Smart Contracts (Soroban)

ACTA Verifiable Credentials on Soroban: vault storage + issuance status registry, unified into one contract.

Contract

This repo contains a single Soroban contract located at:

contracts/vc-vault/: unified contract that includes:
- Vault (per owner): create_vault, issuer authorization, list_vc_ids, get_vc, push, revoke_vault, set_vault_admin
- Issuance (status registry): issue, verify_vc, revoke
- Admin: initialize, set_contract_admin, fee config (set_fee_config, set_fee_enabled), upgrade, version

Contract state is public on-chain: store only ciphertext in vc_data (never plaintext PII).
Admin-gated functions require signatures (require_auth()).
initialize requires contract_admin signature; create_vault requires owner signature (prevents hostile/grief initialization).
Vault write operations are blocked if the vault is revoked.

Use the build script (Soroban v21 uses wasm32v1-none output by default):

Linux/macOS:

chmod +x scripts/build.sh
./scripts/build.sh

Windows (PowerShell):

bash scripts/build.sh

Manual:

soroban contract build
soroban contract optimize --wasm target/wasm32v1-none/release/vc_vault_contract.wasm

Build outputs:

Use the release script:

Linux/macOS:

chmod +x scripts/release.sh
./scripts/release.sh

Windows (PowerShell):

bash scripts/release.sh

The script configures testnet (idempotent), generates vc_vault_admin (idempotent), builds/optimizes, and deploys the unified contract.

This software is licensed under the Apache License 2.0.