mirror of
https://github.com/morluto/rea.git
synced 2026-11-06 14:56:32 +00:00
Bind and recheck the digest-verified snapshot used by codesign, retaining cleanup ownership when its identity changes. Classify unsigned only from the exact operand-framed diagnostic so echoed caller paths cannot turn unrelated failures into signature facts. Closes #5636