Protecting users on the desktop.
WHAT THE SANDBOX RESTRICTS
File access Network access Hardware access Communication with other applications
WHAT TO REQUEST
The minimum entitlements your features require.
WHAT REQUIRES EXPLICIT USER CONSENT
Camera and microphone Screen recording Accessibility control of other applications Full disk access Contacts, calendars and photographs Files in protected locations
WHAT ACCESSIBILITY CONTROL PERMITS
Controlling and reading other applications entirely.
WHY THAT MATTERS
It is extremely powerful, and users are right to be cautious.
WHAT TO DO IF YOU NEED IT
Explain precisely why, and request it at the moment of use.
WHAT HARDENED RUNTIME REQUIRES
Declaring exceptions for capabilities like loading unsigned code.
WHAT NOTARISATION REQUIRES
The hardened runtime enabled.
WHAT TO STORE IN THE KEYCHAIN
Every credential.
WHAT TO NEVER DO
Ship with debugging entitlements enabled Request accessibility control without a clear feature requiring it Disable protections during development and forget
WHAT TO AUDIT BEFORE RELEASE
The entitlements actually present in the signed build.
