Appendix: Apple Intelligence Report

Overview

After a user enables the Apple Intelligence Report in Settings > Privacy & Security, they can export the attestation bundles of the PCC nodes to which their device has encrypted requests.

The exported JSON file consists of two top-level keys:

• modelRequests: Contains Apple Intelligence requests processed by Private Cloud Compute (executionEnvironment: PrivateCloudCompute).

• privateCloudComputeRequests: Contains metadata for requests processed by Private Cloud Compute:

  • pipelineKind: Identifies the pipeline that served the request.

  • pipelineParameters: Additional request parameters visible to the Node selection for routing decisions, such as the model or adapter.

  • attestations: An array of attestation bundles from PCC nodes to which the device released the Application protocol. A report can interleave bundles from both platforms: Appendix: Apple Silicon Attestation Bundle Contents describes the Apple silicon bundle structure, and Appendix: Google Cloud Attestation Bundle Contents describes the Google Cloud bundle structure.

  • When a request invokes tools, the report also includes the Request execution log’s outboundCalls entries. Each entry records a External tool calls request sent through the tool gateway: the target tool server, the tool name, and the arguments.

Base64-encoded attestation bundles

Starting with macOS 26.4, iOS 26.4, and iPadOS 26.4, attestation bundles in the Apple Intelligence Report are Base64-encoded Protobuf. This replaces the previous JSON representation of the attestation bundle’s Protobuf fields, and helps ensure that the report captures the complete attestation bundle — including any fields added in the future — without requiring a client software update.

The pccvre attestation subcommands parse, canonicalize, and verify attestation bundles from the Apple Intelligence Report.