The VMS operating system has had dynamic linking for thirty years or so. A simple version identifier match scheme allows for the requirement of at least a spec

The VMS operating system has had dynamic linking for thirty years or so. A simple version identifier match scheme allows for the requirement of at least a specified version or newer of the library (not running against an older version), or flagging that an incompatible API change has been made (not running against an incompatible version). The dynamic linking mechanism then checks this pair of identifier values that is associated with each library, and allows (or disallows) activation of the calling application. There's also a mechanism to redirect the activation, which allows you to maintain a private version of the library. And yes, there are security implications for some cases of this redirection.