{"code":"var Component=(()=>{var p=Object.create;var s=Object.defineProperty;var u=Object.getOwnPropertyDescriptor;var g=Object.getOwnPropertyNames;var m=Object.getPrototypeOf,y=Object.prototype.hasOwnProperty;var f=(i,t)=>()=>(t||i((t={exports:{}}).exports,t),t.exports),k=(i,t)=>{for(var n in t)s(i,n,{get:t[n],enumerable:!0})},o=(i,t,n,a)=>{if(t&&typeof t==\"object\"||typeof t==\"function\")for(let r of g(t))!y.call(i,r)&&r!==n&&s(i,r,{get:()=>t[r],enumerable:!(a=u(t,r))||a.enumerable});return i};var w=(i,t,n)=>(n=i!=null?p(m(i)):{},o(t||!i||!i.__esModule?s(n,\"default\",{value:i,enumerable:!0}):n,i)),v=i=>o(s({},\"__esModule\",{value:!0}),i);var l=f((A,h)=>{h.exports=_jsx_runtime});var b={};k(b,{default:()=>c});var e=w(l());function d(i){let t={a:\"a\",code:\"code\",em:\"em\",h2:\"h2\",h3:\"h3\",img:\"img\",li:\"li\",ol:\"ol\",p:\"p\",pre:\"pre\",span:\"span\",strong:\"strong\",table:\"table\",tbody:\"tbody\",td:\"td\",th:\"th\",thead:\"thead\",tr:\"tr\",ul:\"ul\",...i.components};return(0,e.jsxs)(e.Fragment,{children:[(0,e.jsxs)(t.p,{children:[`With macOS 27 Golden Gate, Apple Intelligence stopped being optional. The models download whether or not you use them, Siri AI is built into Spotlight, and more requests than ever are handed off from your Mac to Apple's servers for processing. Apple's answer to \"what exactly is being sent?\" is a feature most Mac users have never opened: the `,(0,e.jsx)(t.strong,{children:\"Apple Intelligence Report\"}),\", tucked away at the bottom of Privacy & Security settings. It can show you, request by request, the text you sent to Private Cloud Compute and the response you got back. It also has quirks that make it easy to export an empty file, easy to misread, and easy to leak. This guide shows how to turn it on so it actually records something, how to read the JSON it produces with tools already on your Mac, what the report cannot tell you, and why the deepest layer of it \\u2014 the cryptographic attestations \\u2014 is really meant for security researchers rather than for you.\"]}),`\n`,(0,e.jsx)(t.p,{children:(0,e.jsx)(t.img,{alt:\"A man in a dim room speaking to his laptop, with a glowing AI orb on screen and lines of light drifting out of the window toward a distant data center\",src:\"/images/blog/apple-intelligence-report-macos-27-what-siri-ai-sends-private-cloud-compute-2026/hero.webp\",width:\"1200\",height:\"675\"})}),`\n`,(0,e.jsx)(t.h2,{id:\"key-takeaways\",children:\"Key Takeaways\"}),`\n`,(0,e.jsxs)(t.ul,{children:[`\n`,(0,e.jsxs)(t.li,{children:[(0,e.jsx)(t.strong,{children:\"The report records Private Cloud Compute activity, and only after you turn it on.\"}),' Choose \"last 15 minutes\" (the default) or \"last 7 days\" in System Settings > Privacy & Security > Apple Intelligence Report. Apple warns the report may be empty if there have been no Private Cloud Compute requests since you changed the duration.']}),`\n`,(0,e.jsxs)(t.li,{children:[(0,e.jsx)(t.strong,{children:\"It contains your actual words.\"}),\" According to Howard Oakley's analysis, each request entry includes the full prompt and the model's response \\u2014 for example, text you ran through Writing Tools. Treat the exported file like a private diary.\"]}),`\n`,(0,e.jsxs)(t.li,{children:[(0,e.jsx)(t.strong,{children:\"It is a JSON file you can read with built-in tools.\"}),\" macOS includes \",(0,e.jsx)(t.code,{children:\"jq\"}),\"; a handful of commands in this guide turn the report into a readable list of which app sent what, when, and whether it ran on the device or in the cloud.\"]}),`\n`,(0,e.jsxs)(t.li,{children:[(0,e.jsx)(t.strong,{children:\"It is not a complete log of AI on your Mac.\"}),\" Oakley found that on-device interactions appear to be recorded only in the unified log, and Siri conversations are recorded as transcripts in the new Siri app.\"]}),`\n`,(0,e.jsxs)(t.li,{children:[(0,e.jsx)(t.strong,{children:\"The attestation data is for researchers.\"}),\" The bulk of a report is Base64-encoded attestation bundles for the servers that handled each request. Apple's \",(0,e.jsx)(t.code,{children:\"pccvre\"}),' tool can parse them, but it requires changing a security setting in Recovery, and Oakley concluded the result is of \"precious little use\" to ordinary users.']}),`\n`]}),`\n`,(0,e.jsx)(t.h2,{id:\"why-this-report-matters-more-on-macos-27\",children:\"Why This Report Matters More on macOS 27\"}),`\n`,(0,e.jsxs)(t.p,{children:[\"Apple Intelligence splits work between two places. Simple tasks run \",(0,e.jsx)(t.strong,{children:\"on the device\"}),\", using models stored on your Mac. Larger tasks go to \",(0,e.jsx)(t.strong,{children:\"Private Cloud Compute (PCC)\"}),`, Apple's server infrastructure built on Apple silicon. Apple's privacy page for the Mac states that \"the data being processed in Private Cloud Compute is not stored or made accessible to Apple. It is processed only to fulfill your request, after which point the results are returned securely to your device and are not retained.\"`]}),`\n`,(0,e.jsx)(t.p,{children:\"Three things changed with macOS 27 that make it worth checking that promise for yourself:\"}),`\n`,(0,e.jsxs)(t.ol,{children:[`\n`,(0,e.jsxs)(t.li,{children:[(0,e.jsx)(t.strong,{children:\"You can no longer switch Apple Intelligence off entirely.\"}),\" As \",(0,e.jsx)(t.a,{href:\"https://www.macrumors.com/2026/09/23/apple-intelligence-30gb-some-macs-macos-27/\",children:\"MacRumors reported\"}),\", the toggle that disabled it has been removed in macOS 27 and iOS 27. The storage cost of that change is covered in our guide to \",(0,e.jsx)(t.a,{href:\"/blog/macos-27-disk-space-30gb-apple-intelligence-storage-after-upgrade-2026\",children:\"the 30 GB macOS 27 takes after upgrading\"}),\".\"]}),`\n`,(0,e.jsxs)(t.li,{children:[(0,e.jsx)(t.strong,{children:\"Siri AI is a new, conversational client.\"}),\" It is built into Spotlight and has its own app. We covered how to use it in \",(0,e.jsx)(t.a,{href:\"/blog/how-to-use-siri-ai-mac-macos-27-enable-spotlight-conversations-siri-app-2026\",children:\"our Siri AI guide for macOS 27\"}),\". More capable requests mean more of them go to PCC.\"]}),`\n`,(0,e.jsxs)(t.li,{children:[(0,e.jsx)(t.strong,{children:\"Home joins the list.\"}),` Apple's macOS 27 release notes say that when Apple Intelligence in the Home app is enabled, \"your HomeKit Secure Video recordings are processed on-device and through Private Cloud Compute for video descriptions and search\" (178858470). The same notes list a fix for Apple Intelligence Report entries for Home Intelligence, where \"some data that was sent to Private Cloud Compute won't appear in the report\" (176056930) \\u2014 a sign that Apple treats the report as the place where this data should appear.`]}),`\n`]}),`\n`,(0,e.jsx)(t.p,{children:\"The report is the only built-in, per-request record of what went to PCC. If you care about privacy at all, it is worth knowing how to use it.\"}),`\n`,(0,e.jsx)(t.h2,{id:\"what-private-cloud-compute-promises-and-what-the-report-can-check\",children:\"What Private Cloud Compute Promises, and What the Report Can Check\"}),`\n`,(0,e.jsxs)(t.p,{children:[\"It is easier to read the report if you know which of Apple's claims it can actually help you verify. When Apple introduced Private Cloud Compute on its \",(0,e.jsx)(t.a,{href:\"https://security.apple.com/blog/private-cloud-compute/\",children:\"security research blog\"}),\" on 10 June 2024, it set out five core requirements:\"]}),`\n`,(0,e.jsxs)(t.table,{children:[(0,e.jsx)(t.thead,{children:(0,e.jsxs)(t.tr,{children:[(0,e.jsx)(t.th,{children:\"Requirement\"}),(0,e.jsx)(t.th,{children:\"What Apple committed to\"}),(0,e.jsx)(t.th,{children:\"Can your report help verify it?\"})]})}),(0,e.jsxs)(t.tbody,{children:[(0,e.jsxs)(t.tr,{children:[(0,e.jsx)(t.td,{children:\"Stateless computation on personal user data\"}),(0,e.jsx)(t.td,{children:\"Data is used only to fulfil the request, is not retained, and is not accessible to Apple staff\"}),(0,e.jsx)(t.td,{children:\"No \\u2014 this happens on the server\"})]}),(0,e.jsxs)(t.tr,{children:[(0,e.jsx)(t.td,{children:\"Enforceable guarantees\"}),(0,e.jsx)(t.td,{children:\"Protections are enforced technically, not by policy alone\"}),(0,e.jsx)(t.td,{children:\"Indirectly, through attestations\"})]}),(0,e.jsxs)(t.tr,{children:[(0,e.jsx)(t.td,{children:\"No privileged runtime access\"}),(0,e.jsx)(t.td,{children:\"No interfaces that let staff bypass the privacy guarantees, even during an incident\"}),(0,e.jsx)(t.td,{children:\"No\"})]}),(0,e.jsxs)(t.tr,{children:[(0,e.jsx)(t.td,{children:\"Non-targetability\"}),(0,e.jsx)(t.td,{children:\"An attacker cannot single out a specific user's data without compromising the whole system\"}),(0,e.jsx)(t.td,{children:\"Partly \\u2014 see the relay below\"})]}),(0,e.jsxs)(t.tr,{children:[(0,e.jsx)(t.td,{children:\"Verifiable transparency\"}),(0,e.jsx)(t.td,{children:\"Researchers can check that the software running matches what Apple published\"}),(0,e.jsxs)(t.td,{children:[\"Yes, via the attestation bundles and \",(0,e.jsx)(t.code,{children:\"pccvre\"})]})]})]})]}),`\n`,(0,e.jsx)(t.p,{children:\"Two mechanisms from that design explain much of what you will see in a report.\"}),`\n`,(0,e.jsxs)(t.p,{children:[(0,e.jsx)(t.strong,{children:\"Your Mac chooses which servers it trusts.\"}),` Apple writes that the device wraps each request's payload key \"only to the public keys of those PCC nodes whose attested measurements match a software release in the public transparency log\". In other words, your Mac checks each candidate server's attestation against a published, append-only list of software releases before it will let that server decrypt anything. The attestation bundles in `,(0,e.jsx)(t.code,{children:\"privateCloudComputeRequests\"}),\" are the evidence of that check, and a single request can list several nodes, because the key is released to each node that qualifies. Many attestation entries for one request do not mean many copies of your data were processed; they mean several servers were eligible to handle it.\"]}),`\n`,(0,e.jsxs)(t.p,{children:[(0,e.jsx)(t.strong,{children:\"Your IP address is hidden from Apple.\"}),` According to the same post, PCC requests pass through an OHTTP relay \"operated by a third party \\u2014 which hides the device's source IP address before the request ever reaches the PCC infrastructure\". That is part of the non-targetability requirement. The report shows you the request and the nodes; it does not show the relay, which by design sits outside Apple.`]}),`\n`,(0,e.jsx)(t.p,{children:\"What the report cannot do is prove the first and third promises. Whether a server truly discards your data after answering is a property of the software running on it. The attestation tells you that the software matches a published release; the published release is what independent researchers inspect, using the Virtual Research Environment Apple provides for Macs with Apple silicon. That division of labour \\u2014 you check what was sent, researchers check what the servers run \\u2014 is the honest way to think about the report.\"}),`\n`,(0,e.jsx)(t.h2,{id:\"three-places-ai-activity-is-recorded\",children:\"Three Places AI Activity Is Recorded\"}),`\n`,(0,e.jsxs)(t.p,{children:[\"Before turning anything on, it helps to know that the report is one of three records, and each covers different ground. \",(0,e.jsx)(t.a,{href:\"https://eclecticlight.co/2026/09/22/read-an-apple-intelligence-report/\",children:\"Howard Oakley's walkthrough of 22 September\"}),\" lays them out:\"]}),`\n`,(0,e.jsxs)(t.table,{children:[(0,e.jsx)(t.thead,{children:(0,e.jsxs)(t.tr,{children:[(0,e.jsx)(t.th,{children:\"Record\"}),(0,e.jsx)(t.th,{children:\"What it covers\"}),(0,e.jsx)(t.th,{children:\"Where to find it\"})]})}),(0,e.jsxs)(t.tbody,{children:[(0,e.jsxs)(t.tr,{children:[(0,e.jsx)(t.td,{children:\"Unified log\"}),(0,e.jsx)(t.td,{children:\"On-device interactions (which appear to be recorded only here)\"}),(0,e.jsxs)(t.td,{children:[\"Console app or the \",(0,e.jsx)(t.code,{children:\"log\"}),\" command; not intended for everyday reading\"]})]}),(0,e.jsxs)(t.tr,{children:[(0,e.jsx)(t.td,{children:\"Siri app\"}),(0,e.jsx)(t.td,{children:\"A detailed transcript of your Siri conversations\"}),(0,e.jsx)(t.td,{children:\"The new Siri app in macOS 27\"})]}),(0,e.jsxs)(t.tr,{children:[(0,e.jsx)(t.td,{children:\"Apple Intelligence Report (AIR)\"}),(0,e.jsx)(t.td,{children:\"Requests handled by Private Cloud Compute, with prompts, responses and attestation data\"}),(0,e.jsx)(t.td,{children:\"System Settings > Privacy & Security > Apple Intelligence Report\"})]})]})]}),`\n`,(0,e.jsx)(t.p,{children:`So if your question is \"what did I say to Siri?\", open the Siri app. If it is \"what text left my Mac for Apple's servers?\", the report is the answer. And if it is \"what did the on-device models do?\", the honest answer is that no friendly record exists.`}),`\n`,(0,e.jsx)(t.h2,{id:\"how-to-turn-the-report-on-so-it-records-something\",children:\"How to Turn the Report On So It Records Something\"}),`\n`,(0,e.jsx)(t.p,{children:`The most common mistake is exporting the report and getting an empty file. That happens because the report only covers the period you choose, starting from when you choose it. Apple's own help page for macOS 27 says: \"The report may be empty if there haven't been any Private Cloud Compute requests since you changed the duration.\"`}),`\n`,(0,e.jsx)(t.p,{children:\"Follow this order:\"}),`\n`,(0,e.jsxs)(t.ol,{children:[`\n`,(0,e.jsxs)(t.li,{children:[\"Open \",(0,e.jsx)(t.strong,{children:\"System Settings\"}),\" and click \",(0,e.jsx)(t.strong,{children:\"Privacy & Security\"}),\" in the sidebar.\"]}),`\n`,(0,e.jsxs)(t.li,{children:[\"Scroll to the bottom and click \",(0,e.jsx)(t.strong,{children:\"Apple Intelligence Report\"}),\".\"]}),`\n`,(0,e.jsxs)(t.li,{children:[\"Choose a report duration: \",(0,e.jsx)(t.strong,{children:\"Last 15 Minutes\"}),\" (the default) or \",(0,e.jsx)(t.strong,{children:\"Last 7 Days\"}),\". Choosing \",(0,e.jsx)(t.strong,{children:\"Off\"}),\" turns the report off.\"]}),`\n`,(0,e.jsx)(t.li,{children:\"Now use Apple Intelligence as you normally would \\u2014 rewrite a paragraph with Writing Tools, ask Siri AI something complex, summarise a long email.\"}),`\n`,(0,e.jsxs)(t.li,{children:[\"Return to the same pane and click \",(0,e.jsx)(t.strong,{children:\"Export Activity\"}),\".\"]}),`\n`,(0,e.jsxs)(t.li,{children:[\"Choose where to save it and click \",(0,e.jsx)(t.strong,{children:\"Export\"}),\". The file is named \",(0,e.jsx)(t.code,{children:\"Apple_Intelligence_Report.json\"}),\".\"]}),`\n`]}),`\n`,(0,e.jsx)(t.p,{children:\"Which duration to pick depends on what you want to learn:\"}),`\n`,(0,e.jsxs)(t.ul,{children:[`\n`,(0,e.jsxs)(t.li,{children:[(0,e.jsx)(t.strong,{children:\"Last 15 Minutes\"}),\" is best for a focused test. Turn it on, perform one specific action, export immediately, and you get a small file that is easy to read and contains only what you just did.\"]}),`\n`,(0,e.jsxs)(t.li,{children:[(0,e.jsx)(t.strong,{children:\"Last 7 Days\"}),\" is best for an audit of your normal usage. Set it, work normally for a week, then export. Expect a much larger file, dominated by attestation data.\"]}),`\n`]}),`\n`,(0,e.jsx)(t.p,{children:\"Apple's help page says to open the file with a text reader. That works, but the file is not designed for reading by eye, which is why the next section matters.\"}),`\n`,(0,e.jsx)(t.h2,{id:\"handle-the-exported-file-as-sensitive-data\",children:\"Handle the Exported File as Sensitive Data\"}),`\n`,(0,e.jsxs)(t.p,{children:[`Oakley's reading of a report is explicit: the report contains personal data such as \"messages and text you enter in intelligent writing tools\". Each request entry includes the full `,(0,e.jsx)(t.strong,{children:\"prompt\"}),\" and the model's \",(0,e.jsx)(t.strong,{children:\"response\"}),\". If you rewrote a private email with Writing Tools, that email's text is in the file.\"]}),`\n`,(0,e.jsx)(t.p,{children:\"That changes how you should treat it:\"}),`\n`,(0,e.jsxs)(t.ul,{children:[`\n`,(0,e.jsxs)(t.li,{children:[(0,e.jsx)(t.strong,{children:\"Save it somewhere private.\"}),\" Your Desktop may be synced to iCloud Drive if Desktop & Documents sync is on. Consider a local folder that is not synced.\"]}),`\n`,(0,e.jsxs)(t.li,{children:[(0,e.jsx)(t.strong,{children:\"Do not attach it to a support request or upload it to an online JSON viewer.\"}),\" If you want to share the structure, remove prompts and responses first (the command is below).\"]}),`\n`,(0,e.jsxs)(t.li,{children:[(0,e.jsx)(t.strong,{children:\"Delete it when you are done.\"}),\" Move it to the Trash and empty the Trash. The report can be exported again at any time within its duration.\"]}),`\n`,(0,e.jsxs)(t.li,{children:[(0,e.jsx)(t.strong,{children:\"Remember the duration setting is persistent.\"}),\" If you set it to 7 days for an audit, decide afterwards whether to leave it or set it back.\"]}),`\n`]}),`\n`,(0,e.jsx)(t.p,{children:\"The report setting controls what your Mac records for you to inspect. Turning it off does not stop requests from going to PCC; it only stops the Mac from keeping a list of them.\"}),`\n`,(0,e.jsx)(t.h2,{id:\"what-is-inside-the-json\",children:\"What Is Inside the JSON\"}),`\n`,(0,e.jsxs)(t.p,{children:[\"The report has two top-level sections. Oakley's analysis and the documentation of an open-source viewer on \",(0,e.jsx)(t.a,{href:\"https://github.com/l-velazquez/Apple-Inteligence-Report-Deserialization\",children:\"GitHub\"}),\" agree on the broad structure:\"]}),`\n`,(0,e.jsxs)(t.p,{children:[(0,e.jsx)(t.strong,{children:(0,e.jsx)(t.code,{children:\"modelRequests\"})}),\" \\u2014 one entry per request to a model. Each entry has fields including:\"]}),`\n`,(0,e.jsxs)(t.table,{children:[(0,e.jsx)(t.thead,{children:(0,e.jsxs)(t.tr,{children:[(0,e.jsx)(t.th,{children:\"Field\"}),(0,e.jsx)(t.th,{children:\"What it holds\"})]})}),(0,e.jsxs)(t.tbody,{children:[(0,e.jsxs)(t.tr,{children:[(0,e.jsx)(t.td,{children:(0,e.jsx)(t.code,{children:\"timestamp\"})}),(0,e.jsx)(t.td,{children:\"When the request was made, as seconds since 1 January 1970 (with a fractional part)\"})]}),(0,e.jsxs)(t.tr,{children:[(0,e.jsx)(t.td,{children:(0,e.jsx)(t.code,{children:\"identifier\"})}),(0,e.jsx)(t.td,{children:\"A unique ID for the request (a UUID)\"})]}),(0,e.jsxs)(t.tr,{children:[(0,e.jsx)(t.td,{children:(0,e.jsx)(t.code,{children:\"prompt\"})}),(0,e.jsx)(t.td,{children:\"The full text sent to the model\"})]}),(0,e.jsxs)(t.tr,{children:[(0,e.jsx)(t.td,{children:(0,e.jsx)(t.code,{children:\"response\"})}),(0,e.jsx)(t.td,{children:\"The model's reply\"})]}),(0,e.jsxs)(t.tr,{children:[(0,e.jsx)(t.td,{children:(0,e.jsx)(t.code,{children:\"model\"})}),(0,e.jsxs)(t.td,{children:[\"The model identifier, such as one beginning \",(0,e.jsx)(t.code,{children:\"com.apple.fm.language.instruct_server_v2\"})]})]}),(0,e.jsxs)(t.tr,{children:[(0,e.jsx)(t.td,{children:(0,e.jsx)(t.code,{children:\"modelVersion\"})}),(0,e.jsx)(t.td,{children:\"The model version\"})]}),(0,e.jsxs)(t.tr,{children:[(0,e.jsx)(t.td,{children:(0,e.jsx)(t.code,{children:\"useCase\"})}),(0,e.jsx)(t.td,{children:\"What the request was for\"})]}),(0,e.jsxs)(t.tr,{children:[(0,e.jsx)(t.td,{children:(0,e.jsx)(t.code,{children:\"clientIdentifier\"})}),(0,e.jsxs)(t.td,{children:[\"The component that made the request \\u2014 for Writing Tools, Oakley's 2024 analysis saw \",(0,e.jsx)(t.code,{children:\"com.apple.WritingTools.xpc.WritingToolsViewService\"})]})]}),(0,e.jsxs)(t.tr,{children:[(0,e.jsx)(t.td,{children:(0,e.jsx)(t.code,{children:\"executionEnvironment\"})}),(0,e.jsxs)(t.td,{children:[\"Where it ran: \",(0,e.jsx)(t.code,{children:\"PrivateCloudCompute\"}),\" for server requests; Oakley also noted \",(0,e.jsx)(t.code,{children:\"OnDevice\"}),\" as a possible value\"]})]})]})]}),`\n`,(0,e.jsxs)(t.p,{children:[(0,e.jsx)(t.strong,{children:(0,e.jsx)(t.code,{children:\"privateCloudComputeRequests\"})}),' \\u2014 metadata for requests handled by PCC. Oakley describes this as \"the bulk\" of most reports. Its main content is ',(0,e.jsx)(t.strong,{children:\"attestation bundles\"}),\", encoded in Base64. Each bundle describes a PCC server node your Mac was willing to release the request's encryption key to. The GitHub viewer's documentation also lists fields such as \",(0,e.jsx)(t.code,{children:\"requestId\"}),\", \",(0,e.jsx)(t.code,{children:\"nodeState\"}),\", node counts, \",(0,e.jsx)(t.code,{children:\"attestationBundle\"}),\", \",(0,e.jsx)(t.code,{children:\"node\"}),\", \",(0,e.jsx)(t.code,{children:\"proxiedBy\"}),\" and \",(0,e.jsx)(t.code,{children:\"assetHash\"}),\", and it treats most of them as opaque technical values.\"]}),`\n`,(0,e.jsx)(t.p,{children:\"We have not been able to export a macOS 27 report ourselves \\u2014 our test Mac is still on macOS Tahoe 26.5.2 \\u2014 so the field lists above come from those two sources rather than our own file. Field names can change between releases. The first command in the next section shows you what your own report actually contains; trust that over any table, including this one.\"}),`\n`,(0,e.jsx)(t.h2,{id:\"reading-the-report-with-jq\",children:\"Reading the Report with jq\"}),`\n`,(0,e.jsxs)(t.p,{children:[\"macOS includes \",(0,e.jsx)(t.code,{children:\"jq\"}),\", a command-line JSON processor. On our Tahoe test Mac, \",(0,e.jsx)(t.code,{children:\"/usr/bin/jq --version\"}),\" reports \",(0,e.jsx)(t.code,{children:\"jq-1.7.1-apple\"}),\". If you have also installed jq with Homebrew, either will work with the commands below.\"]}),`\n`,(0,e.jsxs)(t.p,{children:[\"Open Terminal, \",(0,e.jsx)(t.code,{children:\"cd\"}),\" to the folder where you saved the report, and start with its shape.\"]}),`\n`,(0,e.jsx)(t.h3,{id:\"1-see-what-the-report-contains\",children:\"1. See what the report contains\"}),`\n`,(0,e.jsx)(e.Fragment,{children:(0,e.jsx)(t.pre,{className:\"shiki shiki-themes github-light github-dark\",style:{\"--shiki-light\":\"#24292e\",\"--shiki-dark\":\"#e1e4e8\",\"--shiki-light-bg\":\"#fff\",\"--shiki-dark-bg\":\"#24292e\"},tabIndex:\"0\",icon:'<svg viewBox=\"0 0 24 24\"><path d=\"m 4,4 a 1,1 0 0 0 -0.7070312,0.2929687 1,1 0 0 0 0,1.4140625 L 8.5859375,11 3.2929688,16.292969 a 1,1 0 0 0 0,1.414062 1,1 0 0 0 1.4140624,0 l 5.9999998,-6 a 1.0001,1.0001 0 0 0 0,-1.414062 L 4.7070312,4.2929687 A 1,1 0 0 0 4,4 Z m 8,14 a 1,1 0 0 0 -1,1 1,1 0 0 0 1,1 h 8 a 1,1 0 0 0 1,-1 1,1 0 0 0 -1,-1 z\" fill=\"currentColor\" /></svg>',children:(0,e.jsxs)(t.code,{children:[(0,e.jsxs)(t.span,{className:\"line\",children:[(0,e.jsx)(t.span,{style:{\"--shiki-light\":\"#6F42C1\",\"--shiki-dark\":\"#B392F0\"},children:\"jq\"}),(0,e.jsx)(t.span,{style:{\"--shiki-light\":\"#032F62\",\"--shiki-dark\":\"#9ECBFF\"},children:\" 'keys'\"}),(0,e.jsx)(t.span,{style:{\"--shiki-light\":\"#032F62\",\"--shiki-dark\":\"#9ECBFF\"},children:\" Apple_Intelligence_Report.json\"})]}),`\n`,(0,e.jsxs)(t.span,{className:\"line\",children:[(0,e.jsx)(t.span,{style:{\"--shiki-light\":\"#6F42C1\",\"--shiki-dark\":\"#B392F0\"},children:\"jq\"}),(0,e.jsx)(t.span,{style:{\"--shiki-light\":\"#032F62\",\"--shiki-dark\":\"#9ECBFF\"},children:\" '.modelRequests[0] | keys'\"}),(0,e.jsx)(t.span,{style:{\"--shiki-light\":\"#032F62\",\"--shiki-dark\":\"#9ECBFF\"},children:\" Apple_Intelligence_Report.json\"})]})]})})}),`\n`,(0,e.jsxs)(t.p,{children:[\"The first command lists the top-level sections; you should see \",(0,e.jsx)(t.code,{children:\"modelRequests\"}),\" and \",(0,e.jsx)(t.code,{children:\"privateCloudComputeRequests\"}),\". The second lists the fields of the first model request. If either command fails with an error about \",(0,e.jsx)(t.code,{children:\"null\"}),\", the section is empty \\u2014 go back and check the duration setting.\"]}),`\n`,(0,e.jsx)(t.h3,{id:\"2-count-the-requests\",children:\"2. Count the requests\"}),`\n`,(0,e.jsx)(e.Fragment,{children:(0,e.jsx)(t.pre,{className:\"shiki shiki-themes github-light github-dark\",style:{\"--shiki-light\":\"#24292e\",\"--shiki-dark\":\"#e1e4e8\",\"--shiki-light-bg\":\"#fff\",\"--shiki-dark-bg\":\"#24292e\"},tabIndex:\"0\",icon:'<svg viewBox=\"0 0 24 24\"><path d=\"m 4,4 a 1,1 0 0 0 -0.7070312,0.2929687 1,1 0 0 0 0,1.4140625 L 8.5859375,11 3.2929688,16.292969 a 1,1 0 0 0 0,1.414062 1,1 0 0 0 1.4140624,0 l 5.9999998,-6 a 1.0001,1.0001 0 0 0 0,-1.414062 L 4.7070312,4.2929687 A 1,1 0 0 0 4,4 Z m 8,14 a 1,1 0 0 0 -1,1 1,1 0 0 0 1,1 h 8 a 1,1 0 0 0 1,-1 1,1 0 0 0 -1,-1 z\" fill=\"currentColor\" /></svg>',children:(0,e.jsx)(t.code,{children:(0,e.jsxs)(t.span,{className:\"line\",children:[(0,e.jsx)(t.span,{style:{\"--shiki-light\":\"#6F42C1\",\"--shiki-dark\":\"#B392F0\"},children:\"jq\"}),(0,e.jsx)(t.span,{style:{\"--shiki-light\":\"#032F62\",\"--shiki-dark\":\"#9ECBFF\"},children:\" '{modelRequests: (.modelRequests | length), pccRequests: (.privateCloudComputeRequests | length)}'\"}),(0,e.jsx)(t.span,{style:{\"--shiki-light\":\"#032F62\",\"--shiki-dark\":\"#9ECBFF\"},children:\" Apple_Intelligence_Report.json\"})]})})})}),`\n`,(0,e.jsx)(t.p,{children:\"For a 15-minute test with a couple of Writing Tools actions, both numbers should be small. The open-source viewer's documentation shows an example report with 23 model requests and 18 PCC requests.\"}),`\n`,(0,e.jsx)(t.h3,{id:\"3-list-every-request-as-a-timeline\",children:\"3. List every request as a timeline\"}),`\n`,(0,e.jsx)(e.Fragment,{children:(0,e.jsx)(t.pre,{className:\"shiki shiki-themes github-light github-dark\",style:{\"--shiki-light\":\"#24292e\",\"--shiki-dark\":\"#e1e4e8\",\"--shiki-light-bg\":\"#fff\",\"--shiki-dark-bg\":\"#24292e\"},tabIndex:\"0\",icon:'<svg viewBox=\"0 0 24 24\"><path d=\"m 4,4 a 1,1 0 0 0 -0.7070312,0.2929687 1,1 0 0 0 0,1.4140625 L 8.5859375,11 3.2929688,16.292969 a 1,1 0 0 0 0,1.414062 1,1 0 0 0 1.4140624,0 l 5.9999998,-6 a 1.0001,1.0001 0 0 0 0,-1.414062 L 4.7070312,4.2929687 A 1,1 0 0 0 4,4 Z m 8,14 a 1,1 0 0 0 -1,1 1,1 0 0 0 1,1 h 8 a 1,1 0 0 0 1,-1 1,1 0 0 0 -1,-1 z\" fill=\"currentColor\" /></svg>',children:(0,e.jsx)(t.code,{children:(0,e.jsxs)(t.span,{className:\"line\",children:[(0,e.jsx)(t.span,{style:{\"--shiki-light\":\"#6F42C1\",\"--shiki-dark\":\"#B392F0\"},children:\"jq\"}),(0,e.jsx)(t.span,{style:{\"--shiki-light\":\"#005CC5\",\"--shiki-dark\":\"#79B8FF\"},children:\" -r\"}),(0,e.jsx)(t.span,{style:{\"--shiki-light\":\"#032F62\",\"--shiki-dark\":\"#9ECBFF\"},children:\" '.modelRequests[] | [(.timestamp | floor | todate), .executionEnvironment, .clientIdentifier, .model] | @tsv'\"}),(0,e.jsx)(t.span,{style:{\"--shiki-light\":\"#032F62\",\"--shiki-dark\":\"#9ECBFF\"},children:\" Apple_Intelligence_Report.json\"})]})})})}),`\n`,(0,e.jsxs)(t.p,{children:[\"This prints one line per request: the time (in UTC), where it ran, which component asked, and which model answered. It is the fastest way to see the overall pattern. If you prefer local time, replace \",(0,e.jsx)(t.code,{children:\"todate\"}),\" with \",(0,e.jsx)(t.code,{children:'strflocaltime(\"%Y-%m-%d %H:%M\")'}),\".\"]}),`\n`,(0,e.jsx)(t.h3,{id:\"4-how-much-ran-on-the-device-versus-in-the-cloud\",children:\"4. How much ran on the device versus in the cloud\"}),`\n`,(0,e.jsx)(e.Fragment,{children:(0,e.jsx)(t.pre,{className:\"shiki shiki-themes github-light github-dark\",style:{\"--shiki-light\":\"#24292e\",\"--shiki-dark\":\"#e1e4e8\",\"--shiki-light-bg\":\"#fff\",\"--shiki-dark-bg\":\"#24292e\"},tabIndex:\"0\",icon:'<svg viewBox=\"0 0 24 24\"><path d=\"m 4,4 a 1,1 0 0 0 -0.7070312,0.2929687 1,1 0 0 0 0,1.4140625 L 8.5859375,11 3.2929688,16.292969 a 1,1 0 0 0 0,1.414062 1,1 0 0 0 1.4140624,0 l 5.9999998,-6 a 1.0001,1.0001 0 0 0 0,-1.414062 L 4.7070312,4.2929687 A 1,1 0 0 0 4,4 Z m 8,14 a 1,1 0 0 0 -1,1 1,1 0 0 0 1,1 h 8 a 1,1 0 0 0 1,-1 1,1 0 0 0 -1,-1 z\" fill=\"currentColor\" /></svg>',children:(0,e.jsx)(t.code,{children:(0,e.jsxs)(t.span,{className:\"line\",children:[(0,e.jsx)(t.span,{style:{\"--shiki-light\":\"#6F42C1\",\"--shiki-dark\":\"#B392F0\"},children:\"jq\"}),(0,e.jsx)(t.span,{style:{\"--shiki-light\":\"#032F62\",\"--shiki-dark\":\"#9ECBFF\"},children:\" '[.modelRequests[].executionEnvironment] | group_by(.) | map({(.[0]): length}) | add'\"}),(0,e.jsx)(t.span,{style:{\"--shiki-light\":\"#032F62\",\"--shiki-dark\":\"#9ECBFF\"},children:\" Apple_Intelligence_Report.json\"})]})})})}),`\n`,(0,e.jsxs)(t.p,{children:[\"The result is a small object such as \",(0,e.jsx)(t.code,{children:'{\"PrivateCloudCompute\": 12}'}),\". Given Oakley's finding that on-device interactions appear to be recorded only in the unified log, do not be surprised if everything in the report is \",(0,e.jsx)(t.code,{children:\"PrivateCloudCompute\"}),\".\"]}),`\n`,(0,e.jsx)(t.h3,{id:\"5-which-apps-and-components-sent-requests\",children:\"5. Which apps and components sent requests\"}),`\n`,(0,e.jsx)(e.Fragment,{children:(0,e.jsx)(t.pre,{className:\"shiki shiki-themes github-light github-dark\",style:{\"--shiki-light\":\"#24292e\",\"--shiki-dark\":\"#e1e4e8\",\"--shiki-light-bg\":\"#fff\",\"--shiki-dark-bg\":\"#24292e\"},tabIndex:\"0\",icon:'<svg viewBox=\"0 0 24 24\"><path d=\"m 4,4 a 1,1 0 0 0 -0.7070312,0.2929687 1,1 0 0 0 0,1.4140625 L 8.5859375,11 3.2929688,16.292969 a 1,1 0 0 0 0,1.414062 1,1 0 0 0 1.4140624,0 l 5.9999998,-6 a 1.0001,1.0001 0 0 0 0,-1.414062 L 4.7070312,4.2929687 A 1,1 0 0 0 4,4 Z m 8,14 a 1,1 0 0 0 -1,1 1,1 0 0 0 1,1 h 8 a 1,1 0 0 0 1,-1 1,1 0 0 0 -1,-1 z\" fill=\"currentColor\" /></svg>',children:(0,e.jsx)(t.code,{children:(0,e.jsxs)(t.span,{className:\"line\",children:[(0,e.jsx)(t.span,{style:{\"--shiki-light\":\"#6F42C1\",\"--shiki-dark\":\"#B392F0\"},children:\"jq\"}),(0,e.jsx)(t.span,{style:{\"--shiki-light\":\"#005CC5\",\"--shiki-dark\":\"#79B8FF\"},children:\" -r\"}),(0,e.jsx)(t.span,{style:{\"--shiki-light\":\"#032F62\",\"--shiki-dark\":\"#9ECBFF\"},children:` '[.modelRequests[].clientIdentifier] | group_by(.) | map(\"\\\\(length)\\\\t\\\\(.[0])\") | .[]'`}),(0,e.jsx)(t.span,{style:{\"--shiki-light\":\"#032F62\",\"--shiki-dark\":\"#9ECBFF\"},children:\" Apple_Intelligence_Report.json\"})]})})})}),`\n`,(0,e.jsx)(t.p,{children:'Each line is a count and a client identifier. This answers questions like \"is Mail sending my messages to PCC for summaries?\" or \"how often does Writing Tools use the server?\".'}),`\n`,(0,e.jsx)(t.h3,{id:\"6-read-the-text-that-was-sent\",children:\"6. Read the text that was sent\"}),`\n`,(0,e.jsx)(e.Fragment,{children:(0,e.jsx)(t.pre,{className:\"shiki shiki-themes github-light github-dark\",style:{\"--shiki-light\":\"#24292e\",\"--shiki-dark\":\"#e1e4e8\",\"--shiki-light-bg\":\"#fff\",\"--shiki-dark-bg\":\"#24292e\"},tabIndex:\"0\",icon:'<svg viewBox=\"0 0 24 24\"><path d=\"m 4,4 a 1,1 0 0 0 -0.7070312,0.2929687 1,1 0 0 0 0,1.4140625 L 8.5859375,11 3.2929688,16.292969 a 1,1 0 0 0 0,1.414062 1,1 0 0 0 1.4140624,0 l 5.9999998,-6 a 1.0001,1.0001 0 0 0 0,-1.414062 L 4.7070312,4.2929687 A 1,1 0 0 0 4,4 Z m 8,14 a 1,1 0 0 0 -1,1 1,1 0 0 0 1,1 h 8 a 1,1 0 0 0 1,-1 1,1 0 0 0 -1,-1 z\" fill=\"currentColor\" /></svg>',children:(0,e.jsx)(t.code,{children:(0,e.jsxs)(t.span,{className:\"line\",children:[(0,e.jsx)(t.span,{style:{\"--shiki-light\":\"#6F42C1\",\"--shiki-dark\":\"#B392F0\"},children:\"jq\"}),(0,e.jsx)(t.span,{style:{\"--shiki-light\":\"#005CC5\",\"--shiki-dark\":\"#79B8FF\"},children:\" -r\"}),(0,e.jsx)(t.span,{style:{\"--shiki-light\":\"#032F62\",\"--shiki-dark\":\"#9ECBFF\"},children:` '.modelRequests[] | select(.executionEnvironment == \"PrivateCloudCompute\") | \"\\\\(.timestamp | floor | strflocaltime(\"%Y-%m-%d %H:%M\"))  \\\\(.clientIdentifier)\\\\n  PROMPT: \\\\((.prompt // \"\")[0:300])\\\\n\"'`}),(0,e.jsx)(t.span,{style:{\"--shiki-light\":\"#032F62\",\"--shiki-dark\":\"#9ECBFF\"},children:\" Apple_Intelligence_Report.json\"})]})})})}),`\n`,(0,e.jsx)(t.p,{children:\"This prints the first 300 characters of each prompt sent to PCC, with its time and source. It is the most revealing view of the report \\u2014 and the reason the file needs care.\"}),`\n`,(0,e.jsx)(t.h3,{id:\"7-make-a-shareable-copy-without-your-text\",children:\"7. Make a shareable copy without your text\"}),`\n`,(0,e.jsx)(e.Fragment,{children:(0,e.jsx)(t.pre,{className:\"shiki shiki-themes github-light github-dark\",style:{\"--shiki-light\":\"#24292e\",\"--shiki-dark\":\"#e1e4e8\",\"--shiki-light-bg\":\"#fff\",\"--shiki-dark-bg\":\"#24292e\"},tabIndex:\"0\",icon:'<svg viewBox=\"0 0 24 24\"><path d=\"m 4,4 a 1,1 0 0 0 -0.7070312,0.2929687 1,1 0 0 0 0,1.4140625 L 8.5859375,11 3.2929688,16.292969 a 1,1 0 0 0 0,1.414062 1,1 0 0 0 1.4140624,0 l 5.9999998,-6 a 1.0001,1.0001 0 0 0 0,-1.414062 L 4.7070312,4.2929687 A 1,1 0 0 0 4,4 Z m 8,14 a 1,1 0 0 0 -1,1 1,1 0 0 0 1,1 h 8 a 1,1 0 0 0 1,-1 1,1 0 0 0 -1,-1 z\" fill=\"currentColor\" /></svg>',children:(0,e.jsx)(t.code,{children:(0,e.jsxs)(t.span,{className:\"line\",children:[(0,e.jsx)(t.span,{style:{\"--shiki-light\":\"#6F42C1\",\"--shiki-dark\":\"#B392F0\"},children:\"jq\"}),(0,e.jsx)(t.span,{style:{\"--shiki-light\":\"#032F62\",\"--shiki-dark\":\"#9ECBFF\"},children:\" 'del(.modelRequests[].prompt, .modelRequests[].response)'\"}),(0,e.jsx)(t.span,{style:{\"--shiki-light\":\"#032F62\",\"--shiki-dark\":\"#9ECBFF\"},children:\" Apple_Intelligence_Report.json\"}),(0,e.jsx)(t.span,{style:{\"--shiki-light\":\"#D73A49\",\"--shiki-dark\":\"#F97583\"},children:\" >\"}),(0,e.jsx)(t.span,{style:{\"--shiki-light\":\"#032F62\",\"--shiki-dark\":\"#9ECBFF\"},children:\" AIR-redacted.json\"})]})})})}),`\n`,(0,e.jsx)(t.p,{children:\"If you want to share the structure of a report with a developer or a forum, share this version. It keeps timestamps, models and environments but removes the prompts and responses. Check it before sharing; if a future version of the report puts text in other fields, this command will not remove them.\"}),`\n`,(0,e.jsx)(t.h3,{id:\"reading-one-entry-field-by-field\",children:\"Reading one entry, field by field\"}),`\n`,(0,e.jsx)(t.p,{children:\"Once you have the timeline, pick one entry and read it in full. It helps to know what each part is telling you:\"}),`\n`,(0,e.jsxs)(t.ul,{children:[`\n`,(0,e.jsxs)(t.li,{children:[(0,e.jsxs)(t.strong,{children:[\"The \",(0,e.jsx)(t.code,{children:\"model\"}),\" name tells you the size of the job.\"]}),\" Identifiers containing \",(0,e.jsx)(t.code,{children:\"server\"}),\" \\u2014 Oakley's examples include \",(0,e.jsx)(t.code,{children:\"com.apple.fm.language.instruct_server_v2\"}),\" and, in 2024, \",(0,e.jsx)(t.code,{children:\"com.apple.fm.language.instruct_server_v1.text_summarizer\"}),\" \\u2014 refer to server-side models. If a request you expected to run locally shows a server model, that feature used PCC for that request.\"]}),`\n`,(0,e.jsxs)(t.li,{children:[(0,e.jsxs)(t.strong,{children:[\"The \",(0,e.jsx)(t.code,{children:\"clientIdentifier\"}),\" tells you who asked.\"]}),\" It names the system component, not always the app you were using. Writing Tools requests come from its own service, \",(0,e.jsx)(t.code,{children:\"com.apple.WritingTools.xpc.WritingToolsViewService\"}),\", whether you invoked it in Mail, Notes or a third-party editor. So if you want to know which app you were in, use the timestamp and your own memory rather than this field.\"]}),`\n`,(0,e.jsxs)(t.li,{children:[(0,e.jsxs)(t.strong,{children:[\"The \",(0,e.jsx)(t.code,{children:\"useCase\"}),\" tells you what kind of request it was.\"]}),\" Values differ between features; compare several entries from the same feature to learn what yours look like.\"]}),`\n`,(0,e.jsxs)(t.li,{children:[(0,e.jsxs)(t.strong,{children:[\"The \",(0,e.jsx)(t.code,{children:\"prompt\"}),\" tells you the scope.\"]}),\" This is where surprises tend to appear. A summary request may include more of an email thread than was visible on screen, and a rewrite includes the whole selection, not just the sentence you were thinking of. Reading a few prompts is the best way to calibrate what each feature sends.\"]}),`\n`,(0,e.jsxs)(t.li,{children:[(0,e.jsxs)(t.strong,{children:[\"The \",(0,e.jsx)(t.code,{children:\"response\"}),\" is what came back.\"]}),\" It should match what you saw on screen. If a response is present but you never saw the result \\u2014 for example because you cancelled \\u2014 the request still reached the server.\"]}),`\n`]}),`\n`,(0,e.jsx)(t.h3,{id:\"the-same-report-on-iphone-and-ipad\",children:\"The same report on iPhone and iPad\"}),`\n`,(0,e.jsx)(t.p,{children:\"Apple offers the same report on iPhone and iPad, in Settings > Privacy & Security > Apple Intelligence Report, and Apple's help pages for those devices describe it the same way. The records are per device: a report exported on your Mac shows only requests made from that Mac. If you want to audit your Apple Intelligence use as a whole, export a report on each device over the same period.\"}),`\n`,(0,e.jsx)(t.p,{children:\"We tested every command in this section against a small sample file built from the documented field names, using the jq that ships with macOS. On a real report, expect the attestation sections to make the file large and slow to open in a text editor; the jq commands handle that without trouble.\"}),`\n`,(0,e.jsx)(t.p,{children:(0,e.jsx)(t.img,{alt:\"A laptop, a tablet and a smartphone side by side on a table at night, each screen glowing with the same soft violet light\",src:\"/images/blog/apple-intelligence-report-macos-27-what-siri-ai-sends-private-cloud-compute-2026/content-1.webp\",width:\"1200\",height:\"800\"})}),`\n`,(0,e.jsx)(t.h2,{id:\"four-common-misreadings\",children:\"Four Common Misreadings\"}),`\n`,(0,e.jsx)(t.p,{children:\"People who open their first report tend to draw the same wrong conclusions. Avoid these:\"}),`\n`,(0,e.jsxs)(t.ol,{children:[`\n`,(0,e.jsxs)(t.li,{children:[(0,e.jsx)(t.strong,{children:'\"The two sections should have the same number of entries.\"'}),\" They need not. \",(0,e.jsx)(t.code,{children:\"modelRequests\"}),\" lists requests to models; \",(0,e.jsx)(t.code,{children:\"privateCloudComputeRequests\"}),\" holds PCC metadata, largely attestations. The example report in the GitHub viewer's documentation had 23 of the former and 18 of the latter. Match entries by time rather than expecting a one-to-one list.\"]}),`\n`,(0,e.jsxs)(t.li,{children:[(0,e.jsx)(t.strong,{children:'\"Lots of attestations means my data went to lots of servers.\"'}),\" As explained above, your Mac releases a request's key to every node whose attestation matches a published release. Several attestations show several eligible nodes, not several copies of your request being processed.\"]}),`\n`,(0,e.jsxs)(t.li,{children:[(0,e.jsx)(t.strong,{children:'\"The model name tells me which product I used.\"'}),\" Model identifiers describe Apple's internal models and adapters, and the same model can serve several features. Use \",(0,e.jsx)(t.code,{children:\"clientIdentifier\"}),\" and the timestamp to work out what you were doing.\"]}),`\n`,(0,e.jsxs)(t.li,{children:[(0,e.jsx)(t.strong,{children:'\"Nothing in the report means nothing left my Mac.\"'}),\" An empty report after you changed the duration means no PCC requests since then. It says nothing about the period before, and it does not cover third-party services such as ChatGPT.\"]}),`\n`]}),`\n`,(0,e.jsx)(t.h2,{id:\"what-the-report-does-not-tell-you\",children:\"What the Report Does Not Tell You\"}),`\n`,(0,e.jsx)(t.p,{children:\"The report is valuable precisely because it is specific, but its limits are just as specific:\"}),`\n`,(0,e.jsxs)(t.ul,{children:[`\n`,(0,e.jsxs)(t.li,{children:[(0,e.jsx)(t.strong,{children:\"On-device activity is largely missing.\"}),\" By Oakley's reading, on-device interactions appear only in the unified log. The report is not a complete record of what Apple Intelligence did on your Mac.\"]}),`\n`,(0,e.jsxs)(t.li,{children:[(0,e.jsx)(t.strong,{children:\"Siri conversations are recorded elsewhere.\"}),\" The Siri app keeps a transcript of your conversations; that, not the report, is the place to review what you said to Siri.\"]}),`\n`,(0,e.jsxs)(t.li,{children:[(0,e.jsx)(t.strong,{children:\"It shows what was sent, not what happened on the server.\"}),\" The report proves that your Mac sent a request to servers whose attestations it accepted. It cannot show what those servers did with the data; that is what Apple's published security design and independent research are for.\"]}),`\n`,(0,e.jsxs)(t.li,{children:[(0,e.jsx)(t.strong,{children:\"Coverage depends on the feature being wired up correctly.\"}),\" The macOS 27 release notes' fix for Home Intelligence entries missing from the report (176056930) shows that features can, at least in pre-release builds, fail to appear.\"]}),`\n`,(0,e.jsxs)(t.li,{children:[(0,e.jsx)(t.strong,{children:\"Third-party AI is outside it.\"}),\" The report covers Apple Intelligence and Private Cloud Compute. When you choose to send something to ChatGPT through the integration, that request is governed by OpenAI's terms. We looked at the privacy side of ChatGPT on the Mac in our article on the \",(0,e.jsx)(t.a,{href:\"/blog/chatgpt-apple-messages-plugin-mac-full-disk-access-privacy-2026\",children:\"ChatGPT Messages plugin and Full Disk Access\"}),\".\"]}),`\n`]}),`\n`,(0,e.jsx)(t.h2,{id:\"the-deep-end-attestations-and-pccvre\",children:\"The Deep End: Attestations and pccvre\"}),`\n`,(0,e.jsxs)(t.p,{children:[\"The attestation bundles are the part of the report that makes Private Cloud Compute more than a promise. Apple's design, described on its \",(0,e.jsx)(t.a,{href:\"https://security.apple.com/blog/private-cloud-compute/\",children:\"security research blog\"}),\", is that your device only sends a request to PCC nodes that can prove, cryptographically, that they are running software Apple has published for inspection. The attestation bundles in your report are those proofs.\"]}),`\n`,(0,e.jsxs)(t.p,{children:[\"Apple provides a tool to parse them. Oakley's \",(0,e.jsx)(t.a,{href:\"https://eclecticlight.co/2026/09/24/deep-reading-an-apple-intelligence-report-with-pccvre/\",children:\"follow-up of 24 September\"}),' quotes Apple: \"you can parse, canonicalize, and verify attestation bundles from the Apple Intelligence Report using the ',(0,e.jsx)(t.code,{children:\"pccvre\"}),' attestation subcommands.\" The tool lives at:']}),`\n`,(0,e.jsx)(e.Fragment,{children:(0,e.jsx)(t.pre,{className:\"shiki shiki-themes github-light github-dark\",style:{\"--shiki-light\":\"#24292e\",\"--shiki-dark\":\"#e1e4e8\",\"--shiki-light-bg\":\"#fff\",\"--shiki-dark-bg\":\"#24292e\"},tabIndex:\"0\",icon:'<svg viewBox=\"0 0 24 24\"><path d=\"m 4,4 a 1,1 0 0 0 -0.7070312,0.2929687 1,1 0 0 0 0,1.4140625 L 8.5859375,11 3.2929688,16.292969 a 1,1 0 0 0 0,1.414062 1,1 0 0 0 1.4140624,0 l 5.9999998,-6 a 1.0001,1.0001 0 0 0 0,-1.414062 L 4.7070312,4.2929687 A 1,1 0 0 0 4,4 Z m 8,14 a 1,1 0 0 0 -1,1 1,1 0 0 0 1,1 h 8 a 1,1 0 0 0 1,-1 1,1 0 0 0 -1,-1 z\" fill=\"currentColor\" /></svg>',children:(0,e.jsx)(t.code,{children:(0,e.jsxs)(t.span,{className:\"line\",children:[(0,e.jsx)(t.span,{style:{\"--shiki-light\":\"#6F42C1\",\"--shiki-dark\":\"#B392F0\"},children:\"ls\"}),(0,e.jsx)(t.span,{style:{\"--shiki-light\":\"#005CC5\",\"--shiki-dark\":\"#79B8FF\"},children:\" -l\"}),(0,e.jsx)(t.span,{style:{\"--shiki-light\":\"#032F62\",\"--shiki-dark\":\"#9ECBFF\"},children:\" /System/Library/SecurityResearch/usr/bin/pccvre\"})]})})})}),`\n`,(0,e.jsxs)(t.p,{children:[\"It is already present on our Tahoe 26.5.2 Mac. Running it, however, does not get you far on a normal Mac. On ours, both \",(0,e.jsx)(t.code,{children:\"pccvre --help\"}),\" and \",(0,e.jsx)(t.code,{children:\"pccvre attestation --help\"}),\" stopped immediately with:\"]}),`\n`,(0,e.jsx)(e.Fragment,{children:(0,e.jsx)(t.pre,{className:\"shiki shiki-themes github-light github-dark\",style:{\"--shiki-light\":\"#24292e\",\"--shiki-dark\":\"#e1e4e8\",\"--shiki-light-bg\":\"#fff\",\"--shiki-dark-bg\":\"#24292e\"},tabIndex:\"0\",icon:'<svg viewBox=\"0 0 24 24\"><path d=\"M 6,1 C 4.354992,1 3,2.354992 3,4 v 16 c 0,1.645008 1.354992,3 3,3 h 12 c 1.645008,0 3,-1.354992 3,-3 V 8 7 A 1.0001,1.0001 0 0 0 20.707031,6.2929687 l -5,-5 A 1.0001,1.0001 0 0 0 15,1 h -1 z m 0,2 h 7 v 3 c 0,1.645008 1.354992,3 3,3 h 3 v 11 c 0,0.564129 -0.435871,1 -1,1 H 6 C 5.4358712,21 5,20.564129 5,20 V 4 C 5,3.4358712 5.4358712,3 6,3 Z M 15,3.4140625 18.585937,7 H 16 C 15.435871,7 15,6.5641288 15,6 Z\" fill=\"currentColor\" /></svg>',children:(0,e.jsx)(t.code,{children:(0,e.jsx)(t.span,{className:\"line\",children:(0,e.jsx)(t.span,{children:\"allow-research-guests is currently disabled; Please go to recovery and run 'csrutil allow-research-guests enable'\"})})})})}),`\n`,(0,e.jsxs)(t.p,{children:[\"That is the gate. To use \",(0,e.jsx)(t.code,{children:\"pccvre\"}),\", you have to start up in Recovery and change a System Integrity Protection option:\"]}),`\n`,(0,e.jsx)(e.Fragment,{children:(0,e.jsx)(t.pre,{className:\"shiki shiki-themes github-light github-dark\",style:{\"--shiki-light\":\"#24292e\",\"--shiki-dark\":\"#e1e4e8\",\"--shiki-light-bg\":\"#fff\",\"--shiki-dark-bg\":\"#24292e\"},tabIndex:\"0\",icon:'<svg viewBox=\"0 0 24 24\"><path d=\"m 4,4 a 1,1 0 0 0 -0.7070312,0.2929687 1,1 0 0 0 0,1.4140625 L 8.5859375,11 3.2929688,16.292969 a 1,1 0 0 0 0,1.414062 1,1 0 0 0 1.4140624,0 l 5.9999998,-6 a 1.0001,1.0001 0 0 0 0,-1.414062 L 4.7070312,4.2929687 A 1,1 0 0 0 4,4 Z m 8,14 a 1,1 0 0 0 -1,1 1,1 0 0 0 1,1 h 8 a 1,1 0 0 0 1,-1 1,1 0 0 0 -1,-1 z\" fill=\"currentColor\" /></svg>',children:(0,e.jsx)(t.code,{children:(0,e.jsxs)(t.span,{className:\"line\",children:[(0,e.jsx)(t.span,{style:{\"--shiki-light\":\"#6F42C1\",\"--shiki-dark\":\"#B392F0\"},children:\"csrutil\"}),(0,e.jsx)(t.span,{style:{\"--shiki-light\":\"#032F62\",\"--shiki-dark\":\"#9ECBFF\"},children:\" allow-research-guests\"}),(0,e.jsx)(t.span,{style:{\"--shiki-light\":\"#032F62\",\"--shiki-dark\":\"#9ECBFF\"},children:\" enable\"})]})})})}),`\n`,(0,e.jsx)(t.p,{children:\"You can check its state from a normal session with:\"}),`\n`,(0,e.jsx)(e.Fragment,{children:(0,e.jsx)(t.pre,{className:\"shiki shiki-themes github-light github-dark\",style:{\"--shiki-light\":\"#24292e\",\"--shiki-dark\":\"#e1e4e8\",\"--shiki-light-bg\":\"#fff\",\"--shiki-dark-bg\":\"#24292e\"},tabIndex:\"0\",icon:'<svg viewBox=\"0 0 24 24\"><path d=\"m 4,4 a 1,1 0 0 0 -0.7070312,0.2929687 1,1 0 0 0 0,1.4140625 L 8.5859375,11 3.2929688,16.292969 a 1,1 0 0 0 0,1.414062 1,1 0 0 0 1.4140624,0 l 5.9999998,-6 a 1.0001,1.0001 0 0 0 0,-1.414062 L 4.7070312,4.2929687 A 1,1 0 0 0 4,4 Z m 8,14 a 1,1 0 0 0 -1,1 1,1 0 0 0 1,1 h 8 a 1,1 0 0 0 1,-1 1,1 0 0 0 -1,-1 z\" fill=\"currentColor\" /></svg>',children:(0,e.jsx)(t.code,{children:(0,e.jsxs)(t.span,{className:\"line\",children:[(0,e.jsx)(t.span,{style:{\"--shiki-light\":\"#6F42C1\",\"--shiki-dark\":\"#B392F0\"},children:\"csrutil\"}),(0,e.jsx)(t.span,{style:{\"--shiki-light\":\"#032F62\",\"--shiki-dark\":\"#9ECBFF\"},children:\" allow-research-guests\"}),(0,e.jsx)(t.span,{style:{\"--shiki-light\":\"#032F62\",\"--shiki-dark\":\"#9ECBFF\"},children:\" status\"})]})})})}),`\n`,(0,e.jsxs)(t.p,{children:[\"On our Mac that reports \",(0,e.jsx)(t.code,{children:\"Allow Research Guests status: disabled\"}),\", alongside \",(0,e.jsx)(t.code,{children:\"System Integrity Protection status: enabled\"}),\" from \",(0,e.jsx)(t.code,{children:\"csrutil status\"}),'. Oakley notes that Apple warns enabling research access \"might expose additional attack surface\". He did his work in a macOS 27 virtual machine with its security settings changed, not on his main Mac, then agreed to the licence prompts by running ',(0,e.jsx)(t.code,{children:\"sudo pccvre --help\"}),\", and parsed a bundle with a command of this form:\"]}),`\n`,(0,e.jsx)(e.Fragment,{children:(0,e.jsx)(t.pre,{className:\"shiki shiki-themes github-light github-dark\",style:{\"--shiki-light\":\"#24292e\",\"--shiki-dark\":\"#e1e4e8\",\"--shiki-light-bg\":\"#fff\",\"--shiki-dark-bg\":\"#24292e\"},tabIndex:\"0\",icon:'<svg viewBox=\"0 0 24 24\"><path d=\"m 4,4 a 1,1 0 0 0 -0.7070312,0.2929687 1,1 0 0 0 0,1.4140625 L 8.5859375,11 3.2929688,16.292969 a 1,1 0 0 0 0,1.414062 1,1 0 0 0 1.4140624,0 l 5.9999998,-6 a 1.0001,1.0001 0 0 0 0,-1.414062 L 4.7070312,4.2929687 A 1,1 0 0 0 4,4 Z m 8,14 a 1,1 0 0 0 -1,1 1,1 0 0 0 1,1 h 8 a 1,1 0 0 0 1,-1 1,1 0 0 0 -1,-1 z\" fill=\"currentColor\" /></svg>',children:(0,e.jsxs)(t.code,{children:[(0,e.jsxs)(t.span,{className:\"line\",children:[(0,e.jsx)(t.span,{style:{\"--shiki-light\":\"#6F42C1\",\"--shiki-dark\":\"#B392F0\"},children:\"pccvre\"}),(0,e.jsx)(t.span,{style:{\"--shiki-light\":\"#032F62\",\"--shiki-dark\":\"#9ECBFF\"},children:\" attestation\"}),(0,e.jsx)(t.span,{style:{\"--shiki-light\":\"#032F62\",\"--shiki-dark\":\"#9ECBFF\"},children:\" parse\"}),(0,e.jsx)(t.span,{style:{\"--shiki-light\":\"#24292E\",\"--shiki-dark\":\"#E1E4E8\"},children:\" [--debug] [--input-format \"}),(0,e.jsx)(t.span,{style:{\"--shiki-light\":\"#D73A49\",\"--shiki-dark\":\"#F97583\"},children:\"<\"}),(0,e.jsx)(t.span,{style:{\"--shiki-light\":\"#24292E\",\"--shiki-dark\":\"#E1E4E8\"},children:\"input-format\"}),(0,e.jsx)(t.span,{style:{\"--shiki-light\":\"#D73A49\",\"--shiki-dark\":\"#F97583\"},children:\">\"}),(0,e.jsx)(t.span,{style:{\"--shiki-light\":\"#24292E\",\"--shiki-dark\":\"#E1E4E8\"},children:\"] \"}),(0,e.jsx)(t.span,{style:{\"--shiki-light\":\"#005CC5\",\"--shiki-dark\":\"#79B8FF\"},children:\"\\\\\"})]}),`\n`,(0,e.jsxs)(t.span,{className:\"line\",children:[(0,e.jsx)(t.span,{style:{\"--shiki-light\":\"#24292E\",\"--shiki-dark\":\"#E1E4E8\"},children:\"  [--request-index \"}),(0,e.jsx)(t.span,{style:{\"--shiki-light\":\"#D73A49\",\"--shiki-dark\":\"#F97583\"},children:\"<\"}),(0,e.jsx)(t.span,{style:{\"--shiki-light\":\"#24292E\",\"--shiki-dark\":\"#E1E4E8\"},children:\"request-index\"}),(0,e.jsx)(t.span,{style:{\"--shiki-light\":\"#D73A49\",\"--shiki-dark\":\"#F97583\"},children:\">\"}),(0,e.jsx)(t.span,{style:{\"--shiki-light\":\"#24292E\",\"--shiki-dark\":\"#E1E4E8\"},children:\"] [--attestation-index \"}),(0,e.jsx)(t.span,{style:{\"--shiki-light\":\"#D73A49\",\"--shiki-dark\":\"#F97583\"},children:\"<\"}),(0,e.jsx)(t.span,{style:{\"--shiki-light\":\"#24292E\",\"--shiki-dark\":\"#E1E4E8\"},children:\"attestation-index\"}),(0,e.jsx)(t.span,{style:{\"--shiki-light\":\"#D73A49\",\"--shiki-dark\":\"#F97583\"},children:\">\"}),(0,e.jsx)(t.span,{style:{\"--shiki-light\":\"#24292E\",\"--shiki-dark\":\"#E1E4E8\"},children:\"] \"}),(0,e.jsx)(t.span,{style:{\"--shiki-light\":\"#005CC5\",\"--shiki-dark\":\"#79B8FF\"},children:\"\\\\\"})]}),`\n`,(0,e.jsxs)(t.span,{className:\"line\",children:[(0,e.jsx)(t.span,{style:{\"--shiki-light\":\"#24292E\",\"--shiki-dark\":\"#E1E4E8\"},children:\"  [--bundle-version \"}),(0,e.jsx)(t.span,{style:{\"--shiki-light\":\"#D73A49\",\"--shiki-dark\":\"#F97583\"},children:\"<\"}),(0,e.jsx)(t.span,{style:{\"--shiki-light\":\"#24292E\",\"--shiki-dark\":\"#E1E4E8\"},children:\"bundle-version\"}),(0,e.jsx)(t.span,{style:{\"--shiki-light\":\"#D73A49\",\"--shiki-dark\":\"#F97583\"},children:\">\"}),(0,e.jsx)(t.span,{style:{\"--shiki-light\":\"#24292E\",\"--shiki-dark\":\"#E1E4E8\"},children:\"] [--output-format \"}),(0,e.jsx)(t.span,{style:{\"--shiki-light\":\"#D73A49\",\"--shiki-dark\":\"#F97583\"},children:\"<\"}),(0,e.jsx)(t.span,{style:{\"--shiki-light\":\"#24292E\",\"--shiki-dark\":\"#E1E4E8\"},children:\"output-format\"}),(0,e.jsx)(t.span,{style:{\"--shiki-light\":\"#D73A49\",\"--shiki-dark\":\"#F97583\"},children:\">\"}),(0,e.jsx)(t.span,{style:{\"--shiki-light\":\"#24292E\",\"--shiki-dark\":\"#E1E4E8\"},children:\"] \"}),(0,e.jsx)(t.span,{style:{\"--shiki-light\":\"#005CC5\",\"--shiki-dark\":\"#79B8FF\"},children:\"\\\\\"})]}),`\n`,(0,e.jsxs)(t.span,{className:\"line\",children:[(0,e.jsx)(t.span,{style:{\"--shiki-light\":\"#24292E\",\"--shiki-dark\":\"#E1E4E8\"},children:\"  [--output \"}),(0,e.jsx)(t.span,{style:{\"--shiki-light\":\"#D73A49\",\"--shiki-dark\":\"#F97583\"},children:\"<\"}),(0,e.jsx)(t.span,{style:{\"--shiki-light\":\"#24292E\",\"--shiki-dark\":\"#E1E4E8\"},children:\"output\"}),(0,e.jsx)(t.span,{style:{\"--shiki-light\":\"#D73A49\",\"--shiki-dark\":\"#F97583\"},children:\">\"}),(0,e.jsx)(t.span,{style:{\"--shiki-light\":\"#24292E\",\"--shiki-dark\":\"#E1E4E8\"},children:\"] \"}),(0,e.jsx)(t.span,{style:{\"--shiki-light\":\"#D73A49\",\"--shiki-dark\":\"#F97583\"},children:\"<\"}),(0,e.jsx)(t.span,{style:{\"--shiki-light\":\"#6F42C1\",\"--shiki-dark\":\"#B392F0\"},children:\"file\"}),(0,e.jsx)(t.span,{style:{\"--shiki-light\":\"#24292E\",\"--shiki-dark\":\"#E1E4E8\"},children:\">\"})]})]})})}),`\n`,(0,e.jsx)(t.p,{children:'His conclusion is worth quoting in full context: the JSON output for a single attestation bundle came to 53 KB, containing a few recognisable words about the security of the transaction but \"overwhelmingly more Base64 encoded data, not intended for human consumption but for security researchers\". As they come, he writes, AIRs \"are of precious little use to us\".'}),`\n`,(0,e.jsxs)(t.p,{children:[\"Our recommendation follows from that. \",(0,e.jsx)(t.strong,{children:\"Do not enable research guests on your everyday Mac to read your own report.\"}),\" The prompt and response text \\u2014 the part you can actually interpret \\u2014 is readable with jq without changing any security setting. Leave attestation verification to researchers working in virtual machines, which is exactly what Apple's Virtual Research Environment is designed for.\"]}),`\n`,(0,e.jsx)(t.h2,{id:\"a-practical-privacy-audit-in-twenty-minutes\",children:\"A Practical Privacy Audit in Twenty Minutes\"}),`\n`,(0,e.jsx)(t.p,{children:\"If you want to know what your normal Apple Intelligence use sends to Apple, here is a focused routine:\"}),`\n`,(0,e.jsxs)(t.ol,{children:[`\n`,(0,e.jsxs)(t.li,{children:[(0,e.jsx)(t.strong,{children:\"Set the report to Last 15 Minutes.\"}),\" This gives you a clean window.\"]}),`\n`,(0,e.jsxs)(t.li,{children:[(0,e.jsx)(t.strong,{children:\"Do one thing at a time.\"}),\" Rewrite a paragraph with Writing Tools. Ask Siri AI a question that needs your personal context. Summarise a long email thread in Mail. Try a Home Intelligence search if you use it.\"]}),`\n`,(0,e.jsxs)(t.li,{children:[(0,e.jsx)(t.strong,{children:\"Export after each action\"}),\" and run command 3 from the jq section. You will see, action by action, whether each one reached PCC and which component sent it.\"]}),`\n`,(0,e.jsxs)(t.li,{children:[(0,e.jsx)(t.strong,{children:\"Read the prompts\"}),\" with command 6. Check whether more text went to the server than you expected \\u2014 for example, a whole email thread for a summary, rather than just the visible message.\"]}),`\n`,(0,e.jsxs)(t.li,{children:[(0,e.jsx)(t.strong,{children:\"Decide what to change.\"}),\" If a feature sends more than you are comfortable with, stop using that feature for sensitive material. You cannot switch Apple Intelligence off wholesale on macOS 27, but you can choose not to invoke Writing Tools on a confidential document.\"]}),`\n`,(0,e.jsxs)(t.li,{children:[(0,e.jsx)(t.strong,{children:\"Delete the exported files\"}),\" and set the duration to whatever you want to keep.\"]}),`\n`]}),`\n`,(0,e.jsx)(t.p,{children:'This is also a good way to settle arguments at work about whether a particular feature is \"on-device\" or not. The report shows what it shows; nobody has to guess.'}),`\n`,(0,e.jsx)(t.h2,{id:\"for-administrators\",children:\"For Administrators\"}),`\n`,(0,e.jsx)(t.p,{children:'Organisations that manage Macs have a slightly different question: not \"what did I send?\" but \"what could our users send?\". The report is a per-user, per-Mac tool, so it is not a fleet audit mechanism, but it is a useful validation step when you write policy:'}),`\n`,(0,e.jsxs)(t.ul,{children:[`\n`,(0,e.jsxs)(t.li,{children:[(0,e.jsx)(t.strong,{children:\"Use it to test policy decisions.\"}),\" Before you allow or restrict a feature with your MDM, run the twenty-minute audit above on a test Mac with representative data and see which components reach PCC.\"]}),`\n`,(0,e.jsxs)(t.li,{children:[(0,e.jsx)(t.strong,{children:\"Remember the storage cost is now fixed.\"}),\" Because Apple Intelligence can no longer be disabled entirely on macOS 27, every Mac downloads the models. Plan for it as described in our \",(0,e.jsx)(t.a,{href:\"/blog/macos-27-disk-space-30gb-apple-intelligence-storage-after-upgrade-2026\",children:\"macOS 27 storage guide\"}),\".\"]}),`\n`,(0,e.jsxs)(t.li,{children:[(0,e.jsx)(t.strong,{children:\"Treat exported reports as user data.\"}),\" If you ask a user to export a report for an investigation, it contains their text. Handle it under the same rules as email content.\"]}),`\n`]}),`\n`,(0,e.jsxs)(t.p,{children:[\"For the broader set of macOS 27 changes that affect managed fleets, see our \",(0,e.jsx)(t.a,{href:\"/blog/macos-27-mdm-software-update-commands-removed-tls-requirements-admin-checklist-2026\",children:\"macOS 27 admin checklist\"}),\".\"]}),`\n`,(0,e.jsx)(t.p,{children:(0,e.jsx)(t.img,{alt:\"An IT administrator in an office checking a laptop beside a charging cart full of managed laptops\",src:\"/images/blog/apple-intelligence-report-macos-27-what-siri-ai-sends-private-cloud-compute-2026/content-2.webp\",width:\"1200\",height:\"675\"})}),`\n`,(0,e.jsx)(t.h2,{id:\"troubleshooting-common-issues\",children:\"Troubleshooting Common Issues\"}),`\n`,(0,e.jsx)(t.h3,{id:\"the-exported-report-is-empty\",children:\"The exported report is empty\"}),`\n`,(0,e.jsxs)(t.p,{children:[(0,e.jsx)(t.strong,{children:\"Problem\"}),\": \",(0,e.jsx)(t.code,{children:\"Apple_Intelligence_Report.json\"}),\" contains no requests, or jq reports \",(0,e.jsx)(t.code,{children:\"null\"}),\" sections.\"]}),`\n`,(0,e.jsxs)(t.p,{children:[(0,e.jsx)(t.strong,{children:\"Solution\"}),\": The report only covers PCC requests made since you last changed the duration. Set the duration, then use a feature that actually reaches PCC (a Writing Tools rewrite of a substantial paragraph is a reliable test), and export again. If you only used on-device features, an empty report is the expected result.\"]}),`\n`,(0,e.jsx)(t.h3,{id:\"i-cannot-find-apple-intelligence-report-in-privacy--security\",children:\"I cannot find Apple Intelligence Report in Privacy & Security\"}),`\n`,(0,e.jsxs)(t.p,{children:[(0,e.jsx)(t.strong,{children:\"Problem\"}),\": The item is missing from the list.\"]}),`\n`,(0,e.jsxs)(t.p,{children:[(0,e.jsx)(t.strong,{children:\"Solution\"}),\": It sits at the bottom of the Privacy & Security pane, below the permissions list; scroll down. It only appears on Macs that support Apple Intelligence. If Apple Intelligence itself is not available on your Mac, see \",(0,e.jsx)(t.a,{href:\"/blog/apple-intelligence-not-available-grayed-out-mac-how-to-enable-fix-2026\",children:\"Apple Intelligence not available or greyed out\"}),\".\"]}),`\n`,(0,e.jsx)(t.h3,{id:\"jq-says-cannot-iterate-over-null\",children:'jq says \"Cannot iterate over null\"'}),`\n`,(0,e.jsxs)(t.p,{children:[(0,e.jsx)(t.strong,{children:\"Problem\"}),\": A command fails partway through.\"]}),`\n`,(0,e.jsxs)(t.p,{children:[(0,e.jsx)(t.strong,{children:\"Solution\"}),\": The section the command expects does not exist in your report, or a field is missing in some entries. Run \",(0,e.jsx)(t.code,{children:\"jq 'keys'\"}),\" and \",(0,e.jsx)(t.code,{children:\"jq '.modelRequests[0] | keys'\"}),\" to see the real structure, then adjust the field names. Adding \",(0,e.jsx)(t.code,{children:\"// empty\"}),\" after a field \\u2014 for example \",(0,e.jsx)(t.code,{children:\".prompt // empty\"}),\" \\u2014 skips missing values instead of failing.\"]}),`\n`,(0,e.jsx)(t.h3,{id:\"the-timestamps-look-wrong\",children:\"The timestamps look wrong\"}),`\n`,(0,e.jsxs)(t.p,{children:[(0,e.jsx)(t.strong,{children:\"Problem\"}),\": Times are several hours off.\"]}),`\n`,(0,e.jsxs)(t.p,{children:[(0,e.jsx)(t.strong,{children:\"Solution\"}),\": \",(0,e.jsx)(t.code,{children:\"todate\"}),\" prints UTC. Use \",(0,e.jsx)(t.code,{children:'strflocaltime(\"%Y-%m-%d %H:%M\")'}),\" instead for your local time zone. The raw values are seconds since 1 January 1970, with a fractional part, so they must be rounded with \",(0,e.jsx)(t.code,{children:\"floor\"}),\" first.\"]}),`\n`,(0,e.jsx)(t.h3,{id:\"the-file-is-too-large-to-open\",children:\"The file is too large to open\"}),`\n`,(0,e.jsxs)(t.p,{children:[(0,e.jsx)(t.strong,{children:\"Problem\"}),\": A seven-day report is many megabytes and freezes a text editor.\"]}),`\n`,(0,e.jsxs)(t.p,{children:[(0,e.jsx)(t.strong,{children:\"Solution\"}),\": That is the attestation data. Do not open it in an editor; use the jq commands, which read only the parts you ask for. Command 7 produces a much smaller copy without prompts and responses.\"]}),`\n`,(0,e.jsx)(t.h3,{id:\"pccvre-says-research-guests-are-disabled\",children:\"pccvre says research guests are disabled\"}),`\n`,(0,e.jsxs)(t.p,{children:[(0,e.jsx)(t.strong,{children:\"Problem\"}),\": Any \",(0,e.jsx)(t.code,{children:\"pccvre\"}),' command stops with the \"allow-research-guests is currently disabled\" message.']}),`\n`,(0,e.jsxs)(t.p,{children:[(0,e.jsx)(t.strong,{children:\"Solution\"}),\": That is by design. Enabling it requires Recovery and weakens a security boundary. If you are a security researcher, do it in a virtual machine as Oakley did. Otherwise, skip the attestation layer; you do not need it to read your prompts and responses.\"]}),`\n`,(0,e.jsx)(t.h2,{id:\"faq\",children:\"FAQ\"}),`\n`,(0,e.jsx)(t.h3,{id:\"what-is-the-apple-intelligence-report-on-mac\",children:\"What is the Apple Intelligence Report on Mac?\"}),`\n`,(0,e.jsxs)(t.p,{children:[\"It is a record of Apple Intelligence requests handled by Private Cloud Compute, available in System Settings > Privacy & Security. You choose a duration of 15 minutes or 7 days, then export it as \",(0,e.jsx)(t.code,{children:\"Apple_Intelligence_Report.json\"}),\".\"]}),`\n`,(0,e.jsx)(t.h3,{id:\"why-is-my-apple-intelligence-report-empty\",children:\"Why is my Apple Intelligence Report empty?\"}),`\n`,(0,e.jsx)(t.p,{children:\"It only includes Private Cloud Compute requests made since you changed the duration. Set the duration first, use a feature that reaches the cloud, such as Writing Tools on a longer paragraph, then export.\"}),`\n`,(0,e.jsx)(t.h3,{id:\"does-the-report-include-my-actual-text\",children:\"Does the report include my actual text?\"}),`\n`,(0,e.jsx)(t.p,{children:\"Yes. Each request entry includes the prompt sent to the model and the response. Keep the exported file private, do not upload it to online viewers, and delete it when finished. Use the jq redaction command to share its structure safely.\"}),`\n`,(0,e.jsx)(t.h3,{id:\"does-turning-off-the-report-stop-data-going-to-apples-servers\",children:\"Does turning off the report stop data going to Apple's servers?\"}),`\n`,(0,e.jsx)(t.p,{children:\"No. The setting only controls whether your Mac keeps a record of Private Cloud Compute requests for you to inspect. Requests still go to Private Cloud Compute when a feature needs it.\"}),`\n`,(0,e.jsx)(t.h3,{id:\"can-i-see-what-the-on-device-models-did\",children:\"Can I see what the on-device models did?\"}),`\n`,(0,e.jsx)(t.p,{children:\"Not in a friendly way. According to Howard Oakley's analysis, on-device interactions appear to be recorded only in the unified log. Siri conversations are kept as transcripts in the Siri app.\"}),`\n`,(0,e.jsx)(t.h3,{id:\"what-are-the-attestation-bundles-in-the-report\",children:\"What are the attestation bundles in the report?\"}),`\n`,(0,e.jsx)(t.p,{children:\"They are cryptographic evidence describing the Private Cloud Compute servers your Mac agreed to send each request to. Apple's pccvre tool can parse them, but it requires enabling research guests in Recovery, and the output is intended for security researchers.\"}),`\n`,(0,e.jsx)(t.h3,{id:\"is-it-safe-to-use-a-third-party-viewer-for-the-report\",children:\"Is it safe to use a third-party viewer for the report?\"}),`\n`,(0,e.jsx)(t.p,{children:\"Only one that runs entirely locally and whose code you can check. The open-source viewer on GitHub says it makes no network requests. Even so, the safest approach is jq on your own Mac, which needs no extra software.\"}),`\n`,(0,e.jsx)(t.h2,{id:\"conclusion\",children:\"Conclusion\"}),`\n`,(0,e.jsx)(t.p,{children:\"The Apple Intelligence Report is the closest thing macOS 27 offers to a receipt for your AI use. It will not tell you everything \\u2014 on-device activity and Siri conversations live elsewhere, and the attestation layer is written for researchers \\u2014 but it does show, in plain text, what left your Mac for Private Cloud Compute and what came back. Turn it on before you test, export it promptly, read it with jq rather than a text editor, and treat the file as private data. Now that Apple Intelligence can no longer be switched off, knowing how to check it is the next best thing.\"}),`\n`,(0,e.jsx)(t.p,{children:(0,e.jsxs)(t.em,{children:[\"Related reading: \",(0,e.jsx)(t.a,{href:\"/blog/how-to-use-siri-ai-mac-macos-27-enable-spotlight-conversations-siri-app-2026\",children:\"How to use Siri AI on Mac\"}),\" \\xB7 \",(0,e.jsx)(t.a,{href:\"/blog/macos-27-siri-ai-waitlist-how-to-join-queue-mac-golden-gate-2026\",children:\"Siri AI waitlist on macOS 27\"}),\" \\xB7 \",(0,e.jsx)(t.a,{href:\"/blog/macos-27-disk-space-30gb-apple-intelligence-storage-after-upgrade-2026\",children:\"macOS 27 took 30 GB of disk space\"})]})})]})}function c(i={}){let{wrapper:t}=i.components||{};return t?(0,e.jsx)(t,{...i,children:(0,e.jsx)(d,{...i})}):d(i)}return v(b);})();\n;return Component;","toc":[{"title":"Key Takeaways","url":"#key-takeaways","depth":2},{"title":"Why This Report Matters More on macOS 27","url":"#why-this-report-matters-more-on-macos-27","depth":2},{"title":"What Private Cloud Compute Promises, and What the Report Can Check","url":"#what-private-cloud-compute-promises-and-what-the-report-can-check","depth":2},{"title":"Three Places AI Activity Is Recorded","url":"#three-places-ai-activity-is-recorded","depth":2},{"title":"How to Turn the Report On So It Records Something","url":"#how-to-turn-the-report-on-so-it-records-something","depth":2},{"title":"Handle the Exported File as Sensitive Data","url":"#handle-the-exported-file-as-sensitive-data","depth":2},{"title":"What Is Inside the JSON","url":"#what-is-inside-the-json","depth":2},{"title":"Reading the Report with jq","url":"#reading-the-report-with-jq","depth":2},{"title":"1. See what the report contains","url":"#1-see-what-the-report-contains","depth":3},{"title":"2. Count the requests","url":"#2-count-the-requests","depth":3},{"title":"3. List every request as a timeline","url":"#3-list-every-request-as-a-timeline","depth":3},{"title":"4. How much ran on the device versus in the cloud","url":"#4-how-much-ran-on-the-device-versus-in-the-cloud","depth":3},{"title":"5. Which apps and components sent requests","url":"#5-which-apps-and-components-sent-requests","depth":3},{"title":"6. Read the text that was sent","url":"#6-read-the-text-that-was-sent","depth":3},{"title":"7. Make a shareable copy without your text","url":"#7-make-a-shareable-copy-without-your-text","depth":3},{"title":"Reading one entry, field by field","url":"#reading-one-entry-field-by-field","depth":3},{"title":"The same report on iPhone and iPad","url":"#the-same-report-on-iphone-and-ipad","depth":3},{"title":"Four Common Misreadings","url":"#four-common-misreadings","depth":2},{"title":"What the Report Does Not Tell You","url":"#what-the-report-does-not-tell-you","depth":2},{"title":"The Deep End: Attestations and pccvre","url":"#the-deep-end-attestations-and-pccvre","depth":2},{"title":"A Practical Privacy Audit in Twenty Minutes","url":"#a-practical-privacy-audit-in-twenty-minutes","depth":2},{"title":"For Administrators","url":"#for-administrators","depth":2},{"title":"Troubleshooting Common Issues","url":"#troubleshooting-common-issues","depth":2},{"title":"The exported report is empty","url":"#the-exported-report-is-empty","depth":3},{"title":"I cannot find Apple Intelligence Report in Privacy & Security","url":"#i-cannot-find-apple-intelligence-report-in-privacy--security","depth":3},{"title":"jq says \"Cannot iterate over null\"","url":"#jq-says-cannot-iterate-over-null","depth":3},{"title":"The timestamps look wrong","url":"#the-timestamps-look-wrong","depth":3},{"title":"The file is too large to open","url":"#the-file-is-too-large-to-open","depth":3},{"title":"pccvre says research guests are disabled","url":"#pccvre-says-research-guests-are-disabled","depth":3},{"title":"FAQ","url":"#faq","depth":2},{"title":"What is the Apple Intelligence Report on Mac?","url":"#what-is-the-apple-intelligence-report-on-mac","depth":3},{"title":"Why is my Apple Intelligence Report empty?","url":"#why-is-my-apple-intelligence-report-empty","depth":3},{"title":"Does the report include my actual text?","url":"#does-the-report-include-my-actual-text","depth":3},{"title":"Does turning off the report stop data going to Apple's servers?","url":"#does-turning-off-the-report-stop-data-going-to-apples-servers","depth":3},{"title":"Can I see what the on-device models did?","url":"#can-i-see-what-the-on-device-models-did","depth":3},{"title":"What are the attestation bundles in the report?","url":"#what-are-the-attestation-bundles-in-the-report","depth":3},{"title":"Is it safe to use a third-party viewer for the report?","url":"#is-it-safe-to-use-a-third-party-viewer-for-the-report","depth":3},{"title":"Conclusion","url":"#conclusion","depth":2}],"estimatedTime":26}