

What you own

• One independently operated Decentralization Manager instance.
• Authenticated access to the Canton Admin and Ledger APIs.
• Operator identity, local credentials, persistent state, and backups.
• A verified peer-communication endpoint and trusted peer records.
• Monitoring, incident response, and coordinated upgrades.

Operator path

Goal	Canonical guide
Evaluate in a controlled environment	Run Decentralization Manager with Docker
Deploy for production	Decentralization Manager production deployment
Configure access	Decentralization Manager authentication and operator roles
Connect independent operators	Connect Decentralization Manager peers
Join the BitSafe Node Operator Network	Join the BitSafe Node Operator Network: Onboarding Guide
Operate packages and contracts	Decentralization Manager package and contract operations
Recover or upgrade	Decentralization Manager backup, recovery, and mesh upgrades
Review trust boundaries	Decentralization Manager security architecture

Join the BitSafe Node Operator Network

Operators who want to be considered for Canton applications that need independent hosts can follow Join the BitSafe Node Operator Network: Onboarding Guide.

The onboarding path covers:

1. Deploy Decentralization Manager on an existing Canton node.
2. Exchange peer and party details with BitSafe through an approved secure channel.
3. Validate the TestNet connection and basic operational readiness.
4. Repeat the approved peer exchange on MainNet.
5. Complete registry activation and become eligible for application matching.

Commercial terms are agreed between each application and its participating operators. BitSafe may coordinate the operator group or act as application administrator. Operator earnings are not guaranteed.

Want to join the operator network?

Apply to join the BitSafe Node Operator Network

Production readiness

• Pin an approved release and immutable image digest.
• Disable insecure mode and enforce operator roles.
• Restrict Canton and peer network paths.
• Preserve and protect the Noise identity, database, credentials, and DARs.
• Verify peer records through an authenticated channel.
• Test backup, restore, monitoring, incident response, and mesh upgrades.
• Complete one low-risk workflow and verify the resulting Canton state.

Scope boundary

Attestor is a CBTC-specific role. This page covers Decentralization Manager instances, peers, packages, governance, and recovery.

Ready to apply?

Apply to join the BitSafe Node Operator Network

Next step

👉 Prepare the production environment: Decentralization Manager production deployment .