Endpoint Security system extension : invalid signature or entitlements

For your ES sysex to work on a machine with SIP enabled it must be signed with a valid Developer ID and then notarised. The container app must have the com.apple.developer.system-extension.install entitlement and the ES sysex must have the com.apple.developer.endpoint-security.client entitlement. The latter must be requested from Apple per the discussed in its documentation.

Share and Enjoy
—
Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"