This isn't what you asked for, but one of the systems that Google uses internally has system to report the hash of every executable launched and block executabl

This isn't what you asked for, but one of the systems that Google uses internally has system to report the hash of every executable launched and block executables it isn't aware of. A binary authorization system for macOS https://github.com/google/santa https://github.com/google/santa