Which extended attributes are attached to downloaded archives and apps? How do they fit in with provenance tracking?
provenance
Is provenance tracking intended to make app launch times shorter despite new Gatekeeper checks, or is it trying to make it harder to cheat?
How the new tracking extended attribute is attached to apps, how it’s recorded in a security database, and how it’s checked. But for what purpose?
The Eclectic Light Company 