macOS Initial Access

Overview

Some format-specific commands will only run on macOS.
Clearly label any behavior that depends on signing, quarantine, or management policy.
You aren't limited to the formats described in this skill.
Keep commands copyable, explain the expected directory layout in one sentence.

Explain these in one short paragraph unless the user asks for detail:

Code signing: Binds developer identity and integrity metadata to code; signatures also carry entitlements. Sign every nested executable, framework, and helper before signing the outer bundle.
Hardened Runtime: Adds runtime restrictions against injection, process tampering, unsigned executable memory, DYLD manipulation, and untrusted libraries. Exceptions require specific entitlements. It is required for notarization.
Notarization: Apple's automated malware and signing check for Developer ID-signed software. Successful submissions receive a ticket that Gatekeeper can retrieve or that can be stapled to apps, flat packages, and DMGs.
Gatekeeper: Evaluates downloaded or quarantined software using signature, notarization, provenance, integrity, and known-malware checks, then asks for user approval when appropriate.