is... is there really no actual explicit behavior case covering the code signing of bundles that lack executables? this all appears to be fall-through behavior that results in separate executable signing and resource hashing so it Just Works, and this is going to make me cry.
↧