Sepolia-only · EIP-1559 · local signing

Review first.
Sign locally.

A small signing boundary for an unsigned Sepolia transaction: 1Password resolves a dedicated testnet key directly into stdin, the local signer produces a type-2 payload, and no RPC call or broadcast occurs.

Read the source on GitHub Watch short walkthrough
$ OP_CACHE=false op read "$OP_EVM_PRIVATE_KEY_REF" | .venv/bin/python bin/op-evm-sign --tx-json examples/sepolia-transfer.json
1Password vault → stdin pipe → local signer RAM → signed transaction JSON

Reviewable

Review mode renders every accepted transaction field, including calldata and access lists, before key input is read.

Constrained

The sample boundary accepts Sepolia type-2 transactions and rejects unsupported fields before private-key ingestion.

Non-custodial

1Password is secret retrieval, not an HSM. The key reaches local process memory briefly to sign. No plaintext keyfile or key-bearing argument is used.

Terminal evidence

Actual CLI review states

Rotating terminal preview of signer review and validation commands
Sepolia zero-value transaction review output Calldata and access-list review output Unsupported field rejected before key access Signer regression test output
Short walkthroughReview, validation, and signer boundary in 73 seconds. Detailed walkthroughFull terminal evidence sequence and test output.