01
Approve the envelope
Buyer and risk officer define the dealers, instruments, amount, price ceiling, and expiry.
Private execution / Canton Network
Treasury execution, bound to the mandate.
ShadowDesk turns approved treasury policy into private quotes and atomic settlement.
Live ledger projectionTwo-party approvalAtomic DvP
ShadowDesk / execution console
Mandate-bound treasury round
Approved mandate
RFQ / 017
MAX SIZE
1,000,000
CEILING
101.00
Buyer + riskAPPROVED
Dealer quotes2 PRIVATE
SettlementATOMIC DVP
09:41:02RFQ_CREATEDprivate dealer window opened
09:41:04QUOTE_SEALEDwinner bound to mandate
09:41:06DVP_SETTLEDreceipt written atomically
Participant visibility
LOSING DEALER / 0 WINNER QUOTES
Stakeholder privacy Mandate assertions Participant views DvP receipt
The privacy model
A public window into a private workflow.
The public projection exposes metadata. The institutional workspace exposes only the authorized buyer view.
Competitor view
No rival prices
Each dealer signs its own proposal. A competing dealer cannot query the other quote payload.
Institutional view
Policy before action
The buyer and risk officer approve the envelope before an agent can open the RFQ.
Operator boundary
ShadowDesk coordinates the flow. Canton enforces who can see and settle it.
The execution path
From policy to proof.
02
Invite private quotes
The agent opens a mandate-bound RFQ. Dealers price independently on their participant views.
03
Settle atomically
The accepted quote becomes binding, then delivery-versus-payment writes one auditable receipt.
Live environment