Overview
- Apple published technical details on Nov. 13–14 describing Secure Exclaves, isolated runtimes that keep raw camera and microphone streams inside the device so the main operating system, apps, and Apple cannot access them.
- Secure Exclaves run on the device’s main processor cores with a tiny, Apple-customized L4 microkernel called exclaveOS and use hardware-backed memory protections and a Secure Page Table Monitor to block the main OS from reading exclave memory.
- The system supports two modes: ambient mode reduces sensor feeds to narrow metadata such as a person identifier, position, and confidence for HomeView, and active mode can release full sensor data only after a secure visible indicator is shown.
- An Exclave Indicator Controller enforces the gate for full data and on supported iPhones a display exclave checks pixel shape, color, brightness, and obstruction while HomeView controls an LED directly to confirm visibility.
- Apple said it used formal verification during development, found subtle kernel flaws early, and will continue hardening Secure Exclaves with incremental formal proofs and AI-accelerated vulnerability research as it builds privacy foundations for always-on ambient and AI features.