Security Q:A new app fails signature verification. What steps are appropriate to address this?
w/o guidance, my plan is: 


report it as a security issue to security@ (per
https://www.amazon.com/gp/help/customer/display.html?nodeId=201909140),
try to get codesign to show me what's missing,  
Pick apart the .ini