“Until this great work is completed, our Dominion is little more than a geographical expression.”
Executive Summary
The decision Canada makes in the next two to three years about how to build its tokenized financial settlement infrastructure will shape the country’s financial future for generations. This is a sovereignty question that happens to be expressed in technical form. What must settlement infrastructure deliver before a sovereign nation can responsibly build its tokenized financial systems on it, which configurations of available technology can satisfy those requirements, and which architectural choice retains Canadian control over the systemic core? These findings are addressed to policymakers, regulators, and senior decision makers who are currently making, or will shortly be asked to make, infrastructure and procurement decisions in the tokenized settlement space.
Sovereignty in Technology
Sovereignty is the supreme authority over a specific domain. In the technological context, a sovereign nation should retain unilateral authority over core systemic technologies. The need for sovereign control over technology is ever more exacerbated when that technology hosts national assets and currency.
Context and Urgency
The decision window is real and bounded. US tokenization has moved from pilot to execution. By the second half of 2026, the DTCC will tokenize US Treasuries, Russell 1000 equities, and major ETFs under SEC authorization. The GENIUS Act and CLARITY Act have placed a full legislative framework behind US dollar denominated digital assets.
The direction is clear, it is moving fast, and it is already reaching Canadian institutions. BMO has committed institutional settlement to Google Cloud Universal Ledger. Project Samara ran on foreign administered infrastructure with cryptographic keys held in foreign hosted services. Each decision was reasonable in isolation. Together they represent a pattern: Canadian critical settlement infrastructure taking shape, by default, on foreign rails.
Methodology
The study applies two analytically distinct frameworks in sequence. The first — the BIS Principles for Financial Market Infrastructures, as extended by CPMI-IOSCO to digital asset arrangements and developed in Basel Committee Working Paper 44 — establishes operational eligibility through five baseline tests covering legal settlement finality, throughput and availability, neutral transaction ordering, robust risk governance, and the standing of Canadian authorities to halt or restrict settlement. Any configuration that fails any single test is disqualified, regardless of its sovereignty performance.
The second framework — the Canadian SHIELD Institute’s Sovereignty Score — then evaluates the survivors across ten criteria spanning sovereignty and economic prosperity, with each criterion receiving a PASS, PARTIAL, or FAIL verdict supported by evidence.
Five Configurations, One Architectural Answer
The study evaluates five configurations — permutations of public L1, sovereign Layer 2 on public L1, dual rail with off-chain finality, and a purpose-built sovereign L1 — against the baseline tests, then applies the Sovereignty Score to the four that survive. The comparative scorecard summarizes the result.
| Criterion | B — Sovereign L2 on public L1 | C — Sovereign L2 + domestic DA | D — Dual rail, off-chain finality | E — Purpose-built sovereign L1 |
|---|---|---|---|---|
| Sovereignty domain | ||||
| Foreign dependence reduction | PARTIAL | PARTIAL | PASS | PASS |
| Governance of technology systems | PARTIAL | PARTIAL | PASS | PASS |
| National security protection | PARTIAL | PARTIAL | PASS | PASS |
| Market competition | PARTIAL | PASS | PASS | PARTIAL |
| Canadian innovation | PARTIAL | PASS | PARTIAL | PASS |
| Economic prosperity domain | ||||
| Domestic asset retention | FAIL | PASS | PASS | PASS |
| Quality jobs | PARTIAL | PASS | PASS | PASS |
| Utilization of Canadian skills | PARTIAL | PARTIAL | PASS | PASS |
| Shared prosperity | PARTIAL | PARTIAL | PASS | PASS |
| Affordability | FAIL | FAIL | PASS | PASS |
| Total | 0 P / 8 Pa / 2 F | 4 P / 5 Pa / 1 F | 9 P / 1 Pa / 0 F | 9 P / 1 Pa / 0 F |
Structural Risks Outside the Scorecard
Vendor capture and soft capture operate through commercial relationships and jurisdictional concentration rather than through direct technical attack. The historical pattern is well documented in the cloud, semiconductor, and SWIFT cases.
Configuration E gives Canadian institutions the most authority over the design, interoperability, and operational support layers and therefore the most leverage against these risks, but the mitigation depends on procurement and integrator decisions that the architectural choice does not determine. Sovereign architecture is the necessary condition for sovereign settlement infrastructure. Sovereign procurement is the additional condition required to make it real.
Recommendation
Canada should build a purpose-built sovereign Layer 1 (Configuration E) as the strategic answer to its tokenized settlement infrastructure question. The architecture should be permissioned, domestically open, non-discriminatory, and internationally interoperable.
The Cost of Indecision
The decision window does not close sharply. It closes gradually, through the accumulation of procurement commitments that individually appear reasonable and collectively determine the architecture of Canadian settlement for the next generation. The cost of not making this choice is the continued accumulation of Canadian institutional commitments to foreign operated infrastructure that will be substantially more expensive to reverse than to avoid.