always - larger hashes are truncated */.

valid cdhash for amfid.

ANE model hash.

max size of the hash we'll support */.

https://gist.github.com/LinusHenze/4cd5d7ef057a144cda7234e2c247c056 Constraint Categories (from TrustCache, new in version 2): Category 0: No Constraints Category 1: Self Constraint: (on-authorized-authapfs-volume || on-system-volume) && launch-type == 1 && validation-category == 1 Parent Constraint: is-init-proc Category 2: Self Constraint: on-authorized-authapfs-volume || on-system-volume Category 3: Self Constraint: (on-authorized-authapfs-volume || on-system-volume) && (launch-type == 0 || launch-type == 1) && validation-category == 1 Category 4: Self Constraint: (on-authorized-authapfs-volume || on-system-volume) && (launch-type == 0 || launch-type == 1) && validation-category == 1 Parent Constraint: (on-system-volume && signing-identifier == "com.apple.mbfloagent" && validation-category == 1) || is-init-proc Category 5: Self Constraint: validation-category == 1 Parent Constraint: (on-system-volume && signing-identifier == "com.apple.mbfloagent" && validation-category == 1) || is-init-proc Category 6: Self Constraint: (!in-tc-with-constraint-category || is-sip-protected || on-authorized-authapfs-volume || on-system-volume) && launch-type == 1 && validation-category == 1 Parent Constraint: (apple-internal && entitlements["com.apple.private.set-launch-type.internal"] == 1) || is-init-proc Category 7: Self Constraint: validation-category == 1 */.