Overview

Post

Replies

Boosts

Views

Activity

Company details change stuck
Hello I am writing this post because I have no idea where else to write. I need to create developer account for my new company in US so I tried creating new icloud account which didn't work for me. I the restarted my developer plan on my old company which took week to review but got it working. I then used the Company details change to fill in the new US company details I need to submit my new app through. I have not received any message from Apple for 3+weeks now also tried messaging support again a week ago linking the old support request id but that got me nowhere. I have built a new startup and I got investors eyes on me and this thing has been blocking me for over a month to have distribution to all platforms. I have the iOS app fully built and tested and polished fully native but can't even get it out to testflight as my account is now in that weird limbo state even tho I paid my 100$ I can't even distribute to testers through testflight. Please I got growing user base and most of them own iphones and are waiting for the app. I need this to be elevated somehow please.
0
0
14
2d
Notification Delivery Issues for Location Push Service Extension
We are currently testing the implementation of our Location Push Service Extension (LPSE) in both Ad Hoc and Release environments. We have encountered an issue where LPSE notifications, which were previously working correctly, suddenly fail to be delivered on some devices. After a period of several hours, the notifications resume arriving, but the issue remains intermittent. Notably, during these periods of suspected delivery restriction, regular push notifications (e.g., those using apns-push-type: alert) are delivered and displayed without any problem. [Detailed Situation] Test Environment and Scope We are testing LPSE after obtaining the necessary entitlements, in both Ad Hoc and Release environments. The issue is not observed on all test devices; only certain devices are affected. Observed Behavior Under normal circumstances, LPSE notifications are received and the extension is activated; however, on some devices the notifications suddenly stop arriving. During these periods, even when sending notifications with apns-push-type: location directly via the CloudKit Push Notification Console, no response is observed on the affected devices. The APNs server (api.push.apple.com) always returns a 200 OK response via HTTP/2, and our server-side logs and configurations (DNS resolution performed on every request, using the same JWT token for 59 minutes per session, communication via HTTP/2 with ALPN Protocol: h2) show no issues. Other app functionalities (network communication, UI responsiveness, etc.) work normally. Sending content When sending notifications from our server to APNs (api.push.apple.com), we use the following configuration (over HTTP/2): const payload = { aps: { 'content-available': 1 } }; const headers = { ':method': 'POST', ':path': /3/device/${apnsToken}, 'Authorization': bearer ${jwtToken}, 'apns-topic': 'ot.Here.location-query', 'apns-priority': '10', 'apns-push-type': 'location', 'Content-Type': 'application/json' }; We perform DNS resolution for every request, use the same JWT token for a 59-minute period per session, and communicate via HTTP/2 with ALPN Protocol: h2. Hypothesis on the Cause We suspect that due to an implementation issue, silent push notifications (using content-available: 1) were being sent every few minutes concurrently, which may have triggered an APNs delivery restriction (rate limiting). As a countermeasure, we have completely stopped sending silent pushes and any other background notifications aside from LPSE; however, the issue persists. Additionally, even after resetting affected devices, the delivery problem continues to occur. [Questions for Diagnosis] Given the above situation, is it reasonable to suspect that excessive silent push notifications have triggered an APNs delivery restriction? Does such a silent push restriction affect LPSE notifications (i.e., those sent with apns-push-type: location)? Do APNs delivery restrictions persist even after a device has been reset? Can a high volume of LPSE notifications alone (without silent pushes) also trigger a delivery restriction? → This is our primary concern since it poses a significant implementation challenge. Please let us know if any additional information is required for diagnosis.
4
0
550
2d
macOS Open Directory: Does ODNodeCreateRecord cleanup preserve concurrent records?
We are designing a local, non-login service account provisioning process on macOS using the public Open Directory API. The documentation for ODNodeCreateRecord() states that if setting an initial attribute fails, the record is deleted and an error is returned. We need to ensure that a failed creation attempt cannot delete or modify a pre-existing record, including during concurrent record creation or replacement. Questions: When attribute initialization fails, is the internal cleanup guaranteed to target only the record instance created by that specific API call, rather than another record with the same name? Is this cleanup bound to a unique record identity or UUID, including if another process concurrently creates, removes, or replaces a record with the same name? Does the public API provide an atomic create-only guarantee that prevents changes to an existing record? If these guarantees are not provided, what supported API or provisioning approach should be used to avoid affecting pre-existing local Directory Services records? Our current plan uses the local /Local/Default Directory Services node for a dedicated service account, administrative change serialization, pre-creation collision checks, and post-operation identity verification. We understand that these checks do not themselves prove atomicity or race-free cleanup. We would appreciate clarification of the supported API guarantees, specifically for macOS 15. Thank you.
0
0
20
2d
App stuck in Waiting for Review since 31 October, expedite granted 3 November
Our app Ring-Ring® (Apple ID 6799744191), version 1.0 (build 1968), with its first in-app subscriptions, has been Waiting for Review since 31 October 2026. An expedited review was granted on 3 November, and we contacted App Review (case 30000003800448). The status has not changed since. The app is live on Google Play with paying members. Could someone from App Review take a look? Thank you.
0
0
18
2d
AlarmKit: AlarmPresentation.Alert native buttons (Stop/Open) fail to trigger App Intents perform() on physical devices (Production signed)
When using AlarmKit (AlarmPresentation.Alert), the native system buttons (Stop / Open) successfully trigger the assigned AppIntent (e.g., implementing AppIntent with perform()) when running on the iOS Simulator. However, on physical devices (Real iOS Devices), these native buttons are completely dead. Even with a paid Apple Developer Program account, Production/Release-level code signing, and a clean build, tapping the native buttons on the Lock Screen / Full Screen alert results in zero calls to perform() (no logs, intent handler is never invoked). OS Version: iOS 27.0 Xcode Version: Xcode 27.1 (27A9275) Device: iPhone Air Provisioning: Paid Apple Developer Account (Production / TestFlight build) Is this a known system-level bug in AlarmKit where SpringBoard fails to route intent events to third-party apps on real devices? If so, is there any workaround to capture the action of the native Stop/Open buttons, or are developers expected to rely solely on custom Live Activities (.widgetURL) for navigation? Any guidance would be greatly appreciated!
1
0
26
2d
Developer Program enrollment still pending after payment
Hi everyone, I subscribed to the Apple Developer Program on Tuesday evening, November 4th, 2025. The payment has already been charged to my bank account, but my account still shows the status “Pending” with the message “Subscribe your membership”. It’s now been several days, and I haven’t received any confirmation email or any request for additional information. I already contacted Apple Support by email, but I’d like to know if other developers have experienced the same situation and how long it took before their account was activated. Thanks in advance for your help and feedback! — Martin
72
26
11k
2d
AlarmKit — stop automatically at the end of a custom sound while the app is suspended
We are building a scheduled-audio app. We need a complete custom recording to start at a scheduled time while the device is locked, play exactly once, and stop automatically without user interaction. The app may be suspended at the scheduled time. Environment: iPhone 11, iOS 26.6.1; Xcode 26.6 with iOS 26.5 SDK; deployment target iOS 26.1. The app was signed for development, installed, and launched without an attached debugger. Alarm authorization was granted. No background audio mode or countdown Live Activity is configured. We bundle a 154.017959-second, mono 44.1 kHz 16-bit PCM CAF in the main bundle. The recording was converted to CAF without trimming. Minimal scheduling code, called after successful authorization (using the generic example filename sample-sound.caf): import ActivityKit import AlarmKit import SwiftUI struct PlaybackMetadata: AlarmMetadata {} @MainActor func schedulePlaybackTest() async throws { let attributes = AlarmAttributes( presentation: AlarmPresentation( alert: .init(title: "Audio playback test") ), metadata: PlaybackMetadata(), tintColor: Color.teal ) let configuration = AlarmManager.AlarmConfiguration.alarm( schedule: .fixed(Date().addingTimeInterval(60)), attributes: attributes, sound: .named("sample-sound.caf") ) _ = try await AlarmManager.shared.schedule(id: UUID(), configuration: configuration) }NSAlarmKitUsageDescription is present in the built Info.plist. Reproduction: schedule, lock the phone before the fire date, then leave it locked and listen through the end. The recording starts automatically and plays completely, but then repeats. This is a single fixed alarm, not a repeating schedule. Questions: Is there a supported public configuration for playing a custom AlarmKit sound once and dismissing/stopping the alarm at end of file? If not, is there an OS-managed maximum alert duration, scheduled stop, or guaranteed callback that can meet this requirement when the app is suspended or terminated? Is unattended play-once-and-stop unsupported with the current public APIs, so that this should be filed as an enhancement request? We understand that postAlert describes a subsequent countdown, and that stop(id:) can be called by executing app code. A foreground timer or a user-triggered stop intent would not meet the requirement. We want an intended public API solution appropriate for App Store distribution.
0
0
15
2d
MusicKit: Multichannel Dolby Atmos Limited to Stereo Output - Is This Intended Behavior?
I'm experiencing a significant limitation with MusicKit's Dolby Atmos implementation on macOS and would appreciate clarification on whether this is intended behavior or if there are solutions available. When streaming Dolby Atmos content through MusicKit's ApplicationMusicPlayer, the output is limited to 2-channel stereo, even when: Audio MIDI Setup is configured for 7.1.4 (12-channel) output The same tracks play in full multichannel through the native Apple Music app Dolby Atmos is set to "Automatic" in Apple Music preferences Please let me know if there is anyway to enable this. If not, is this documented anywhere? Thanks!
2
3
411
2d
24hrs? 48hrs? how about 72hrs... No, Let's try 13 days...
Yup, 13 days to finally get to "in review". I have built updates to my app, added them to TestFlight and had them approved and have a couple of local people testing just the updates. Meanwhile... The app version that I submitted for release along with my subscriptions was left waiting, and waiting, and well... waiting. Now I understand the App Reviewers are real people doing real reviews. And I think that's fantastic, but to be left with absolutely NO feedback at all… Nothing to even say “Hay! Your app has progressed in the queue” is quite frustrating to say the least. The morning it changed to "In review"... I was ecstatic!! I thought to myself.. here we go... we are finally going to be able to get the app out to real users!! Well, no, no we won't. About 60 seconds after going into review, it was rejected. Why? because the test email account I provided was stuck in an auto renew cycle in the sandbox testing. No problem... I created a new email account and submitted those details within about 10 minutes. That was 3 days ago and we are still... "Waiting for review" I personally have never been an Apple user. I loved my Windows PC and Samsung S26 Ultra. But I now have an iPhone 16e + iPhone se (I wanted to test with real devices) + Mac Mini + Macbook for development. I must confess... I LOVE the Mac Mini and the Macbook. I am still coming to terms with the iPhones lol, but they are growing on me. The initial developer establishment and testing phases were a 100% win for Apple. Google was such a PITA to even get a developer account running and their testing is OMG crazy confusing. So I naturally assumed I would have my app into the Apple Store well before Android. That was a failure... Android has since had 3 updates while my iOS users are left with a "I am so sorry, I thought it would have been available by now" Please Apple.. Check out the app.. I really would love to see it in peoples hands.
4
1
145
2d
Organization enrollment blocked — “exceeded the maximum number of attempts” after verification code was never delivered
Hello Developer Support, I am enrolling a company in the Apple Developer Program as an Organization. Case ID: 102994457817. Sequence of events: The first attempt was rejected because the work email was not on the company domain. I created a mailbox on the company’s own domain and re-entered all enrollment details. At the email verification step, no verification code was delivered. I checked inbox, spam, and server-side quarantine. No Resend control was shown on the page. After refreshing the page, enrollment was blocked with: “Contact us to continue your enrollment. You’ve exceeded the maximum number of attempts. Please contact us.” I have not created any additional Apple Accounts and have not retried since the lock. My account region is Armenia, where the phone callback option is not offered on the contact page, so email and this forum are my only channels. I have had no reply to my email case. Request: please reset the verification attempt counter on this Apple Account so the organization enrollment can continue, and confirm whether a code was dispatched on your side. Thank you.
1
0
55
2d
Enrollment Blocked: "Exceeded maximum attempts" after Mail Verification Bug for company enrollment
Hello, I am attempting to enroll in the Apple Developer Program as an Organization. During the email verification step, I encountered a technical error: no verification code was sent to my email (I confirmed the email address was correct and checked all folders). There was no "Resend" button available on the screen. After refreshing the page to try and fix the UI glitch, I was immediately blocked with the following error: "Contact us to continue your enrollment. You’ve exceeded the maximum number of attempts. Please contact us." I have already opened a support ticket (Case ID: 102824565622), but since this is a time-sensitive corporate enrollment, I am looking for advice. Any help from the community or an Apple representative would be greatly appreciated. Thanks in advance, Yoni
2
1
622
2d
App Review Delayed Since October 16 – Support Request Unanswered for 10 Days
Hello Apple App Review Team, I submitted my macOS app for review on October 16, 2026, and it has now been nearly three weeks without approval. Here is the timeline: October 16: Initial app submission. October 26: Contacted Apple Developer Support regarding the review delay (Case ID: 103009347788). October 29: Received a Guideline 5 rejection concerning OpenAI references and distribution in China mainland. October 29: Followed Apple's instructions, excluded China mainland from distribution, and resubmitted the app. November 5: The app remains in "Waiting for Review", and my support request has received no response beyond the automated acknowledgment. I have also addressed the previous Guideline 2.1 information request by providing a screen recording and detailed documentation. I understand that review times can vary, but I am concerned about the prolonged process and the lack of response to my support request. Could someone from the App Review team please investigate whether my submission is progressing normally and whether any additional action is required? I am not requesting approval without review. I would simply appreciate a status update and confirmation that there are no outstanding issues preventing the review from proceeding. Thank you for your assistance.
0
0
11
2d
NEURLFilterManager: inconsistent per-domain blocking (some sites never block, one flaps) - confirmed PIR database is correct
Hello, Some context: DropBet is an app that helps people with gambling addiction stay off gambling sites and apps, using NEURLFilterManager/PIR to block a large list of known gambling domains system-wide. For a lot of our users this filter is a core part of their recovery > reliability really matters here. Since fixing an unrelated HPKE encryption bug (separate thread, now closed), the filter works end-to-end for the first time, but blocking is inconsistent per domain in a way I can't explain from my side: winamax.fr and the Winamax app: blocked reliably, every single time > clean "connection failed" style block, confirmed to load fine with protection off. unibet.fr and betclic.fr: never blocked, consistently > confirmed even after a full device reboot (rules out stale caching), and confirmed identical across both Safari and Chrome on iOS tested side-by-side (so not browser-specific). olybet.fr: flaps > the page reloads every 2-3 seconds with protection on, also identical across both browsers. Confirmed this only happens with the filter enabled (tested toggling protection off/on against the same page). unibet.fr auto-redirects into the native Unibet app via a Universal Link before the page loads, unlike betclic.fr which stays in the browser > different code path, possibly relevant. To rule out any issue on our end, I wrote a standalone test that queries our deployed PIR database shards directly - bypassing OHTTP, the app, and the device entirely - for all of the domains above plus their www. variants. All of them correctly return the blocked value, no exceptions, including unibet.fr and betclic.fr which never block on the actual device. So the database, the PIR protocol implementation, and the server are confirmed correct for every domain I've tested. This points at something in how NEURLFilterManager/ciphermld applies a correctly-received PIR verdict on-device - possibly related to query batching, an evaluation-key edge case, or Universal Link handling bypassing the filter before a web request is even made. Is there anything you can share about how the client applies results once decrypted, or known issues around any of this?
4
0
96
2d
Repeated login Keychain prompts and securityd crash after app upgrade on macOS 26.6.x
Overview We are investigating repeated "login" Keychain prompts affecting our macOS application on macOS 26.6.x. The issue appears after upgrading an existing installation. A clean uninstall/reinstall of the same version resolves it. Changing the affected Keychain item's Access Control from "Confirm before allowing access" to explicitly allowing our application/process also stops the prompts. On one affected machine, Apple Support observed a securityd crash followed by: SecKeyCreateSignature failed CSSMERR_DL_INVALID_DB_HANDLE Our code uses some legacy SecKeychain* APIs, so we are currently investigating whether this is related. Questions Were there any changes in macOS 26.6.x around securityd, Keychain ACL handling, or legacy SecKeychain* APIs that could explain this? Could an existing Keychain ACL become stale after an application upgrade, even when both versions are signed with the same Developer ID?
18
0
3.7k
2d
Supported provenance handling when copying a verified helper
What supported public contract should software use for com.apple.provenance when copying an exact expected helper binary into a new, private owner-controlled working directory for separately authorized later use? We want to leave originals unchanged, preserve security protections, and avoid removing, decoding or reconstructing opaque Apple attribute values. Program-byte identity, permissions/custody and code validation are separate from this metadata question; an attribute name or copy success is not treated as a trust decision. Public APIs reviewed: fcopyfile with independent DATA/XATTR selection, and xattr_flags_from_name with xattr_intent_with_flags for COPY intent. A bounded public-constant probe returned zero property flags and the default preserve result for both com.apple.provenance and an invented unknown name. We therefore do not interpret that default as proof of recognition or an exemption. Could you clarify: Which supported metadata postconditions apply to this specific copy use? Is source/destination raw-value equality an appropriate invariant for this opaque attribute, or may the OS legitimately create different destination metadata while preserving the intended security behavior? Which public properties or APIs can establish the intended destination state without parsing/removing private values or weakening OS protections? The xattr manual's named-wrapper return sentence appears inconsistent with its flags-based description/example. What is the supported return-polarity contract, and is using the flags-based function the intended interpretation? This asks for supported semantics, not a bypass or private value format. No paths, binaries, source, attribute values, keys, account data or logs are attached. Public references: https://developer.apple.com/library/archive/documentation/System/Conceptual/ManPages_iPhoneOS/man3/fcopyfile.3.html https://github.com/apple-oss-distributions/copyfile/blob/main/xattr_name_with_flags.3 https://github.com/apple-oss-distributions/copyfile/blob/main/xattr_flags.h
3
0
104
2d
Notarization worked, then every submission rejected with 7000 "Team is not yet configured for notarization"
Following Quinn's advice in https://developer.apple.com/forums/thread/118465?answerId=379585022#379585022, I have opened a Developer Programs Support case and am posting here with the case number. Case number: 103005753388 Team ID: 6PG3USG4A9 Notarization worked for this team: three submissions were accepted on 21 and 22 October 2026. Since the evening of 22 October every submission is rejected with status code 7000, "Team is not yet configured for notarization". The rejection logs have "issues": null and no ticket. Nothing changed on our side between the accepted and the rejected submissions: same app, same Developer ID Application certificate, same Apple ID with an app-specific password, same xcrun notarytool. The team is otherwise active; our iOS app is live on the App Store. Accepted: 49e6f112-fd07-40ca-b908-6b8126d2d137 (2026-10-21) fcaae8e3-84e3-493b-a747-297f0ab60c79 (2026-10-21) ab12ace8-743b-47fa-955b-e030feabce11 (2026-10-22) Rejected with 7000: 1731bdca-bf9c-417c-a65a-4f38c619897d (2026-10-22) 245112d4-8422-4b1d-bd73-d7718f994378 (2026-10-22) 52c784f3-ca5f-4d42-964d-2308192c5515 (2026-10-23) 2863f755-7bc4-42ea-b117-1eedcc7fcade (2026-10-23) 33996a21-59af-455e-ad22-11ef01f39fa4 (2026-11-03) b498ee7c-a1bf-46b4-bbb2-e8b3d643fe85 (2026-11-03) We distribute a Mac app outside the Mac App Store, and a release is waiting on this. Could someone from Developer Programs please look at the team's notarization status, or tell us what is missing on the account? Thank you.
2
0
76
2d
Title: Supported launch code requirement with direct posix_spawn and exclusive child reaping on macOS
Title: Supported launch code requirement with direct posix_spawn and exclusive child reaping on macOS I'm designing a security-sensitive process-lifecycle controller on Apple silicon macOS. The controller directly launches a signed foreground executable and must satisfy two requirements: Before any child executable code runs, macOS must enforce a launcher-supplied requirement binding the child to approved code, preferably using LaunchCodeRequirement and CodeDirectoryHash. The original parent must retain exclusive ownership of the child's terminal status through waitpid(), with signalling and reaping serialised by one designated execution context. I understand that Foundation Process.launchRequirement supports launch-time executable constraints, whereas the established lifecycle currently uses direct posix_spawn(). Could Apple DTS clarify: 1. Is there a supported public API for supplying an equivalent launcher-owned code requirement through direct posix_spawn() or its attributes? 2. If Foundation Process is the supported route, can its caller exclusively consume the direct child's terminal status with waitpid() without competing automatic reaping or status consumption by Foundation? Or must callers use Foundation's own termination reporting? 3. If those requirements cannot be combined through one supported interface, is there a recommended public API or launch topology providing both pre-execution code-requirement enforcement and an attributable terminal-status oracle? I'm seeking supported contractual behaviour, not private implementation details. This question concerns executable identity and child lifecycle ownership only. It does not assume that process termination establishes containment of descendants, delegated work or pending external operations. Thank you.
1
0
183
2d
Company details change stuck
Hello I am writing this post because I have no idea where else to write. I need to create developer account for my new company in US so I tried creating new icloud account which didn't work for me. I the restarted my developer plan on my old company which took week to review but got it working. I then used the Company details change to fill in the new US company details I need to submit my new app through. I have not received any message from Apple for 3+weeks now also tried messaging support again a week ago linking the old support request id but that got me nowhere. I have built a new startup and I got investors eyes on me and this thing has been blocking me for over a month to have distribution to all platforms. I have the iOS app fully built and tested and polished fully native but can't even get it out to testflight as my account is now in that weird limbo state even tho I paid my 100$ I can't even distribute to testers through testflight. Please I got growing user base and most of them own iphones and are waiting for the app. I need this to be elevated somehow please.
Replies
0
Boosts
0
Views
14
Activity
2d
Notification Delivery Issues for Location Push Service Extension
We are currently testing the implementation of our Location Push Service Extension (LPSE) in both Ad Hoc and Release environments. We have encountered an issue where LPSE notifications, which were previously working correctly, suddenly fail to be delivered on some devices. After a period of several hours, the notifications resume arriving, but the issue remains intermittent. Notably, during these periods of suspected delivery restriction, regular push notifications (e.g., those using apns-push-type: alert) are delivered and displayed without any problem. [Detailed Situation] Test Environment and Scope We are testing LPSE after obtaining the necessary entitlements, in both Ad Hoc and Release environments. The issue is not observed on all test devices; only certain devices are affected. Observed Behavior Under normal circumstances, LPSE notifications are received and the extension is activated; however, on some devices the notifications suddenly stop arriving. During these periods, even when sending notifications with apns-push-type: location directly via the CloudKit Push Notification Console, no response is observed on the affected devices. The APNs server (api.push.apple.com) always returns a 200 OK response via HTTP/2, and our server-side logs and configurations (DNS resolution performed on every request, using the same JWT token for 59 minutes per session, communication via HTTP/2 with ALPN Protocol: h2) show no issues. Other app functionalities (network communication, UI responsiveness, etc.) work normally. Sending content When sending notifications from our server to APNs (api.push.apple.com), we use the following configuration (over HTTP/2): const payload = { aps: { 'content-available': 1 } }; const headers = { ':method': 'POST', ':path': /3/device/${apnsToken}, 'Authorization': bearer ${jwtToken}, 'apns-topic': 'ot.Here.location-query', 'apns-priority': '10', 'apns-push-type': 'location', 'Content-Type': 'application/json' }; We perform DNS resolution for every request, use the same JWT token for a 59-minute period per session, and communicate via HTTP/2 with ALPN Protocol: h2. Hypothesis on the Cause We suspect that due to an implementation issue, silent push notifications (using content-available: 1) were being sent every few minutes concurrently, which may have triggered an APNs delivery restriction (rate limiting). As a countermeasure, we have completely stopped sending silent pushes and any other background notifications aside from LPSE; however, the issue persists. Additionally, even after resetting affected devices, the delivery problem continues to occur. [Questions for Diagnosis] Given the above situation, is it reasonable to suspect that excessive silent push notifications have triggered an APNs delivery restriction? Does such a silent push restriction affect LPSE notifications (i.e., those sent with apns-push-type: location)? Do APNs delivery restrictions persist even after a device has been reset? Can a high volume of LPSE notifications alone (without silent pushes) also trigger a delivery restriction? → This is our primary concern since it poses a significant implementation challenge. Please let us know if any additional information is required for diagnosis.
Replies
4
Boosts
0
Views
550
Activity
2d
macOS Open Directory: Does ODNodeCreateRecord cleanup preserve concurrent records?
We are designing a local, non-login service account provisioning process on macOS using the public Open Directory API. The documentation for ODNodeCreateRecord() states that if setting an initial attribute fails, the record is deleted and an error is returned. We need to ensure that a failed creation attempt cannot delete or modify a pre-existing record, including during concurrent record creation or replacement. Questions: When attribute initialization fails, is the internal cleanup guaranteed to target only the record instance created by that specific API call, rather than another record with the same name? Is this cleanup bound to a unique record identity or UUID, including if another process concurrently creates, removes, or replaces a record with the same name? Does the public API provide an atomic create-only guarantee that prevents changes to an existing record? If these guarantees are not provided, what supported API or provisioning approach should be used to avoid affecting pre-existing local Directory Services records? Our current plan uses the local /Local/Default Directory Services node for a dedicated service account, administrative change serialization, pre-creation collision checks, and post-operation identity verification. We understand that these checks do not themselves prove atomicity or race-free cleanup. We would appreciate clarification of the supported API guarantees, specifically for macOS 15. Thank you.
Replies
0
Boosts
0
Views
20
Activity
2d
App stuck in Waiting for Review since 31 October, expedite granted 3 November
Our app Ring-Ring® (Apple ID 6799744191), version 1.0 (build 1968), with its first in-app subscriptions, has been Waiting for Review since 31 October 2026. An expedited review was granted on 3 November, and we contacted App Review (case 30000003800448). The status has not changed since. The app is live on Google Play with paying members. Could someone from App Review take a look? Thank you.
Replies
0
Boosts
0
Views
18
Activity
2d
AlarmKit: AlarmPresentation.Alert native buttons (Stop/Open) fail to trigger App Intents perform() on physical devices (Production signed)
When using AlarmKit (AlarmPresentation.Alert), the native system buttons (Stop / Open) successfully trigger the assigned AppIntent (e.g., implementing AppIntent with perform()) when running on the iOS Simulator. However, on physical devices (Real iOS Devices), these native buttons are completely dead. Even with a paid Apple Developer Program account, Production/Release-level code signing, and a clean build, tapping the native buttons on the Lock Screen / Full Screen alert results in zero calls to perform() (no logs, intent handler is never invoked). OS Version: iOS 27.0 Xcode Version: Xcode 27.1 (27A9275) Device: iPhone Air Provisioning: Paid Apple Developer Account (Production / TestFlight build) Is this a known system-level bug in AlarmKit where SpringBoard fails to route intent events to third-party apps on real devices? If so, is there any workaround to capture the action of the native Stop/Open buttons, or are developers expected to rely solely on custom Live Activities (.widgetURL) for navigation? Any guidance would be greatly appreciated!
Replies
1
Boosts
0
Views
26
Activity
2d
Problem with delayed app release
Well, why I sent two applications for review, it's been no news for nearly 20 days, I sent a letter to the support department, I cut the ticket, no news That's all for 72 hours, but what I've refused to do is seriously run the company like that. I'm losing my job because of what you haven't accepted
Replies
0
Boosts
0
Views
9
Activity
2d
Developer Program enrollment still pending after payment
Hi everyone, I subscribed to the Apple Developer Program on Tuesday evening, November 4th, 2025. The payment has already been charged to my bank account, but my account still shows the status “Pending” with the message “Subscribe your membership”. It’s now been several days, and I haven’t received any confirmation email or any request for additional information. I already contacted Apple Support by email, but I’d like to know if other developers have experienced the same situation and how long it took before their account was activated. Thanks in advance for your help and feedback! — Martin
Replies
72
Boosts
26
Views
11k
Activity
2d
AlarmKit — stop automatically at the end of a custom sound while the app is suspended
We are building a scheduled-audio app. We need a complete custom recording to start at a scheduled time while the device is locked, play exactly once, and stop automatically without user interaction. The app may be suspended at the scheduled time. Environment: iPhone 11, iOS 26.6.1; Xcode 26.6 with iOS 26.5 SDK; deployment target iOS 26.1. The app was signed for development, installed, and launched without an attached debugger. Alarm authorization was granted. No background audio mode or countdown Live Activity is configured. We bundle a 154.017959-second, mono 44.1 kHz 16-bit PCM CAF in the main bundle. The recording was converted to CAF without trimming. Minimal scheduling code, called after successful authorization (using the generic example filename sample-sound.caf): import ActivityKit import AlarmKit import SwiftUI struct PlaybackMetadata: AlarmMetadata {} @MainActor func schedulePlaybackTest() async throws { let attributes = AlarmAttributes( presentation: AlarmPresentation( alert: .init(title: "Audio playback test") ), metadata: PlaybackMetadata(), tintColor: Color.teal ) let configuration = AlarmManager.AlarmConfiguration.alarm( schedule: .fixed(Date().addingTimeInterval(60)), attributes: attributes, sound: .named("sample-sound.caf") ) _ = try await AlarmManager.shared.schedule(id: UUID(), configuration: configuration) }NSAlarmKitUsageDescription is present in the built Info.plist. Reproduction: schedule, lock the phone before the fire date, then leave it locked and listen through the end. The recording starts automatically and plays completely, but then repeats. This is a single fixed alarm, not a repeating schedule. Questions: Is there a supported public configuration for playing a custom AlarmKit sound once and dismissing/stopping the alarm at end of file? If not, is there an OS-managed maximum alert duration, scheduled stop, or guaranteed callback that can meet this requirement when the app is suspended or terminated? Is unattended play-once-and-stop unsupported with the current public APIs, so that this should be filed as an enhancement request? We understand that postAlert describes a subsequent countdown, and that stop(id:) can be called by executing app code. A foreground timer or a user-triggered stop intent would not meet the requirement. We want an intended public API solution appropriate for App Store distribution.
Replies
0
Boosts
0
Views
15
Activity
2d
MusicKit: Multichannel Dolby Atmos Limited to Stereo Output - Is This Intended Behavior?
I'm experiencing a significant limitation with MusicKit's Dolby Atmos implementation on macOS and would appreciate clarification on whether this is intended behavior or if there are solutions available. When streaming Dolby Atmos content through MusicKit's ApplicationMusicPlayer, the output is limited to 2-channel stereo, even when: Audio MIDI Setup is configured for 7.1.4 (12-channel) output The same tracks play in full multichannel through the native Apple Music app Dolby Atmos is set to "Automatic" in Apple Music preferences Please let me know if there is anyway to enable this. If not, is this documented anywhere? Thanks!
Replies
2
Boosts
3
Views
411
Activity
2d
24hrs? 48hrs? how about 72hrs... No, Let's try 13 days...
Yup, 13 days to finally get to "in review". I have built updates to my app, added them to TestFlight and had them approved and have a couple of local people testing just the updates. Meanwhile... The app version that I submitted for release along with my subscriptions was left waiting, and waiting, and well... waiting. Now I understand the App Reviewers are real people doing real reviews. And I think that's fantastic, but to be left with absolutely NO feedback at all… Nothing to even say “Hay! Your app has progressed in the queue” is quite frustrating to say the least. The morning it changed to "In review"... I was ecstatic!! I thought to myself.. here we go... we are finally going to be able to get the app out to real users!! Well, no, no we won't. About 60 seconds after going into review, it was rejected. Why? because the test email account I provided was stuck in an auto renew cycle in the sandbox testing. No problem... I created a new email account and submitted those details within about 10 minutes. That was 3 days ago and we are still... "Waiting for review" I personally have never been an Apple user. I loved my Windows PC and Samsung S26 Ultra. But I now have an iPhone 16e + iPhone se (I wanted to test with real devices) + Mac Mini + Macbook for development. I must confess... I LOVE the Mac Mini and the Macbook. I am still coming to terms with the iPhones lol, but they are growing on me. The initial developer establishment and testing phases were a 100% win for Apple. Google was such a PITA to even get a developer account running and their testing is OMG crazy confusing. So I naturally assumed I would have my app into the Apple Store well before Android. That was a failure... Android has since had 3 updates while my iOS users are left with a "I am so sorry, I thought it would have been available by now" Please Apple.. Check out the app.. I really would love to see it in peoples hands.
Replies
4
Boosts
1
Views
145
Activity
2d
Organization enrollment blocked — “exceeded the maximum number of attempts” after verification code was never delivered
Hello Developer Support, I am enrolling a company in the Apple Developer Program as an Organization. Case ID: 102994457817. Sequence of events: The first attempt was rejected because the work email was not on the company domain. I created a mailbox on the company’s own domain and re-entered all enrollment details. At the email verification step, no verification code was delivered. I checked inbox, spam, and server-side quarantine. No Resend control was shown on the page. After refreshing the page, enrollment was blocked with: “Contact us to continue your enrollment. You’ve exceeded the maximum number of attempts. Please contact us.” I have not created any additional Apple Accounts and have not retried since the lock. My account region is Armenia, where the phone callback option is not offered on the contact page, so email and this forum are my only channels. I have had no reply to my email case. Request: please reset the verification attempt counter on this Apple Account so the organization enrollment can continue, and confirm whether a code was dispatched on your side. Thank you.
Replies
1
Boosts
0
Views
55
Activity
2d
Enrollment Blocked: "Exceeded maximum attempts" after Mail Verification Bug for company enrollment
Hello, I am attempting to enroll in the Apple Developer Program as an Organization. During the email verification step, I encountered a technical error: no verification code was sent to my email (I confirmed the email address was correct and checked all folders). There was no "Resend" button available on the screen. After refreshing the page to try and fix the UI glitch, I was immediately blocked with the following error: "Contact us to continue your enrollment. You’ve exceeded the maximum number of attempts. Please contact us." I have already opened a support ticket (Case ID: 102824565622), but since this is a time-sensitive corporate enrollment, I am looking for advice. Any help from the community or an Apple representative would be greatly appreciated. Thanks in advance, Yoni
Replies
2
Boosts
1
Views
622
Activity
2d
App Review Delayed Since October 16 – Support Request Unanswered for 10 Days
Hello Apple App Review Team, I submitted my macOS app for review on October 16, 2026, and it has now been nearly three weeks without approval. Here is the timeline: October 16: Initial app submission. October 26: Contacted Apple Developer Support regarding the review delay (Case ID: 103009347788). October 29: Received a Guideline 5 rejection concerning OpenAI references and distribution in China mainland. October 29: Followed Apple's instructions, excluded China mainland from distribution, and resubmitted the app. November 5: The app remains in "Waiting for Review", and my support request has received no response beyond the automated acknowledgment. I have also addressed the previous Guideline 2.1 information request by providing a screen recording and detailed documentation. I understand that review times can vary, but I am concerned about the prolonged process and the lack of response to my support request. Could someone from the App Review team please investigate whether my submission is progressing normally and whether any additional action is required? I am not requesting approval without review. I would simply appreciate a status update and confirmation that there are no outstanding issues preventing the review from proceeding. Thank you for your assistance.
Replies
0
Boosts
0
Views
11
Activity
2d
NEURLFilterManager: inconsistent per-domain blocking (some sites never block, one flaps) - confirmed PIR database is correct
Hello, Some context: DropBet is an app that helps people with gambling addiction stay off gambling sites and apps, using NEURLFilterManager/PIR to block a large list of known gambling domains system-wide. For a lot of our users this filter is a core part of their recovery > reliability really matters here. Since fixing an unrelated HPKE encryption bug (separate thread, now closed), the filter works end-to-end for the first time, but blocking is inconsistent per domain in a way I can't explain from my side: winamax.fr and the Winamax app: blocked reliably, every single time > clean "connection failed" style block, confirmed to load fine with protection off. unibet.fr and betclic.fr: never blocked, consistently > confirmed even after a full device reboot (rules out stale caching), and confirmed identical across both Safari and Chrome on iOS tested side-by-side (so not browser-specific). olybet.fr: flaps > the page reloads every 2-3 seconds with protection on, also identical across both browsers. Confirmed this only happens with the filter enabled (tested toggling protection off/on against the same page). unibet.fr auto-redirects into the native Unibet app via a Universal Link before the page loads, unlike betclic.fr which stays in the browser > different code path, possibly relevant. To rule out any issue on our end, I wrote a standalone test that queries our deployed PIR database shards directly - bypassing OHTTP, the app, and the device entirely - for all of the domains above plus their www. variants. All of them correctly return the blocked value, no exceptions, including unibet.fr and betclic.fr which never block on the actual device. So the database, the PIR protocol implementation, and the server are confirmed correct for every domain I've tested. This points at something in how NEURLFilterManager/ciphermld applies a correctly-received PIR verdict on-device - possibly related to query batching, an evaluation-key edge case, or Universal Link handling bypassing the filter before a web request is even made. Is there anything you can share about how the client applies results once decrypted, or known issues around any of this?
Replies
4
Boosts
0
Views
96
Activity
2d
Repeated login Keychain prompts and securityd crash after app upgrade on macOS 26.6.x
Overview We are investigating repeated "login" Keychain prompts affecting our macOS application on macOS 26.6.x. The issue appears after upgrading an existing installation. A clean uninstall/reinstall of the same version resolves it. Changing the affected Keychain item's Access Control from "Confirm before allowing access" to explicitly allowing our application/process also stops the prompts. On one affected machine, Apple Support observed a securityd crash followed by: SecKeyCreateSignature failed CSSMERR_DL_INVALID_DB_HANDLE Our code uses some legacy SecKeychain* APIs, so we are currently investigating whether this is related. Questions Were there any changes in macOS 26.6.x around securityd, Keychain ACL handling, or legacy SecKeychain* APIs that could explain this? Could an existing Keychain ACL become stale after an application upgrade, even when both versions are signed with the same Developer ID?
Replies
18
Boosts
0
Views
3.7k
Activity
2d
Supported provenance handling when copying a verified helper
What supported public contract should software use for com.apple.provenance when copying an exact expected helper binary into a new, private owner-controlled working directory for separately authorized later use? We want to leave originals unchanged, preserve security protections, and avoid removing, decoding or reconstructing opaque Apple attribute values. Program-byte identity, permissions/custody and code validation are separate from this metadata question; an attribute name or copy success is not treated as a trust decision. Public APIs reviewed: fcopyfile with independent DATA/XATTR selection, and xattr_flags_from_name with xattr_intent_with_flags for COPY intent. A bounded public-constant probe returned zero property flags and the default preserve result for both com.apple.provenance and an invented unknown name. We therefore do not interpret that default as proof of recognition or an exemption. Could you clarify: Which supported metadata postconditions apply to this specific copy use? Is source/destination raw-value equality an appropriate invariant for this opaque attribute, or may the OS legitimately create different destination metadata while preserving the intended security behavior? Which public properties or APIs can establish the intended destination state without parsing/removing private values or weakening OS protections? The xattr manual's named-wrapper return sentence appears inconsistent with its flags-based description/example. What is the supported return-polarity contract, and is using the flags-based function the intended interpretation? This asks for supported semantics, not a bypass or private value format. No paths, binaries, source, attribute values, keys, account data or logs are attached. Public references: https://developer.apple.com/library/archive/documentation/System/Conceptual/ManPages_iPhoneOS/man3/fcopyfile.3.html https://github.com/apple-oss-distributions/copyfile/blob/main/xattr_name_with_flags.3 https://github.com/apple-oss-distributions/copyfile/blob/main/xattr_flags.h
Replies
3
Boosts
0
Views
104
Activity
2d
Notarization worked, then every submission rejected with 7000 "Team is not yet configured for notarization"
Following Quinn's advice in https://developer.apple.com/forums/thread/118465?answerId=379585022#379585022, I have opened a Developer Programs Support case and am posting here with the case number. Case number: 103005753388 Team ID: 6PG3USG4A9 Notarization worked for this team: three submissions were accepted on 21 and 22 October 2026. Since the evening of 22 October every submission is rejected with status code 7000, "Team is not yet configured for notarization". The rejection logs have "issues": null and no ticket. Nothing changed on our side between the accepted and the rejected submissions: same app, same Developer ID Application certificate, same Apple ID with an app-specific password, same xcrun notarytool. The team is otherwise active; our iOS app is live on the App Store. Accepted: 49e6f112-fd07-40ca-b908-6b8126d2d137 (2026-10-21) fcaae8e3-84e3-493b-a747-297f0ab60c79 (2026-10-21) ab12ace8-743b-47fa-955b-e030feabce11 (2026-10-22) Rejected with 7000: 1731bdca-bf9c-417c-a65a-4f38c619897d (2026-10-22) 245112d4-8422-4b1d-bd73-d7718f994378 (2026-10-22) 52c784f3-ca5f-4d42-964d-2308192c5515 (2026-10-23) 2863f755-7bc4-42ea-b117-1eedcc7fcade (2026-10-23) 33996a21-59af-455e-ad22-11ef01f39fa4 (2026-11-03) b498ee7c-a1bf-46b4-bbb2-e8b3d643fe85 (2026-11-03) We distribute a Mac app outside the Mac App Store, and a release is waiting on this. Could someone from Developer Programs please look at the team's notarization status, or tell us what is missing on the account? Thank you.
Replies
2
Boosts
0
Views
76
Activity
2d
Title: Supported launch code requirement with direct posix_spawn and exclusive child reaping on macOS
Title: Supported launch code requirement with direct posix_spawn and exclusive child reaping on macOS I'm designing a security-sensitive process-lifecycle controller on Apple silicon macOS. The controller directly launches a signed foreground executable and must satisfy two requirements: Before any child executable code runs, macOS must enforce a launcher-supplied requirement binding the child to approved code, preferably using LaunchCodeRequirement and CodeDirectoryHash. The original parent must retain exclusive ownership of the child's terminal status through waitpid(), with signalling and reaping serialised by one designated execution context. I understand that Foundation Process.launchRequirement supports launch-time executable constraints, whereas the established lifecycle currently uses direct posix_spawn(). Could Apple DTS clarify: 1. Is there a supported public API for supplying an equivalent launcher-owned code requirement through direct posix_spawn() or its attributes? 2. If Foundation Process is the supported route, can its caller exclusively consume the direct child's terminal status with waitpid() without competing automatic reaping or status consumption by Foundation? Or must callers use Foundation's own termination reporting? 3. If those requirements cannot be combined through one supported interface, is there a recommended public API or launch topology providing both pre-execution code-requirement enforcement and an attributable terminal-status oracle? I'm seeking supported contractual behaviour, not private implementation details. This question concerns executable identity and child lifecycle ownership only. It does not assume that process termination establishes containment of descendants, delegated work or pending external operations. Thank you.
Replies
1
Boosts
0
Views
183
Activity
2d