diff --git a/internal/driver/ioscompanion/devicerunner.go b/internal/driver/ioscompanion/devicerunner.go
index 67566a4..b7beb56 100644
--- a/internal/driver/ioscompanion/devicerunner.go
+++ b/internal/driver/ioscompanion/devicerunner.go
@@ -211,6 +211,11 @@ func buildForTestingArgs(projectPath, derivedDataPath string, creds signingCrede
 		"-authenticationKeyPath", creds.authKeyPath,
 		"-authenticationKeyID", creds.authKeyID,
 		"-authenticationKeyIssuerID", creds.authIssuerID,
+		// companion/project.yml disables signing for the simulator build; the
+		// device install rejects an unsigned runner (0xe8008018), so signing is
+		// re-enabled here and the team drives automatic provisioning.
+		"CODE_SIGNING_ALLOWED=YES",
+		"CODE_SIGNING_REQUIRED=YES",
 		"CODE_SIGN_STYLE=Automatic",
 		"DEVELOPMENT_TEAM=" + creds.team,
 		"GENERATE_INFOPLIST_FILE=YES",
diff --git a/internal/driver/ioscompanion/devicerunner_test.go b/internal/driver/ioscompanion/devicerunner_test.go
index 1382243..976698a 100644
--- a/internal/driver/ioscompanion/devicerunner_test.go
+++ b/internal/driver/ioscompanion/devicerunner_test.go
@@ -21,6 +21,8 @@ func TestBuildForTestingArgs(t *testing.T) {
 		"-authenticationKeyPath /k/AuthKey.p8",
 		"-authenticationKeyID KID",
 		"-authenticationKeyIssuerID ISS",
+		"CODE_SIGNING_ALLOWED=YES",
+		"CODE_SIGNING_REQUIRED=YES",
 		"CODE_SIGN_STYLE=Automatic",
 		"DEVELOPMENT_TEAM=TEAM1",
 		"GENERATE_INFOPLIST_FILE=YES",