I know about this entitlement, I've been using it for a while for multiple apps, but then why does it work without lldb or any entitlements? This is why it doesn't make much sense. If the entitlement is required, then I should be getting no route to host without lldb, which is not the case. What I didn't try is to debug a binary with entitlements appiled, however it'd be very unreasonable to expect debug binaries to be signed which is a requirement to apply entitlements. I'm just trying to debug locally, on my own machine, these binaries are built on the same machine, never distributed, same as debugging through Xcode, which I can't because this is not an Xcode project. For distribution it's 100% sensible, but I don't think the entitlement has anything to do with it.

Thank you for the explanation, I forgot about the mandatory signing requirement on arm64, which is now being applied to x64_64 as well. I've yet to acquire an arm64 machine, but I guess I'd have found about this earlier if I did. It won't be hard to add a post process task to handle this case and trigger the permission dialog - I already have it for release builds, just a bit of adaptation and it's done. I'll do it as soon as I have some time.