Apple tightens macOS Full Disk Access controls for agent-era risks

On October 2, Apple said macOS will make Full Disk Access requests more explicit. The permission can expose files, mail, messages, and browsing history. Apple said some software uses it in risky ways and linked the change to a threat model that now includes autonomous AI agents.

For builders, useful access is a security boundary. A desktop assistant that searches files, sends messages, or runs tools needs narrow scopes, a clear permission story, and a visible stop or review path. Platform prompts do not replace product controls.

Test the smallest permission set on one workflow. Log each request and sensitive action, show what the agent can reach, and confirm that revoking access stops the job. Watch Apple's rollout details.