I was under the impression that dynamically loading code was no longer allowed. Not that apps have to be static, but unless it was part of the .app and signed it won't run in the sandbox.