Effective privacy can’t be retrofitted. It must be designed for the institutions that rely on it. Canton embeds selective, need-to-know visibility at the protocol level.