There have been changes to the way that macOS 12 checks executable code when asked to run it. Summarised in a diagram.
Gatekeeper
Improves reporting of results on T2 and M1 Macs, and clarifies old versions of Gatekeeper seen on newer Macs. Recommended for all users.
Quarantine flags first appeared in 2007. This explains how they work, what they do, and the differences between app and document quarantine.
Is Apple going to meet the promises it made a year ago, to protect its users around the world from the risk posed by its online signing certificate checks?
Improved reporting of firmware, Gatekeeper, and clearer documentation are the main improvements.
From CompatibilityNotificationData to XProtect, details of all the security data and related components in Monterey.
Nine months ago, Apple undertook to make changes in the way in which macOS checks its OCSP service for certificate revocations. Has it changed anything yet?
From the start of voluntary code signing in 2007, defences against malware in macOS have changed dramatically. Here’s an overview of what has happened.
If you use the Installer app the wrong way, it will open an ad-hoc signed package and quietly install apps which don’t get checked by Gatekeeper.
When you check the version of Gatekeeper data on a new Mac, why should it show one which was pushed by Apple nearly 5 years ago for El Capitan?
The Eclectic Light Company 