This is a non-certified reference implementation and evidence pack for independent verification. No endorsement or regulatory approval is implied.

Reference implementation demonstrating VeritasChain Protocol (VCP) v1.1 audit trails for cTrader-based trading workflows. This repository contains a verifiable evidence pack generated from a live cTrader environment, enabling independent third-party verification of order and execution logs.

• 🔐 VCP v1.1 Compliant - Full specification compliance for Silver Tier
• 🌳 RFC 6962 Merkle Trees - Domain-separated hash construction with second preimage attack protection
• ⚓ External Anchoring - Local file, OpenTimestamps (Bitcoin), FreeTSA support
• 📝 Complete Event Types - SIG, ORD, ACK, EXE, PRT, CLS, MOD, CXL, REJ, ERR_*
• 🔄 Automatic Batching - Configurable batch sizes with automatic Merkle root generation
• 📊 Verification Export - Self-contained verification packages with Python scripts
• 🚀 High Performance - >1K events/second, <1s latency

Clone this repository and add the project reference to your cBot solution:

git clone https://github.com/veritaschain/vcp-ctrader-rta-reference.git

Or copy the source files from src/VCP.CTrader.RTA/ into your cBot project.

using VCP.CTrader;

// Configure VCP Evidence Pack
var config = new VCPEvidencePackConfig
{
    BasePath = @"C:\VCPData",
    EventConfig = new VCPEventGeneratorConfig
    {
        PolicyID = "com.yourcompany:ctrader-bot-v1",
        Issuer = "Your Organization",
        AlgorithmName = "My Trading Bot",
        AlgorithmVersion = "1.0.0",
        ConformanceTier = ConformanceTier.SILVER
    },
    AutoAnchorEnabled = true
};

// Initialize
var vcp = new VCPEvidencePack(config);
await vcp.InitializeAsync();

// Record trading events
await vcp.RecordSignalAsync("USDJPY", "BUY", 150.123, 0.85, "Technical signal");
await vcp.RecordOrderAsync("USDJPY", "ORD-001", "BUY", 10000, 150.125, 149.825, 150.625);
await vcp.RecordExecutionAsync("USDJPY", "ORD-001", "POS-001", "BUY", 10000, 150.125);
await vcp.RecordCloseAsync("USDJPY", "ORD-001", "POS-001", "SELL", 10000, 150.125, 150.625, 5000);

// Export verification package
await vcp.ExportVerificationPackageAsync("audit_2025Q1");

See examples/SampleVCPBot.cs for a complete cBot integration example.

public class MyVCPBot : Robot
{
    private VCPEvidencePack _vcp;

    protected override void OnStart()
    {
        _vcp = new VCPEvidencePack(new VCPEvidencePackConfig { ... });
        _vcp.InitializeAsync().Wait();
    }

    protected override void OnPositionsOpened(PositionOpenedEventArgs args)
    {
        _vcp.RecordExecutionAsync(...).Wait();
    }

    protected override void OnPositionsClosed(PositionClosedEventArgs args)
    {
        _vcp.RecordCloseAsync(...).Wait();
    }

    protected override void OnStop()
    {
        _vcp.AnchorNowAsync().Wait();
        _vcp.GenerateDailyReportAsync().Wait();
    }
}

┌─────────────────────────────────────────────────────────────────┐
│                        VCPEvidencePack                          │
│  ┌──────────────┐  ┌──────────────┐  ┌──────────────┐          │
│  │    Events    │  │    Merkle    │  │   Anchoring  │          │
│  │  Generator   │──│     Tree     │──│   Service    │          │
│  └──────────────┘  └──────────────┘  └──────────────┘          │
│         │                 │                 │                   │
│         ▼                 ▼                 ▼                   │
│  ┌──────────────────────────────────────────────────┐          │
│  │              Persistent Storage                   │          │
│  │  • events_YYYYMMDD.jsonl                         │          │
│  │  • batches/batch_<id>.json                       │          │
│  │  • anchors/anchor_<id>.json                      │          │
│  └──────────────────────────────────────────────────┘          │
└─────────────────────────────────────────────────────────────────┘
                              │
                              ▼
              ┌───────────────────────────────┐
              │     External Anchors          │
              │  • Local File (required)      │
              │  • OpenTimestamps (Bitcoin)   │
              │  • FreeTSA (RFC 3161)         │
              │  • Custom HTTP endpoint       │
              └───────────────────────────────┘

vcp-ctrader-rta-reference/
├── README.md                          # This file
├── LICENSE                            # CC BY 4.0
├── CONTRIBUTING.md                    # Contribution guidelines
├── .gitignore                         # Git ignore rules
├── VCP.CTrader.RTA.sln               # Solution file
├── src/
│   └── VCP.CTrader.RTA/
│       ├── VCP.CTrader.RTA.csproj    # Project file
│       ├── VCPCore.cs                 # Core data structures
│       ├── VCPMerkleTree.cs          # Merkle tree implementation
│       ├── VCPEventGenerator.cs      # Event generation
│       ├── VCPAnchor.cs              # External anchoring
│       └── VCPEvidencePack.cs        # Main integration class
├── examples/
│   └── SampleVCPBot.cs               # cBot integration example
├── evidence/
│   └── sample_pack_2025Q1/           # Verifiable evidence pack
│       ├── events.json               # Trade events (masked)
│       ├── batches.json              # Merkle batches
│       ├── anchors.json              # Anchor records
│       ├── hash_manifest.json        # SHA-256 integrity manifest
│       ├── verify.py                 # Verification script
│       ├── README.md                 # Evidence pack guide
│       └── certificates/             # Event certificates
│           └── event_certificate_*.json
├── docs/
│   ├── ARCHITECTURE.md               # Architecture details
│   ├── EVENTS.md                     # Event type reference
│   ├── PLATFORM.md                   # cTrader integration guide
│   └── VERIFICATION.md               # Verification guide
└── .github/
    └── workflows/
        └── dotnet.yml                # CI: Build + Evidence Verification

This repository includes a verifiable evidence pack generated from a cTrader environment with masked identifiers:

cd evidence/sample_pack_2025Q1

# Quick integrity check via hash manifest
cat hash_manifest.json | python3 -c "import sys,json; [print(f'{k}: {v[\"sha256\"][:16]}...') for k,v in json.load(sys.stdin)['files'].items()]"

# Full verification
python verify.py

The sample contains 24 VCP events demonstrating:

• Trading signals and executions
• Order lifecycle (SIG → ORD → ACK → EXE → CLS)
• Error handling and recovery
• Merkle batching and anchoring

Integrity Verification: The hash_manifest.json provides SHA-256 hashes for all evidence files, enabling tamper detection at a glance.

⚠️ Note: Personal identifiers (organization, account, broker, algorithm names) have been masked. Currency symbols shown as XXXYYY.

This implementation targets VCP Silver Tier for retail trading systems:

• INIT - System initialization
• SIG - Signal generation
• ORD - Order submission
• ACK - Order acknowledgment
• EXE - Full execution
• PRT - Partial fill
• CLS - Position close
• MOD - Order modification
• CXL - Order cancellation
• REJ - Order rejection

• ERR_CONN - Connection error
• ERR_AUTH - Authentication error
• ERR_TIMEOUT - Timeout
• ERR_REJECT - Rejection
• ERR_RISK - Risk limit breach

• Architecture Guide - Detailed system architecture
• Event Reference - Complete event type documentation
• Platform Guide - cTrader integration & MT5 comparison
• Verification Guide - How to verify audit trails

• .NET 6.0 or later
• cTrader 4.x (for cBot integration)

For production Ed25519 signatures:

• Chaos.NaCl
• BouncyCastle

Contributions are welcome! Please see CONTRIBUTING.md for guidelines.

• VCP Specification - Official VCP specification
• VCP MT5 Reference - MetaTrader 5 implementation

This project is licensed under CC BY 4.0 - Creative Commons Attribution 4.0 International.

• VeritasChain Standards Organization (VSO) for the VCP specification
• RFC 6962 (Certificate Transparency) for Merkle tree construction standards
• RFC 9562 for UUID v7 specification

Disclaimer: This is a reference implementation for educational and development purposes. Production deployments should undergo thorough security review and testing.

The sample evidence pack uses the following masking conventions:

Important: Despite masking, all SHA-256 hashes are real cryptographic computations and remain fully verifiable. The masking affects only human-readable metadata, not the cryptographic integrity of the audit trail.