Can I sign, verify, review the dynamic library and then put it on the
server to download but can't open it?
“sign” — Kinda [1].
“verify” — I’m not sure what that means. My best guess is that you’re talking about the Validate App button in the Xcode organiser. If so, that only works with apps, not frameworks.
“review” — With App Review? If so, the answer is “No.” App Review only allows you to submit apps.
“put it on the server” — Sure.
“download” — Sure.
“open” — No. As I’ve mentioned before, iOS’s security model prevents you from running code that you download in this way.
this app … was able to open dynamic libraries in the sandbox
I very much doubt that. If that were the case, it’d be a massive security vulnerability in iOS.
I suspect that you’ve misunderstood how that app works. However, I’m not able to reverse engineer other developer’s apps on your behalf. If you want to know how it does what it does, you should feel free to reach out to the author.
Share and Enjoy
—
Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"
[1] You can sign an iOS framework as a standalone code item and, if this were macOS, that’d be sufficient. However, the way that iOS apps reference their frameworks is somewhat different from that on macOS so the question as to whether this is signed correctly is a matter of interpretation.