[quote='831680022, mmccartney, /thread/778169?answerId=831680022#831680022, /profile/mmccartney'] Each of our executables require the same entitlements: [/quote] This is potentially confusing, so let’s go to a table: Entitlement App Child ----------- --- ----- ….app-sandbox true true ….inherit - true ….cs.disable-library-validation true true ….files.user-selected.read-write true - ….network.client true - ….network.server true - In this table: App is your main application and Child is any program is spawns as a child process. - indicates that the entitlement shouldn’t be claimed at all. In general, you shouldn’t claim an entitlement with a false value, that just causes confusion. For the last three rows, you don’t need to, and mustn’t claim, the entitlement because these are part of your static sandboxed, which is what the second row is about. [quote='831680022, mmccartney, /thread/778169?answerId=831680022#831680022, /profile/mmccartney'] And if it's all going to TestFlight then I suppose it's restri