Corda合约沙箱白名单：运营商管控权限及自定义方法咨询

1. Can network operators control the contract sandbox whitelist? #

Absolutely. In Corda, the contract sandbox whitelist is a core component of the network's global parameters, which fall exclusively under the purview of the network operator.

The operator holds full authority to define, update, and enforce which Java libraries (and contract implementations) are permitted in the sandbox. This control is critical because the whitelist directly guarantees deterministic contract execution across all network nodes—every node must adhere to the same set of allowed libraries to prevent consensus failures. When the operator adjusts the whitelist by modifying network parameters, all nodes in the network are required to accept and apply the update to stay compliant and connected.

2. Are there feasible ways to customize this whitelist? #

The ability to customize depends entirely on the type of Corda network you’re working with:

• Private/permissioned networks (you act as the operator): Yes, you have full control to tailor the whitelist. Here’s how:
  • Edit the network parameters file (usually network-parameters.conf) to adjust entries like whitelistedJars (for specific library JARs) and whitelistedContractImplementations (for approved contract classes).
  • Use Corda’s built-in network parameter update workflow to push the modified parameters to all nodes in your network. Nodes will automatically adopt the new whitelist once they accept the update.
  • For isolated development or testing, you can temporarily configure a local node’s sandbox whitelist via its node configuration file—but this is only for non-production use, as production networks require strict consistency across all nodes.
• Public/third-party managed networks: No, you cannot customize the whitelist on your own. Only the network’s official operator has the authority to make adjustments. If you need a specific library added, you’ll have to submit a request to the operator and wait for their review (they’ll assess whether the library meets the network’s determinism and security standards before approving).

Keep in mind that any whitelist changes need careful vetting—adding untested libraries risks breaking the deterministic contract execution that’s foundational to Corda’s consensus model.

内容的提问来源于stack exchange，提问作者Joel