<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>com.apple.security.cs.allow-jit</key>
    <true/>
    <key>com.apple.security.cs.allow-unsigned-executable-memory</key>
    <true/>
    <key>com.apple.security.cs.disable-library-validation</key>
    <true/>
    <key>com.apple.security.device.audio-input</key>
    <true/>
    <!-- Required for the core sidecar to make outbound HTTPS calls (registry fetch,
         skill manifest + JS bundle downloads) under the macOS Hardened Runtime.
         Without this, reqwest connections are silently blocked by the OS in signed
         DMG builds, causing skills_install to appear stuck for ~30 s per request. -->
    <key>com.apple.security.network.client</key>
    <true/>
    <!-- Required for the core sidecar to bind and accept connections on port 7788
         (JSON-RPC server, Socket.IO) under the macOS Hardened Runtime. -->
    <key>com.apple.security.network.server</key>
    <true/>
</dict>
</plist>
