Skip to content
kawasekit

EnforcementLevel

EnforcementLevel = "advisory" | "cryptographic" | "hardware" | "integrator"

Defined in: src/signer/types.ts:37

How strongly a PolicyGatedSigner enforces its policy.

  • advisory — a single party holds a key that can sign without the gate (the local adapter). The policy is a request, not a guarantee.
  • cryptographic — the key is split (e.g. threshold signing); no valid signature exists without a policy-passing co-signature. No adapter at this level ships in this package.
  • hardware — enclave-sealed key + policy (the reserved tee adapter).
  • integrator — delegated to the integrator’s HSM/KMS (the reserved byo adapter); the enforcement strength is integrator-defined.