GCGraeme Chardinfeedsbar.hashnode.dev·Sep 5 · 6 min readSigned, notarized, and silently unauthorized: the ShazamKit provisioning trap for Developer ID Mac appsOriginally published on feeds.bar, August 2026. Our ShazamKit feature worked in every debug build and failed in every shipped one. The signature was fine. The staple was fine. The missing piece was a 01A