Not what the parent said, true, but you <i>can</i> test for this easily: launch the app, see if it terminates with exit code 173 (receipt check fail) in the first few seconds if fed SHA-2 receipt but <i>not</i> the old SHA-1 one. Won&#x27;t catch all (apps may validate later during runtime), will catch enough to give you some idea about the scope.