| 1 | <?xml version="1.0" encoding="UTF-8"?> |
| 2 | <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> |
| 3 | <plist version="1.0"> |
| 4 | <dict> |
| 5 | <!-- |
| 6 | Onde Inference — Required Reasons API declarations |
| 7 | https://developer.apple.com/documentation/bundleresources/privacy_manifest_files/describing_use_of_required_reason_api |
| 8 | |
| 9 | These APIs are called by the Rust static library (mistral.rs / tokio / reqwest) |
| 10 | embedded in OndeFramework.xcframework. None are used for tracking. |
| 11 | |
| 12 | Verified with: |
| 13 | nm -u libonde-macos.a | grep -E "_sysctl|_stat|_mach_absolute|_gettimeofday" |
| 14 | --> |
| 15 | <key>NSPrivacyTracking</key> |
| 16 | <false/> |
| 17 | <key>NSPrivacyTrackingDomains</key> |
| 18 | <array/> |
| 19 | <key>NSPrivacyCollectedDataTypes</key> |
| 20 | <array/> |
| 21 | <key>NSPrivacyAccessedAPITypes</key> |
| 22 | <array> |
| 23 | <!-- |
| 24 | sysctl / sysctlbyname / sysctlnametomib |
| 25 | Used by: tokio (thread / CPU count), mistral.rs (hardware capability detection), |
| 26 | sysinfo (memory pressure monitoring for model loading decisions). |
| 27 | |
| 28 | SystemBootTime — 35F9.1: Declare timestamp for measuring elapsed inference time. |
| 29 | --> |
| 30 | <dict> |
| 31 | <key>NSPrivacyAccessedAPIType</key> |
| 32 | <string>NSPrivacyAccessedAPICategorySystemBootTime</string> |
| 33 | <key>NSPrivacyAccessedAPITypeReasons</key> |
| 34 | <array> |
| 35 | <string>35F9.1</string> |
| 36 | </array> |
| 37 | </dict> |
| 38 | <!-- |
| 39 | sysctl (hw.memsize, hw.physicalcpu, hw.logicalcpu, hw.cpufrequency) |
| 40 | Used by: mistral.rs / candle to size KV cache and choose quantisation level |
| 41 | based on available RAM and CPU topology. |
| 42 | |
| 43 | DiskSpace — E174.1: Check available disk space before downloading model weights. |
| 44 | --> |
| 45 | <dict> |
| 46 | <key>NSPrivacyAccessedAPIType</key> |
| 47 | <string>NSPrivacyAccessedAPICategoryDiskSpace</string> |
| 48 | <key>NSPrivacyAccessedAPITypeReasons</key> |
| 49 | <array> |
| 50 | <string>E174.1</string> |
| 51 | </array> |
| 52 | </dict> |
| 53 | <!-- |
| 54 | stat / fstat / lstat / fstatat / fstatfs / fstatvfs |
| 55 | Used by: hf-hub (checking whether a cached model file exists and is complete), |
| 56 | tokio::fs (async file I/O underlying model weight streaming). |
| 57 | |
| 58 | FileTimestamp — C617.1: Read file modification timestamps to validate cached |
| 59 | model files against the HuggingFace Hub manifest and avoid re-downloading |
| 60 | unchanged weights. |
| 61 | --> |
| 62 | <dict> |
| 63 | <key>NSPrivacyAccessedAPIType</key> |
| 64 | <string>NSPrivacyAccessedAPICategoryFileTimestamp</string> |
| 65 | <key>NSPrivacyAccessedAPITypeReasons</key> |
| 66 | <array> |
| 67 | <string>C617.1</string> |
| 68 | </array> |
| 69 | </dict> |
| 70 | </array> |
| 71 | </dict> |
| 72 | </plist> |