Thanks! sudo nvram boot-args="amfi_get_out_of_my_way=0x1" did the trick.

A note of warning: I booted back into Monterey (I have both Monterey and Ventura beta in different volumes on the same Mac), and amfi_get_out_of_my_way setting of 0x1 is set there too. That is, setting amfi_get_out_of_my_way in Ventura affects Monterey (same Mac, different volumes). Before leaving Ventura and booting back into Monterey, I now set amfi_get_out_of_my_way to 0x0. Hopefully that keeps Monterey protected when I am working in that OS.

Perfect! I want to duplicate codesign -dv <path> So it looks like SecCode and SecStaticCode should do the trick. I'll start researching those.

Thanks. I suspected that might be the case with signing IDs. I was hoping there was an easy way to translated Team IDs to human readable names for the organizations (see additional reply for more examples).

Thanks!

Thanks. Bummer about ES sysex having to be deployed independently. I really like the Mac App Store for a variety of reasons, including for software updates. Now, I will have to investigate Sparkle or other software update mechanisms.

I had not appreciated all the nuances surrounding the tightening down what had originally been a fairly open system. I can imagine there are a lot of edge cases surrounding legacy code, code running in isolated networks, running open source code downloaded from the network, etc. (Part of me would like something like iPhone's Lockdown mode for my Mac.)

Good. This is the behavior I was hoping for. I'm using a content filter provider for macOS, so I am using the System Extension approach.

That resolved it. Thanks!

Will do.

OMG! Apparently, I just tried to reimplement VSplitView. VSplitView worked perfectly! In case someone runs across this (or a future version of me runs across this), I found adding the .frame(maxWidth: .infinity, maxHeight: .infinity) modifier to the two views helped.

Maybe they just got a new certificate for the same Team ID. I just ran % codesign -dvvv '/Applications/Google Chrome.app' and it shows a timestamp of Sep 8. Authority=Developer ID Application: Google LLC (EQHXZ8M8AV) Authority=Developer ID Certification Authority Authority=Apple Root CA Timestamp=Sep 8, 2023 at 8:03:25 PM

Thanks!

I'll do additional test runs this weekend to create a more complete report. (Also in response to another post)

PS. I'll be spinning up VMs today for additional testing on clean machines.