Auditor
The independent party that observes every manifest and checks the whole exchange, every cycle.
You can check your own history. The auditor checks everyone's.
What the auditor sees
- Every
BatchManifest, as an observer on the Canton ledger. - The full set of leaves behind each root: every user, every cycle.
What the auditor checks
- That every cycle's users root is built from the leaves it received.
- That both chains are unbroken: no missing cycle, no missing payload.
- That every account reconciles against the USDCx held in the vault, to the last unit, with no rounding tolerance.
If you find a mismatch in your own proof, the auditor can check the same root independently. See Verify a cycle.
Privacy
The auditor sees accounts by their ledger identity, not by name. See Privacy.