warden config
Show and set vault config.
warden config show
warden config set --approval-method owner-wallet-offchain --approval-owner <wallet>show— print the config, verifying its vault-key signature first. Password-free.set— change a field and re-sign (needs the vault password). Only--rpc-url,--approval-method,--approval-owner,--approval-timeoutare mutable.
The vault owner and identity (vault key, kdf salt, seal binding, unlock mode) are fixed at
init and cannot be changed by config set — they're anchored on-chain and in
the seal binding, so editing them locally would only create a mismatch. To change the owner, re-init.
set is hardened: it re-signs only after verifying the existing config's signature (a tampered config
can't be opened), and refuses if anything other than rpc_url / approval would change — so the
vault-key signature only ever covers an intentional, single-surface edit.
See Configuration.