Signing as the human signer

The platform never holds the human key. It builds a transaction, you check and sign it on your own device, and you upload only the signature. Issuing, burning, refilling and clawback all need this signature.

At launch there is one human signer, a decision the owner made on 2026-10-31. One signature completes the on-chain step, so your check is the last one.

Sign a proposalCopy Anchor Link

1. In the console, open Signing and copy the envelope. Never sign an envelope from anywhere else.

2. On your laptop, decode it:

   Copy Text

   stellar xdr decode --type TransactionEnvelope

3. Check the network passphrase, source accounts, operations, asset and amount against the request.

4. Sign it:

   Copy Text

   stellar tx sign --sign-with-key dara-signer --network mainnet

5. Paste the signed envelope with your public key on the Signing page.

The proposal expires after 24 hours. Check the commands against stellar --help for your installed version.

Protect the keyCopy Anchor Link

• Use a laptop only for signing, with full-disk encryption, a strong password and automatic screen lock.
• Keep one encrypted offline backup, and check once a quarter that its public key matches.
• If the laptop is lost or may be compromised, treat it as an incident at once.

Recommended before the Mainnet canaryCopy Anchor Link

Move the key to a hardware wallet, such as a Ledger with the Stellar app. The key then never leaves the device, even if the laptop has malware. The signing flow already works with it through the Stellar CLI. Adding more signers later also removes the lost-key risk, and needs no code change. This isn't decided yet.

Full procedure: key management.