sandboxd

Code signing and certificate management service — validates and manages code signatures and certificates

Manages code signing validation, certificate verification, and cryptographic operations for macOS applications and system components. Accesses Keychain to retrieve and validate certificates, handles code signature verification through Security framework functions, and maintains private storage for certificate data and validation caches. Submits analytics about code signing operations and certificate validation results to Apple's unified analytics system. Exposes multiple XPC services to allow other system processes and applications to request code signing validation and certificate operations. Communicates with 48 network endpoints, primarily for certificate revocation checking, timestamp validation, and Apple's certificate infrastructure services.AI