[BUG] Bundled claude-code CLI binary is unsigned — fails Gatekeeper on managed Mac, breaks Chat/Cowork/Code with "crashed" error

Preflight Checklist

• [x] I have searched existing issues and this hasn't been reported yet
• [x] This is a single bug report (please file separate reports for different bugs)
• [x] I am using the latest version of Claude Code

What's Wrong?

Every query in Claude Desktop fails — not just the Code tab, but plain Chat and Cowork too. Root cause traced to the bundled claude-code CLI binary being unsigned, which fails Gatekeeper/AMFI validation on a corporate-managed Mac and gets killed by macOS before it can execute. Chat/Cowork appear to route through the same local CLI binary, so the failure is app-wide rather than isolated to Code.

What Should Happen?

Chat, Cowork, and Code all execute queries normally without invoking a broken/unsigned local binary.

Error Messages/Logs

Binary is valid Mach-O but unsigned:

$ file claude
.../claude: Mach-O 64-bit executable arm64

$ codesign -dv --verbose=4 .../claude
.../claude: code object is not signed at all

Running the binary directly gets SIGKILL'd by macOS:

$ .../claude --version
zsh: killed     --version

Claude Desktop's main.log:

[warn] [HostLoop] cli.js stderr: Failed to spawn process: Malformed Mach-o file
[error] Claude Code process exited with code 127
[error] Session ... query error: Claude Code process exited with code 127

macOS syspolicyd log (the real underlying cause):

[com.apple.securityd:SecError] STRICT VALIDATION ERROR: invalid structure
[com.apple.securityd:security_exception] MacOS error: -67045
[com.apple.syspolicy:default] Unable to get certificates array: (null)
[com.apple.syspolicy.exec:default] Requirement failing with error due to code: -67045
[com.apple.syspolicy.exec:default] Doing an XProtect scan b/c not exempt
[com.apple.syspolicy.exec:default] <private> with PID 5403 violates validation category policy.
    This will likely result in a block in the future

Steps to Reproduce

1. Install/update Claude Desktop to a version bundling claude-code CLI v2.1.209
2. On a corporate-managed Mac with Gatekeeper enforcement, open Claude Desktop
3. Send any query in Chat, Cowork, or Code
4. Observe "Claude Code crashed" error on every attempt

Claude Model

Opus

Is this a regression?

I don't know

Last Working Version

_No response_

Claude Code Version

2.1.210 (Claude Code)

Platform

Anthropic API

Operating System

macOS

Terminal/Shell

Terminal.app (macOS)

Additional Information

The "will likely result in a block in the future" message suggests today's failure is a soft-fail (XProtect scan + delay before kill); an upcoming macOS/Gatekeeper policy tightening could turn this into a hard, universal block rather than something limited to strict corporate configs.