🚀 Prod deploy signer …

Only a signature from an enrolled device can ship to production. Your signing key never leaves this device.

Enroll this device

Generate a signing key here (it stays on this device, non-exportable) and request approval.

Device name

Pending approval. Verify this fingerprint out-of-band, then approve on the pool.

This device's key fingerprint

This device isn't enrolled

No prod deploys are waiting to be signed.

Exact bytes you are signing

This authorizes a PRODUCTION deploy. Confirm the app, git SHA and image digest match what you tested on preview.