I like the docusign/envelope concept, consider having the option of just outputting the raw events without a log-in... I don't expect many are/will take to URI based signers like nsecapp/amber that require a native proto handler

The management console is SaaS, but on the board is self-hosted signer to plug into it so you don't need to trust us with the nsec

It's not meant to have the signer be entirely offline, but rather have it be least-privileged (eg a fenced appliance locked down with iptables and so on to only communicate via the dashboard)

The widget for apps with it is NIP-07 based, so if you'd like to drop it in there as an option I can let you know when we're ready to have others beat on it... the service side of it also allows normies that just want an email based log-in to participate without added friction.