app/layers: consolidate signed/unsigned usage