Observations:
In which specific version of Mac OS X, OS X, macOS did the validation code for Kernel Extension changed?
In macOS Sierra 10.12.4b, trying to load a kernel extension with extra files in the _CodeSignature folder fails and codesign -vvvvv explains the reason: "unsealed contents present in the bundle root".
In OS X 10.11.6, the same kernel extension (with the extra files) loads fine and codesign -vvvvvv states that all the requirements are met.
Question:
Did this change with macOS Sierra 10.12.3? Has there been a release note about this?