Workflow

Multi-party saga workflows with verifiable receipts.

A workflow is an ordered sequence of saga steps with per-step Execute → Verify → Compensate lifecycles, optional escrow, durable lifecycle state, and optional Canton DAML mirroring.

Overview

Where multi-party transactions resolve to verifiable receipts.

Workflow is the coordination layer for transactions that span multiple parties, multiple chains, or multiple VMs. Each step has an explicit verification phase and a compensation path for rollback. Per-step escrow locks value before execution and releases it on successful verification. Workflows can mirror to a Canton synchronizer for regulated counterparties that need DAML-side reconciliation. Every finalized workflow produces a `WorkflowReceipt` queryable on-chain.

Capabilities

What workflow coordinates.

Saga lifecycle

Each step runs Execute → Verify → Compensate. Failures roll back cleanly; successes finalize into a receipt.

Per-step escrow

Optional escrow on any step. Locked at Execute, released at Verify, refunded at Compensate.

Durable lifecycle

State machine persisted across restarts. Lifecycle history queryable via tenzro_getWorkflowLifecycle.

Canton mirroring

Optional mirror to a Canton synchronizer for DAML-side reconciliation with regulated counterparties.

Operational metrics

Per-workflow duration, escrow flows, step status snapshots via tenzro_getWorkflowOperationalMetrics.

Receipts on-chain

Finalize emits a WorkflowReceipt persisted to CF_SETTLEMENTS. Indexers walk the chain for audit.

DID-signed envelopes

Steps can carry DID-signed payloads. tenzro_verifyDidEnvelope verifies authorship and integrity.

Multi-VM

Steps can execute on EVM, SVM, or DAML. Cross-VM transfers via the unified token registry.

Lifecycle

How a workflow runs.

01
Open
Creator declares the workflow with participants, ordered steps, and metadata. State transitions to Open.
02
Step execute
Transition Pending → Executing. Optionally lock per-step escrow via tenzro_workflowStepExecute.
03
Step verify
Verify the step's outcome via tenzro_workflowStepVerify. Releases per-step escrow on success.
04
Step compensate
On verify failure, roll back the step via tenzro_workflowStepCompensate. Refunds escrow.
05
Finalize
Once all steps complete (or compensate cleanly), tenzro_workflowFinalize emits the WorkflowReceipt.
06
Mirror
Optionally mirror the receipt to a Canton synchronizer via tenzro_mirrorWorkflowToCanton for DAML-side reconciliation.

Specifications

Lifecycle: Open → Executing → Verifying → Compensating → Finalized / Failed
Per-step status: Pending → Executing → Verifying → Verified / Compensating → Compensated / Failed
RPCs: tenzro_workflow{Open,StepExecute,StepVerify,StepCompensate,Finalize}
Reads: tenzro_get{Workflow,WorkflowSaga,WorkflowLifecycle,WorkflowReceipt,WorkflowOperationalMetrics}
Indexing: tenzro_listWorkflows{ByCreator,ByParticipant,ByStatus} + tenzro_listWorkflowReceipts
Canton mirror: tenzro_mirrorWorkflowToCanton — DAML 3.x integration via JSON Ledger API v2

Get started

Ship on the open network.

Start building

Workflow docs