pilotDefaults

Pilot defaults for testing without signature verification.

NOT FOR PRODUCTION. Disables requireSignedConfig and accepts any minimumConfigVersion, which means a malicious managed-config push can install a policy that relaxes PII handling, disables encryption, or redirects baseUrl. The returned policy is still safer than disabling remote config entirely (A/B testing

  • version monotonicity still apply) but is inappropriate for any deployment that handles real user data. Gated by PilotConfig since 1.2.0; callers must add @OptIn(RemoteConfigPolicy.PilotConfig::class) to acknowledge.