Immediately after a clean installation, Input.app passes macOS code-signature verification.
After launching the app once, verification fails because the app bundle's sealed AppleScript resource has been modified:
/Applications/input.app/Contents/Resources/scripts/window-info-retriever.scpt