// blog · tag
#security
-
approval_digest: binding what you reviewed to what you sign
A hardware signer is only as honest as the link between the screen you read and the bytes the device puts a signature on. approval_digest is the contract that makes that link non-forgeable.