1 post
macOS grants signed apps install-time trust, then stops validating. Persistence lives in that gap. The trust model is the exposure.
