diff --git a/src/native/parsers/codesign.ts b/src/native/parsers/codesign.ts
index 74a472f33a..2c93c38f06 100644
--- a/src/native/parsers/codesign.ts
+++ b/src/native/parsers/codesign.ts
@@ -45,11 +45,7 @@ export const parseCodeSignature = (
     entitlements: null,
     timestamp: values.get("Timestamp") ?? null,
     hardened_runtime: parseRuntime(values.get("CodeDirectory")),
-    limitations: unsigned
-      ? ["Artifact is not signed."]
-      : [
-          "Entitlements and designated requirements require separate bounded commands.",
-        ],
+    limitations: unsigned ? ["Artifact is not signed."] : [],
   });
   return parsed;
 };
diff --git a/tests/boundary/cli/nativeSignatureCli.test.ts b/tests/boundary/cli/nativeSignatureCli.test.ts
index e30581db4c..73a57bbe90 100644
--- a/tests/boundary/cli/nativeSignatureCli.test.ts
+++ b/tests/boundary/cli/nativeSignatureCli.test.ts
@@ -60,7 +60,13 @@ describe.skipIf(process.platform !== "darwin")(
               authorities: [],
               entitlements: null,
               designated_requirement: expect.stringMatching(/^cdhash H"/u),
+              limitations: [
+                expect.stringContaining("trust validation are not examined."),
+              ],
             },
+            limitations: [
+              expect.stringContaining("trust validation are not examined."),
+            ],
           });
         }
         const identifier = await cli.run({
diff --git a/tests/boundary/providers/native/nativeSignatureTargetBinding.test.ts b/tests/boundary/providers/native/nativeSignatureTargetBinding.test.ts
index 56e3c43b73..15eda5e90a 100644
--- a/tests/boundary/providers/native/nativeSignatureTargetBinding.test.ts
+++ b/tests/boundary/providers/native/nativeSignatureTargetBinding.test.ts
@@ -73,6 +73,10 @@ describe("native signature target identity", () => {
     expect(result.value.result).toMatchObject({
       signed: true,
       identifier: "com.example.fixture",
+      designated_requirement: "identifier com.example.fixture",
+      limitations: [
+        "Inspected a digest-verified Mach-O byte snapshot; filesystem-bound signing context and trust validation are not examined.",
+      ],
     });
   });