[BUG] Claude CLI killed by kernel on macOS 26 beta - obsolete code signature format

Preflight Checklist

• [x] I have searched existing issues and this hasn't been reported yet
• [x] This is a single bug report (please file separate reports for different bugs)
• [x] I am using the latest version of Claude Code

What's Wrong?

Claude CLI binary is immediately killed by the kernel when launched on macOS 26 beta.

The shell shows zsh: killed with no other output. The kernel log shows:

• proc: load code signature error 2 for file "2.1.17"
• (AppleSystemPolicy) ASP: Security policy would not allow process

Root cause: The binary's code signature has an "obsolete resource envelope" format (error -67002) that macOS 26's stricter Apple System Policy enforcement rejects, even though the signature is valid and properly notarized.

What Should Happen?

Claude CLI should launch successfully on macOS 26 beta without being killed by the kernel.

Error Messages/Logs

$ claude --version
  zsh: killed     claude

  # Kernel log (from `log show`):
  kernel: proc 97883: load code signature error 2 for file "2.1.17"
  kernel: (AppleSystemPolicy) ASP: Security policy would not allow process: 97883, /Users/xxx/.local/share/claude/versions/2.1.17

  # Gatekeeper assessment shows the issue:
  $ spctl -a -vvv --raw /path/to/2.1.17
  assessment:authority:source = "obsolete resource envelope"
  assessment:authority:weak = true
  assessment:cserror = -67002
  assessment:verdict = false

Steps to Reproduce

1. Install macOS 26 beta (Tahoe) - build 25C56 or similar
2. Install Claude CLI via curl -fsSL https://claude.ai/install.sh | sh
3. Run claude --version
4. Observe: zsh: killed

Workaround that confirms the issue:

1. Re-sign the binary: codesign --force --sign - --preserve-metadata=entitlements ~/.local/share/claude/versions/2.1.17
2. Run claude --version again
3. Now it works: 2.1.17 (Claude Code)

Claude Model

None

Is this a regression?

I don't know

Last Working Version

Unknown - this is macOS version dependent, not Claude version dependent. Works on macOS 15, fails on macOS 26 beta.

Claude Code Version

2.1.17 (Claude Code)

Platform

Anthropic API

Operating System

macOS

Terminal/Shell

iTerm2

Additional Information

The binary's code signature is valid and properly signed by Anthropic:

• Authority: Developer ID Application: Anthropic PBC (Q6L2SF6YDW)
• CodeDirectory v=20500 with runtime flag
• codesign --verify passes

However, macOS 26 beta has stricter Apple System Policy (ASP) kernel enforcement that rejects the "obsolete resource envelope" signature format.

Suggested fix: Re-sign the Claude CLI binary with updated signature tooling that produces a modern resource envelope format compatible with macOS 26's stricter requirements.

Temporary user workaround:
codesign --force --sign - --preserve-metadata=entitlements ~/.local/share/claude/versions/2.1.17

This must be re-run after each Claude update.