No, the customer does not “digitally sign” the consent artefact created by the AA. The tangible evidence that a customer is indeed the person who approved a consent request is expected to be implemented through a combination of Employing multi-factor authentication techniques on the AA clients used by a customer and keeping a log of the consent approval/rejection action performed by the customer through the AA client.