<h2>Milestone 6<aclass="headerlink"href="#milestone-6"title="Permalink to this headline">¶</a></h2>
<ul>
<li><pclass="first">Added the <aclass="reference external"href="_static/corda-technical-whitepaper.pdf">Corda technical white paper</a>. Note that its current version
is 0.5 to reflect the fact that the Corda design is still evolving. Although we expect only relatively small tweaks
at this point, when Corda reaches 1.0 so will the white paper.</p>
</li>
<li><pclass="first">Major documentation restructuring and new content:</p>
<blockquote>
<div><ulclass="simple">
<li>More details on Corda node internals.</li>
<li>New CorDapp tutorial.</li>
<li>New tutorial on building transactions.</li>
<li>New tutorials on how to run and use a notary service.</li>
</ul>
</div></blockquote>
</li>
<li><pclass="first">An experimental version of the deterministic JVM sandbox has been added. It is not integrated with the node and will
undergo some significant changes in the coming releases before it is integrated, as the code is finished, as bugs are
found and fixed, and as the platform subset we choose to expose is finalised. Treat this as an outline of the basic
approach rather than something usable for production.</p>
</li>
<li><pclass="first">Developer experience:</p>
<blockquote>
<div><ulclass="simple">
<li>Samples have been merged back into the main repository. All samples can now be run via command line or IntelliJ.</li>
<li>Added a Client RPC python example.</li>
<li>Node console output now displays concise startup information, such as startup time or web address. All logging to
the console is suppressed apart from errors and flow progress tracker steps. It can be re-enabled by passing
<codeclass="docutils literal"><spanclass="pre">--log-to-console</span></code> command line parameter. Note that the log file remains unchanged and will still contain all
<li>The <codeclass="docutils literal"><spanclass="pre">runnodes</span></code> scripts generated by the Gradle plugins now open each node in separate terminal windows or (on macOS) tabs.</li>
<li>A much more complete template app.</li>
<li>JARs now available on Maven Central.</li>
</ul>
</div></blockquote>
</li>
<li><pclass="first">Data model: A party is now identified by a composite key (formerly known as a “public key tree”) instead of a single public key.
Read more in <aclass="reference internal"href="transaction-data-types.html#composite-keys"><spanclass="std std-ref">Multi-signature support</span></a>. This allows expressing distributed service identities, e.g. a distributed notary.
In the future this will also allow parties to use multiple signing keys for their legal identity.</p>
</li>
<li><pclass="first">Decentralised consensus: A prototype RAFT based notary composed of multiple nodes has been added. This implementation
is optimised for high performance over robustness against malicious cluster members, which may be appropriate for
<li>New theme aligned with the Corda branding.</li>
<li>The New Transaction screen moved to the Cash View (as it is used solely for cash transactions)</li>
<li>Removed state machine/flow information from Transaction table. A new view for this will be created in a future release.</li>
<li>Added a new Network View that displays details of all nodes on the network.</li>
<li>Users can now configure the reporting currency in settings.</li>
<li>Various layout and performance enhancements.</li>
</ul>
</div></blockquote>
</li>
<li><pclass="first">Client RPC:</p>
<blockquote>
<div><ulclass="simple">
<li>Added a generic <codeclass="docutils literal"><spanclass="pre">startFlow</span></code> method that enables starting of any flow, given sufficient permissions.</li>
<li>Added the ability for plugins to register additional classes or custom serialisers with Kryo for use in RPC.</li>
<li><codeclass="docutils literal"><spanclass="pre">rpc-users.properties</span></code> file has been removed with RPC user settings moved to the config file.</li>
</ul>
</div></blockquote>
</li>
<li><pclass="first">Configuration changes: It is now possible to specify a custom legal name for any of the node’s advertised services.</p>
</li>
<li><pclass="first">Added a load testing framework which allows stress testing of a node cluster, as well as specifying different ways of
disrupting the normal operation of nodes. See <aclass="reference internal"href="loadtesting.html"><spanclass="doc">Load testing</span></a>.</p>
</li>
<li><pclass="first">Improvements to the experimental contract DSL, by Sofus Mortensen of Nordea Bank (please give Nordea a shoutout too).</p>
</li>
</ul>
<p>API changes:</p>
<ulclass="simple">
<li>The top level package has been renamed from <codeclass="docutils literal"><spanclass="pre">com.r3corda</span></code> to <codeclass="docutils literal"><spanclass="pre">net.corda</span></code>.</li>
<li>Protocols have been renamed to “flows”.</li>
<li><codeclass="docutils literal"><spanclass="pre">OpaqueBytes</span></code> now uses <codeclass="docutils literal"><spanclass="pre">bytes</span></code> as the field name rather than <codeclass="docutils literal"><spanclass="pre">bits</span></code>.</li>
<h2>Milestone 5<aclass="headerlink"href="#milestone-5"title="Permalink to this headline">¶</a></h2>
<ul>
<li><pclass="first">A simple RPC access control mechanism. Users, passwords and permissions can be defined in a configuration file.
This mechanism will be extended in future to support standard authentication systems like LDAP.</p>
</li>
<li><pclass="first">New features in the explorer app and RPC API for working with cash:</p>
<blockquote>
<div><ulclass="simple">
<li>Cash can now be sent, issued and exited via RPC.</li>
<li>Notes can now be associated with transactions.</li>
<li>Hashes are visually represented using identicons.</li>
<li>Lots of functional work on the explorer UI. You can try it out by running <codeclass="docutils literal"><spanclass="pre">gradle</span><spanclass="pre">tools:explorer:runDemoNodes</span></code> to run
a local network of nodes that swap cash with each other, and then run <codeclass="docutils literal"><spanclass="pre">gradle</span><spanclass="pre">tools:explorer:run</span></code> to start
the app.</li>
</ul>
</div></blockquote>
</li>
<li><pclass="first">A new demo showing shared valuation of derivatives portfolios using the ISDA SIMM has been added. Note that this app
relies on a proprietary implementation of the ISDA SIMM business logic from OpenGamma. A stub library is provided
to ensure it compiles but if you want to use the app for real please contact us.</p>
</li>
<li><pclass="first">Developer experience (we plan to do lots more here in milestone 6):</p>
<blockquote>
<div><ulclass="simple">
<li>Demos and samples have been split out of the main repository, and the initial developer experience continues to be
refined. All necessary JARs can now be installed to Maven Local by simply running <codeclass="docutils literal"><spanclass="pre">gradle</span><spanclass="pre">install</span></code>.</li>
<li>It’s now easier to define a set of nodes to run locally using the new “CordFormation” gradle plugin, which
defines a simple DSL for creating networks of nodes.</li>
<li>The template CorDapp has been upgraded with more documentation and showing more features.</li>
</ul>
</div></blockquote>
</li>
<li><pclass="first">Privacy: transactions are now structured as Merkle trees, and can have sections “torn off” - presented for
verification and signing without revealing the rest of the transaction.</p>
</li>
<li><pclass="first">Lots of bug fixes, tweaks and polish starting the run up to the open source release.</p>
</li>
</ul>
<p>API changes:</p>
<ulclass="simple">
<li>Plugin service classes now take a <codeclass="docutils literal"><spanclass="pre">PluginServiceHub</span></code> rather than a <codeclass="docutils literal"><spanclass="pre">ServiceHubInternal</span></code>.</li>
<li><codeclass="docutils literal"><spanclass="pre">UniqueIdentifier</span></code> equality has changed to only take into account the underlying UUID.</li>
<li>The contracts module has been renamed to finance, to better reflect what it is for.</li>
</ul>
</div>
<divclass="section"id="milestone-4">
<h2>Milestone 4<aclass="headerlink"href="#milestone-4"title="Permalink to this headline">¶</a></h2>
<p>New features in this release:</p>
<ul>
<li><pclass="first">Persistence:</p>
<blockquote>
<div><ulclass="simple">
<li>States can now be written into a relational database and queried using JDBC. The schemas are defined by the
smart contracts and schema versioning is supported. It is reasonable to write an app that stores data in a mix
of global ledger transactions and local database tables which are joined on demand, using join key slots that
are present in many state definitions. Read more about <aclass="reference internal"href="persistence.html"><spanclass="doc">Persistence</span></a>.</li>
<li>The embedded H2 SQL database is now exposed by default to any tool that can speak JDBC. The database URL is
printed during node startup and can be used to explore the database, which contains both node internal data
and tables generated from ledger states.</li>
<li>Protocol checkpoints are now stored in the database as well. Message processing is now atomic with protocol
checkpointing and run under the same RDBMS transaction.</li>
<li>MQ message deduplication is now handled at the app layer and performed under the RDMS transaction, so
ensuring messages are only replayed if the RDMS transaction rolled back.</li>
<li>“The wallet” has been renamed to “the vault”.</li>
</ul>
</div></blockquote>
</li>
<li><pclass="first">Client RPC:</p>
<blockquote>
<div><ulclass="simple">
<li>New RPCs added to subscribe to snapshots and update streams state of the vault, currently executing protocols
and other important node information.</li>
<li>New tutorial added that shows how to use the RPC API to draw live transaction graphs on screen.</li>
</ul>
</div></blockquote>
</li>
<li><pclass="first">Protocol framework:</p>
<blockquote>
<div><ulclass="simple">
<li>Large simplifications to the API. Session management is now handled automatically. Messages are now routed
based on identities rather than node IP addresses.</li>
</ul>
</div></blockquote>
</li>
<li><pclass="first">Decentralised consensus:</p>
<blockquote>
<div><ulclass="simple">
<li>A standalone one-node notary backed by a JDBC store has been added.</li>
<li>A prototype RAFT based notary composed of multiple nodes is available on a branch.</li>
</ul>
</div></blockquote>
</li>
<li><pclass="first">Data model:</p>
<blockquote>
<div><ulclass="simple">
<li>Compound keys have been added as preparation for merging a distributed RAFT based notary. Compound keys
are trees of public keys in which interior nodes can have validity thresholds attached, thus allowing
boolean formulas of keys to be created. This is similar to Bitcoin’s multi-sig support and the data model
is the same as the InterLedger Crypto-Conditions spec, which should aid interop in future. Read more about
key trees in the “<aclass="reference internal"href="transaction-data-types.html"><spanclass="doc">Data types</span></a>” article.</li>
<li>A new tutorial has been added showing how to use transaction attachments in more detail.</li>
</ul>
</div></blockquote>
</li>
<li><pclass="first">Testnet</p>
<blockquote>
<div><ulclass="simple">
<li>Permissioning infrastructure phase one is built out. The node now has a notion of developer mode vs normal
mode. In developer mode it works like M3 and the SSL certificates used by nodes running on your local
machine all self-sign using a developer key included in the source tree. When developer mode is not active,
the node won’t start until it has a signed certificate. Such a certificate can be obtained by simply running
an included command line utility which generates a CSR and submits it to a permissioning service, then waits
for the signed certificate to be returned. Note that currently there is no public Corda testnet, so we are
not currently running a permissioning service.</li>
repository, where they can then be used like any other JAR. See <aclass="reference internal"href="creating-a-cordapp.html"><spanclass="doc">CorDapp basics</span></a>.</li>
<li>Infrastructure work on the node explorer is now complete: it is fully switched to using the MQ based RPC system.</li>
<li>A library of additional reactive collections has been added. This API builds on top of Rx and the observable
collections API in Java 8 to give “live” data structures in which the state of the node and ledger can be
viewed as an ordinary Java <codeclass="docutils literal"><spanclass="pre">List</span></code>, <codeclass="docutils literal"><spanclass="pre">Map</span></code> and <codeclass="docutils literal"><spanclass="pre">Set</span></code>, but which also emit callbacks when these views
change, and which can have additional views derived in a functional manner (filtered, mapped, sorted, etc).
Finally, these views can then be bound directly into JavaFX UIs. This makes for a concise and functional
way of building application UIs that render data from the node, and the API is available for third party
app developers to use as well. We believe this will be highly productive and enjoyable for developers who
have the option of building JavaFX apps (vs web apps).</li>
<li>The visual network simulator tool that was demoed back in April as part of the first Corda live demo has
been merged into the main repository.</li>
</ul>
</div></blockquote>
</li>
<li><pclass="first">Documentation</p>
<blockquote>
<div><ulclass="simple">
<li>New secure coding guidelines. Corda tries to eliminate as many security mistakes as practical via the type
system and other mechanically checkable processes, but there are still things that one must be aware of.</li>
<li>New attachments tutorial.</li>
<li>New Client RPC tutorial.</li>
<li>More tutorials on how to build a standalone CorDapp.</li>
</ul>
</div></blockquote>
</li>
<li><pclass="first">Testing</p>
<blockquote>
<div><ulclass="simple">
<li>More integration testing support</li>
<li>New micro-DSLs for expressing expected sequences of operations with more or less relaxed ordering constraints.</li>
<li>QuickCheck generators to create streams of randomised transactions and other basic types. QuickCheck is a way
of writing unit tests that perform randomised fuzz testing of code, originally developed by the Haskell
community and now also available in Java.</li>
</ul>
</div></blockquote>
</li>
</ul>
<p>API changes:</p>
<ulclass="simple">
<li>The transaction types (Signed, Wire, LedgerTransaction) have moved to <codeclass="docutils literal"><spanclass="pre">net.corda.core.transactions</span></code>. You can
update your code by just deleting the broken import lines and letting your IDE re-import them from the right
location.</li>
<li><codeclass="docutils literal"><spanclass="pre">AbstractStateReplacementProtocol.verifyProposal</span></code> has changed its prototype in a minor way.</li>
<li>The <codeclass="docutils literal"><spanclass="pre">UntrustworthyData<T>.validate</span></code> method has been renamed to <codeclass="docutils literal"><spanclass="pre">unwrap</span></code> - the old name is now deprecated.</li>
<li>The wallet, wallet service, etc. are now vault, vault service, etc. These better reflect the intent that they
are a generic secure data store, rather than something which holds cash.</li>
<li>The protocol send/receive APIs have changed to no longer require a session id. Please check the current version
of the protocol framework tutorial for more details.</li>
</ul>
</div>
<divclass="section"id="milestone-3">
<h2>Milestone 3<aclass="headerlink"href="#milestone-3"title="Permalink to this headline">¶</a></h2>
<ul>
<li><pclass="first">More work on preparing for the testnet:</p>
<blockquote>
<div><ulclass="simple">
<li>Corda is now a standalone app server that loads “CorDapps” into itself as plugins. Whilst the existing IRS
and trader demos still exist for now, these will soon be removed and there will only be a single Corda node
program. Note that the node is a single, standalone jar file that is easier to execute than the demos.</li>
<li>Project Vega (shared SIMM modelling for derivative portfolios) has already been converted to be a CorDapp.</li>
<li>Significant work done on making the node persist its wallet data to a SQL backend, with more on the way.</li>
<li>Upgrades and refactorings of the core transaction types in preparation for the incoming sandboxing work.</li>
</ul>
</div></blockquote>
</li>
<li><pclass="first">The Clauses API that seeks to make writing smart contracts easier has gone through another design iteration,
with the result that clauses are now cleaner and more composable.</p>
</li>
<li><pclass="first">Improvements to the protocol API for finalising transactions (notarising, transmitting and storing).</p>
</li>
<li><pclass="first">Lots of work done on an MQ based client API.</p>
</li>
<li><pclass="first">Improvements to the developer site:</p>
<blockquote>
<div><ulclass="simple">
<li>The developer site has been re-read from start to finish and refreshed for M3 so there should be no obsolete
texts or references anywhere.</li>
<li>The Corda non-technical white paper is now a part of the developer site and git repository. The LaTeX source is
also provided so if you spot any issues with it, you can send us patches.</li>
<li>There is a new section on how to write CorDapps.</li>
</ul>
</div></blockquote>
</li>
<li><pclass="first">Further R&D work by Sofus Mortensen in the experimental module on a new ‘universal’ contract language.</p>
</li>
<li><pclass="first">SSL for the REST API and webapp server can now be configured.</p>
</li>
</ul>
</div>
<divclass="section"id="milestone-2">
<h2>Milestone 2<aclass="headerlink"href="#milestone-2"title="Permalink to this headline">¶</a></h2>
<ul>
<li><pclass="first">Big improvements to the interest rate swap app:</p>
<blockquote>
<div><ulclass="simple">
<li>A new web app demonstrating the IRS contract has been added. This can be used as an example for how to interact with
the Corda API from the web.</li>
<li>Simplifications to the way the demo is used from the command line.</li>
<li><aclass="reference internal"href="contract-irs.html"><spanclass="doc">Detailed documentation on how the contract works and can be used</span></a> has been written.</li>
<li>Better integration testing of the app.</li>
</ul>
</div></blockquote>
</li>
<li><pclass="first">Smart contracts have been redesigned around reusable components, referred to as “clauses”. The cash, commercial paper
and obligation contracts now share a common issue clause.</p>
</li>
<li><pclass="first">New code in the experimental module (note that this module is a place for work-in-progress code which has not yet gone
through code review and which may, in general, not even function correctly):</p>
<blockquote>
<div><ul>
<li><pclass="first">Thanks to the prolific Sofus Mortensen @ Nordea Bank, an experimental generic contract DSL that is based on the famous
2001 “Composing contracts” paper has been added. We thank Sofus for this great and promising research, which is so
<li><pclass="first">The contract code from the recent trade finance demos is now in experimental. This code comes thanks to a
collaboration of the members; all credit to:</p>
<blockquote>
<div><ulclass="simple">
<li>Mustafa Ozturk @ Natixis</li>
<li>David Nee @ US Bank</li>
<li>Johannes Albertsen @ Dankse Bank</li>
<li>Rui Hu @ Nordea</li>
<li>Daniele Barreca @ Unicredit</li>
<li>Sukrit Handa @ Scotiabank</li>
<li>Giuseppe Cardone @ Banco Intesa</li>
<li>Robert Santiago @ BBVA</li>
</ul>
</div></blockquote>
</li>
</ul>
</div></blockquote>
</li>
<li><pclass="first">The usability of the command line demo programs has been improved.</p>
</li>
<li><pclass="first">All example code and existing contracts have been ported to use the new Java/Kotlin unit testing domain-specific
languages (DSLs) which make it easy to construct chains of transactions and verify them together. This cleans up
and unifies the previous ad-hoc set of similar DSLs. A tutorial on how to use it has been added to the documentation.
We believe this largely completes our testing story for now around smart contracts. Feedback from bank developers
during the Trade Finance project has indicated that the next thing to tackle is docs and usability improvements in
the protocols API.</p>
</li>
<li><pclass="first">Significant work done towards defining the “CorDapp” concept in code, with dynamic loading of API services and more to
come.</p>
</li>
<li><pclass="first">Inter-node communication now uses SSL/TLS and AMQP/1.0, albeit without all nodes self-signing at the moment. A real
PKI for the p2p network will come later.</p>
</li>
<li><pclass="first">Logging is now saved to files with log rotation provided by Log4J.</p>
</li>
</ul>
<p>API changes:</p>
<ulclass="simple">
<li>Some utility methods and extension functions that are specific to certain contract types have moved packages: just
delete the import lines that no longer work and let IntelliJ replace them with the correct package paths.</li>
<li>The <codeclass="docutils literal"><spanclass="pre">arg</span></code> method in the test DSL is now called <codeclass="docutils literal"><spanclass="pre">command</span></code> to be consistent with the rest of the data model.</li>
<li>The messaging APIs have changed somewhat to now use a new <codeclass="docutils literal"><spanclass="pre">TopicSession</span></code> object. These APIs will continue to change
in the upcoming releases.</li>
<li>Clauses now have default values provided for <codeclass="docutils literal"><spanclass="pre">ifMatched</span></code>, <codeclass="docutils literal"><spanclass="pre">ifNotMatched</span></code> and <codeclass="docutils literal"><spanclass="pre">requiredCommands</span></code>.</li>
<li><codeclass="docutils literal"><spanclass="pre">NotaryService</span></code> is now extensible.</li>
<li>Every <codeclass="docutils literal"><spanclass="pre">ContractState</span></code> now has to specify a <em>participants</em> field, which is a list of parties that are able to
consume this state in a valid transaction. This is used for e.g. making sure all relevant parties obtain the updated
state when changing a notary.</li>
<li>Introduced <codeclass="docutils literal"><spanclass="pre">TransactionState</span></code>, which wraps <codeclass="docutils literal"><spanclass="pre">ContractState</span></code>, and is used when defining a transaction output.
The notary field is moved from <codeclass="docutils literal"><spanclass="pre">ContractState</span></code> into <codeclass="docutils literal"><spanclass="pre">TransactionState</span></code>.</li>
<li>Every transaction now has a <em>type</em> field, which specifies custom build & validation rules for that transaction type.
Currently two types are supported: General (runs the default build and validation logic) and NotaryChange (
contract code is not run during validation, checks that the notary field is the only difference between the
inputs and outputs).
<codeclass="docutils literal"><spanclass="pre">TransactionBuilder()</span></code> is now abstract, you should use <codeclass="docutils literal"><spanclass="pre">TransactionType.General.Builder()</span></code> for building transactions.</li>
</ul>
</div></blockquote>
</li>
<li><pclass="first">The cash contract has moved from <codeclass="docutils literal"><spanclass="pre">net.corda.contracts</span></code> to <codeclass="docutils literal"><spanclass="pre">net.corda.contracts.cash</span></code></p>
</li>
<li><pclass="first"><codeclass="docutils literal"><spanclass="pre">Amount</span></code> class is now generic, to support non-currency types such as physical assets. Where you previously had just
<codeclass="docutils literal"><spanclass="pre">Amount</span></code>, you should now use <codeclass="docutils literal"><spanclass="pre">Amount<Currency></span></code>.</p>
</li>
<li><pclass="first">Refactored the Cash contract to have a new FungibleAsset superclass, to model all countable assets that can be merged
and split (currency, barrels of oil, etc.)</p>
</li>
<li><pclass="first">Messaging:</p>
<blockquote>
<div><ulclass="simple">
<li><codeclass="docutils literal"><spanclass="pre">addMessageHandler</span></code> now has a different signature as part of error handling changes.</li>
<li>If you want to return nothing to a protocol, use <codeclass="docutils literal"><spanclass="pre">Ack</span></code> instead of <codeclass="docutils literal"><spanclass="pre">Unit</span></code> from now on.</li>
</ul>
</div></blockquote>
</li>
<li><pclass="first">In the IRS contract, dateOffset is now an integer instead of an enum.</p>
</li>
<li><pclass="first">In contracts, you now use <codeclass="docutils literal"><spanclass="pre">tx.getInputs</span></code> and <codeclass="docutils literal"><spanclass="pre">tx.getOutputs</span></code> instead of <codeclass="docutils literal"><spanclass="pre">getInStates</span></code> and <codeclass="docutils literal"><spanclass="pre">getOutStates</span></code>. This is
just a renaming.</p>
</li>
<li><pclass="first">A new <codeclass="docutils literal"><spanclass="pre">NonEmptySet</span></code> type has been added for cases where you wish to express that you have a collection of unique
objects which cannot be empty.</p>
</li>
<li><pclass="first">Please use the global <codeclass="docutils literal"><spanclass="pre">newSecureRandom()</span></code> function rather than instantiating your own SecureRandom’s from now on, as
the custom function forces the use of non-blocking random drivers on Linux.</p>
</li>
</ul>
</div>
<divclass="section"id="milestone-0">
<h2>Milestone 0<aclass="headerlink"href="#milestone-0"title="Permalink to this headline">¶</a></h2>
Built with <ahref="http://sphinx-doc.org/">Sphinx</a> using a <ahref="https://github.com/snide/sphinx_rtd_theme">theme</a> provided by <ahref="https://readthedocs.org">Read the Docs</a>.
