Thanks Quinn. I added com.apple.developer.kernel.increased-memory-limit = true to the Enhanced Security .appex only, keeping its existing hardening entitlements unchanged.
Automatic signing in Xcode 27.1 (27A9275), using my paid developer team, fails with:
“Entitlement com.apple.developer.kernel.increased-memory-limit not found and could not be included in profile. This likely is not a valid entitlement and should be removed from your entitlements file.”
Xcode’s cached capability metadata lists only com.apple.product-type.application for this entitlement.
Is there a supported way to provision it for an Enhanced Security extension, perhaps through manual provisioning, or should I file a bug for this restriction?