codesign

Prepare, integrate, review and audit local development signing for native macOS tools, helpers and SwiftPM executables outside Xcode that need profile-authorized entitlements such as Data Protection Keychain access groups. Select provisioning profiles and identities by criteria, sign a single-executable tool bundle through its build, verify its signing inputs and plan renewals. Does not own Xcode archive/export or Developer ID distribution, SwiftPM .app packaging and notarization, or SecItem implementation.