2026-09-17 15:32:28 +03:00
|
|
|
<?xml version="1.0" encoding="UTF-8"?>
|
|
|
|
|
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
|
|
|
|
|
<plist version="1.0">
|
|
|
|
|
<dict>
|
|
|
|
|
<!-- Hardened-runtime entitlements (applied once the app is signed).
|
2026-10-08 17:35:15 +03:00
|
|
|
Laid 2026-09-17; corrected 2026-10-08 against current electron-builder
|
|
|
|
|
docs:
|
|
|
|
|
- allow-jit: Electron's V8 JIT needs it under hardened runtime — the
|
|
|
|
|
one exception modern Electron requires;
|
|
|
|
|
- allow-unsigned-executable-memory: DROPPED 2026-10-08 — a 2019-era
|
|
|
|
|
Electron relic, not needed by modern V8/Electron (44), and it
|
|
|
|
|
weakens the hardened runtime for no benefit;
|
2026-09-17 15:32:28 +03:00
|
|
|
- audio-input: macOS mic for the STT milestone (the Developer-ID
|
|
|
|
|
variant — com.apple.security.device.microphone is the App-Store
|
|
|
|
|
sandbox variant and does NOT apply to Developer ID apps). -->
|
|
|
|
|
<key>com.apple.security.cs.allow-jit</key>
|
|
|
|
|
<true/>
|
|
|
|
|
<key>com.apple.security.device.audio-input</key>
|
|
|
|
|
<true/>
|
|
|
|
|
</dict>
|
|
|
|
|
</plist>
|