A signature binds an Application to the Organization that published it. Trust that publisher once, and every Application they sign is covered — no per-document decision, no re-reading the code.

An unsigned Application earns trust one place at a time. A folder-based Application asks for consent wherever it appears; an inline Application asks again in every document, because anyone who can edit the document can change its code.

A signature moves the unit of trust from the 

. It covers an exact set of built files — change one byte and it no longer matches. So trusting a signed Application means trusting a known Organization to stand behind exactly what you ran, and that decision follows their signature everywhere.

A signed Application names its publisher. The shield on the Application container shows the signer and what you have allowed. From there you can:

 (Settings → Permission Policies) block a signer for everyone in the Organization at once, and a block always beats an individual's allow.

, next to consent for unsigned Applications.

Signing keys belong to an Organization. Only an Owner manages them, under 

Generating a key runs entirely in your browser:

Keys rotate by archiving the old one and registering a new one. Applications already signed with an archived key still verify; the archived key just cannot sign anything new.

The signature covers the whole built bundle, not the manifest text alone — the same file closure the 

 produces. Re-sign after any change to the code.

 block to the manifest and marks it version 2:

 is the fingerprint of the built files — what the signature is really over. Everything in the block except the signature value is itself signed, so none of it can be altered after the fact.

 — Trust, consent, and the three kinds of Application.

What Application signing is, why it shifts trust from a copy of code to the publisher behind it, and what users actually see when they run a signed Application.

Signing & Trust

Why Sign

What You See

Signing Keys

Signing an Application

The Signature Block

Patterns

Next Steps