When you download an app outside the App Store, codesign is the built-in way to check who actually signed it and whether the copy on disk has been tampered with. It reads the signature that…