LightweightCodeRequirements

1. Checking code requirements for running processes

   Covers SecTaskValidateForRequirement(task:requirement:), ProcessCodeRequirement, allOf(requirement:), anyOf(requirement:).

2. Checking code requirements for launching processes

   Covers SecCodeCheckValidityWithProcessRequirement(code:flags:requirement:), launchRequirement, LaunchCodeRequirement, allOf(requirement:).

3. Checking code requirements for code files on disk

   Covers SecStaticCodeCheckValidityWithOnDiskRequirement(code:flags:requirement:), SecCodeCheckValidityWithOnDiskRequirement(code:flags:requirement:), ValidationResult, OnDiskCodeRequirement.

4. Testing properties of executable code

   Covers CodeDirectoryHash, EntitlementsQuery, InfoPlistHash, IsInitProcess.

5. Handling errors

   Covers ConstraintError.

Each section links to the official page. Titles and summaries by Extra Credit; the docs belong to their authors.