Continuation of WELD-2402 - we found out that the fix was only partial and introduced problems in existing applications which relied on package private access in signed packages with proxies.

All proxies of signed classes can be placed in original packages except for those where bean types of proxied bean equal to Object.class.
The reason why it can be the same package is that Weld re-uses the ProtectionDomain of the proxied bean type for newly created proxy - that way the signers of that class will effectively remain the same.