Signed, Sealed, Notarized: macOS Code Integrity in Practice

An app that fails to launch on a Mac is rarely broken code — it is a chain of cryptographic checks rejecting it, and most developers only learn how it works once a build gets stuck in review. This book walks through every link: certificates and the keychain, how a signature binds to a binary, what the hardened runtime and entitlements enforce, and how Gatekeeper, XProtect, TCC, and System Integrit...