If you are 'fortunate' enough to catch weird code signing bugs, like MacCatalyst app with a few dylibs / so's then getting the correct code signature will be a

If you are 'fortunate' enough to catch weird code signing bugs, like MacCatalyst app with a few dylibs / so's then getting the correct code signature will be a game of cat and mouse -- Eskimo is even one to say just use a developer support credit because they are so hard. Well, the very first time a Mac sees an app, there are special GateKeeper error codes that are never repeated... so if you are unfortunate enough to not know this and test your app on all the Macs you have in your possession, and still can't identify the bug, it was most likely error coded at the very first run time... To which the solution is make a VM or do all the un-niceties of removing the special security from the Mac, safe boots and all.