It seems in order to include the privacy manifest of static framework to generate the privacy report, Xcode setting for the static framework should be 'embedded but not signed'. Can Apple Support team confirm this case ?

We got the same observation. The IdentifierforVendor has changed during iOS16 beta4 upgrade. Is IdentifierForVendor changed as a iOS 16 beta-4 DEBUG ro an intended change ? This inconsistency would break a lot of applications relying on the APPLE Design that IdentifierForVendor would remain unchanged for the same application across OS upgrade. Please confirm the case.