Step-by-step guides for the most common end-to-end flows. Each recipe assumes
you have sign on your $PATH (built locally via npm run build) and that
you've run sign init to scaffold the local provider.
| Recipe | When you'd reach for it |
|---|---|
| Pre-production preflight (for agents) | Production-ready pipeline: doctor → strict-provider banner check → pdf stamp verify → audit export. Fail-closed, exit-code-driven, no human in the loop until something goes wrong. |
| Sign as Alice (local provider) | First-time walkthrough: create a request, send it, sign it, verify it, hand off the receipt. |
| Weekly audit anchor | Periodic continuity proof — anchor every chain head, store the .tsr, re-verify next week. |
| Auditor handoff bundle | Compliance review: package the anchor + per-request receipts into a single self-contained bundle. |
| Agent loop over MCP | Drive the CLI from an LLM agent: tools/list, tools/call, capability scoping, replay logs. |
| Mutual EU NDA from template | End-to-end B2B NDA flow using the bundled markdown template with the method-consent clause baked in (see legal-posture.md for why that matters). |
sign --helpfor the full command catalog (also:sign help <command>)../regression-testing.md— manual per-item tests for everything in[Unreleased]MIGRATION.mdfor the storage backend / async-migration roadmapfixtures/web-demo/for a 1-file dashboard you can serve viasign serve --web-demo true