Always approve

Smoke-test a development Virtual Signer without a policy service

Always Approve makes the Virtual Signer approve every signing, key-generation, and resharing request without consulting a policy service.

IOSIGN_SIGNER_BROKER_APPROVAL_MODE=always-approve
🚧

Development only. This mode removes automated policy enforcement. Do not use it for a signer with production signing power or access to valuable assets.

Use Always Approve only to verify that a new development deployment can register, receive requests, and participate in MPC. After the smoke test, configure a new production signer with OPA or a custom policy server before assigning it to production vaults.


Did this page help you?