Seems that this is resolved in 26.3 beta 1

Hi, Unfortunately the above suggestion doesn't seem to work as the binary is not a real bundled app, e.g. see for 'codesign' That is to say it's identified by path within TCC.db rather that its bundle id. Thanks, Doron.