| 1 | <?xml version="1.0" encoding="UTF-8"?> |
| 2 | <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> |
| 3 | <plist version="1.0"> |
| 4 | <dict> |
| 5 | <!-- Hardened-runtime entitlements required to notarize a Wails (Go + WKWebView) |
| 6 | app. The web view's JS engine needs JIT and writable/executable memory; |
| 7 | the Go binary links system libs that aren't team-signed. Kept minimal — no |
| 8 | network/file entitlements, since this is a hardened-runtime carve-out, not |
| 9 | an App Sandbox profile. --> |
| 10 | <key>com.apple.security.cs.allow-jit</key> |
| 11 | <true/> |
| 12 | <key>com.apple.security.cs.allow-unsigned-executable-memory</key> |
| 13 | <true/> |
| 14 | <key>com.apple.security.cs.disable-library-validation</key> |
| 15 | <true/> |
| 16 | </dict> |
| 17 | </plist> |
| 18 |