{% from "macros.html" import bool_choice, textarea, subhead, text_field, HR %} {% call accord('Other Policy', 'Logging and other system-wide rules') %}

Logging

{{ bool_choice('POLICY.must_log', "Fail transactions if we cannot log to MicroSD") }} {{ bool_choice('POLICY.never_log', "Do not log anything, even if MicroSD is inserted") }}
{{HR()}}

Warnings

{{ bool_choice('POLICY.warnings_ok', "Permit signing of transactions (PSBT) which have warnings (default: does not).") }} {{HR()}}

Privacy Vs. Easy of Use

{{ bool_choice('POLICY.priv_over_ux', "If you prefer privacy over convenience, this causes Coldcard to be more secretive and makes the Bunker harder to use, because both will store less data about policy, usernames, and derivation paths.") }} {{HR()}}

Boot To HSM

{{ text_field('POLICY.boot_to_hsm', "Coldcard will reboot directly to HSM mode, but will accept this 6-digit code to escape, if provided immediately.", placeholder="(optional)", extras='pattern="[0-9]{6}" required minlength=6 maxlength=6 ', rhs_label="6-digit code", disabled_if="POLICY.ewaste_enable") }} {{ bool_choice('POLICY.ewaste_enable', "Do not accept any code. Always boot to HSM mode.") }} {# bool_choice('POLICY.ewaste_enable', "Do not accept any code. Always stay in HSM mode and there is no way out. CAUTION: Even master PIN holder cannot change HSM policy nor escape HSM mode! Firmware upgrades are not possible.") #}
Warning

This setting is irreversible. No changes to firmware, HSM policy, Coldcard settings will be possible—ever again.
Not even the master PIN holder can change HSM policy nor escape HSM mode! Firmware upgrades are not possible.

{{HR()}}

Notes

{{ textarea('POLICY.notes', "Free-form text shown on Coldcard when approving HSM Policy.", placeholder="(optional)", rows=3) }}
{% endcall %}