Thanks for the reply. We're not building against xros specifically, we are just enabling our existing iPad app to be available on the visionOS app store (compatible app only for now).
I took a release build from our CI, unzipped the ipa and picked one example framework to run codesign -d --entitlements - ***.framework
and the output looks like:
Executable=/Users/***/Downloads/asdf/Payload/***.app/Frameworks/***.framework/***
[Dict]
So it appears that there is just an empty dictionary for the entitlements. Should there just be no entitlements at all, or is the empty dictionary normal?