<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>com.apple.security.cs.allow-unsigned-executable-memory</key>
    <true/>
    <key>com.apple.security.cs.allow-jit</key>
    <true/>
    <key>com.apple.security.cs.disable-library-validation</key>
    <true/>
    <key>com.apple.security.network.client</key>
    <true/>
    <key>com.apple.security.network.server</key>
    <true/>
    <key>com.apple.security.files.user-selected.read-write</key>
    <true/>
    <key>com.apple.security.inherit</key>
    <true/>
    <!-- Dictation: without this, a hardened-runtime signed build denies getUserMedia mic capture with NO TCC prompt, which is exactly how prod dictation stayed dead while dev worked (ENG-103). -->
    <key>com.apple.security.device.audio-input</key>
    <true/>
    <!-- Secure-Enclave WebAuthn credential storage (Touch ID passkeys). Authorized by the embedded Developer ID provisioning profile (Y26NUZH4NG.* wildcard); must match the group passed to app.configureWebAuthn. Main app only, NOT the helper-inherit file. -->
    <key>keychain-access-groups</key>
    <array>
        <string>Y26NUZH4NG.com.clusterlabs.openswarm.webauthn</string>
    </array>
</dict>
</plist>
