Free macOS app inspects app signing and builds macOS 27 DDM JSON
A free SwiftUI utility was built while testing macOS 27's new -execution controls. Selecting an .app bundle instantly shows its Team ID, , , info, and other values in one place, avoiding the need to run several and manually copy values. The app also includes a graphical declaration builder: users can add multiple apps, choose allow or deny, create rules scoped to a specific app or to an entire developer, enable managed-app allowances, add path restrictions, and then copy or export the finished JSON.
It flags duplicate and redundant rules, since broad Team ID rules can easily overlap with more specific app-level rules. The app runs entirely locally and uploads nothing, requires no Jamf , and does not modify the app being inspected. Right now it is source-only, so building it requires Xcode.
It focuses on .app bundles rather than standalone binaries or every embedded helper tool. The macOS 27 schema it targets is still based on beta and could change, and there is no direct Jamf upload yet.
Key points
- Free SwiftUI app for inspecting and generating macOS 27's new -execution control (DDM) settings
- Selecting an app shows Team ID, , , and more in one view
- Graphical declaration builder creates allow/deny rules and exports the result as JSON
- Runs entirely locally, needs no Jamf , and doesn't modify the inspected app
- Currently source-only (requires Xcode to build); macOS 27 schema is beta and subject to change