Overview
- Apple publicly documented Secure Exclaves on Friday, November 13, 2026, describing an isolated on-device runtime that processes camera and microphone feeds without exposing raw streams to the main OS, apps, or Apple.
- Exclaves run an independent operating system built on an Apple-customized L4 microkernel and use enforced controls such as a Secure Page Table Monitor and Secure IPC to prevent memory or interface access by the main kernel.
- The architecture supports two modes: ambient mode, which keeps raw audio and video inside the exclave and only emits minimal metadata, and active mode, which releases full sensor data to the OS only after a secure, visible indicator is confirmed.
- An Exclave Indicator Controller enforces indicator integrity by directly driving HomeView LEDs and by having a display exclave verify on-screen indicator pixels meet brightness and visibility checks before allowing full sensor access.
- Apple says it will continue hardening Exclaves with AI-assisted vulnerability research and formal verification, and journalists interpret the work as privacy infrastructure to enable wider ambient and AI-first features without exposing raw sensor data.