Originally reported November 12, 2026.
Apple’s Security Engineering and Architecture and Core OS teams published a technical article on Secure Exclaves, an Apple Silicon architecture for processing camera and microphone data in isolated environments. According to Apple, its ambient-sensing design can detect events without passing raw audio or video to the main operating system, apps or Apple; the raw data is discarded after processing. The main system instead receives limited metadata, such as a detected sound, a recognized user or a user’s location.
Apple says Secure Exclaves run separately from the main operating system on a custom L4 microkernel. A Secure Page Table Monitor restricts memory access, while a Swift-based communication system called Secure IPC limits what components can exchange through predefined interfaces.
The architecture also governs sensor-use indicators. Apple says an Exclave Indicator Controller permits full camera or microphone data to leave the isolated environment only after the relevant light or on-screen notice has appeared for the required time. On devices with an on-screen indicator, a separate display exclave checks the pixels actually shown—including their color, shape, duration and brightness.
As an example, Apple describes HomeView recognizing up to six enrolled users and whether they are nearby. Camera and microphone exclaves process their respective inputs, with inference handled through an isolated neural-engine queue. Apple says the main operating system receives user ID, location and recognition-confidence metadata, rather than raw images or audio, to adjust what it displays in apps such as Calendar, Messages and Apple Music.
Apple also describes the “Hey Siri” flow on iPhone 18 Pro: a low-power always-on processor listens for a possible wake phrase, after which audio and Siri exclaves perform further checks. Before confirmation, the main operating system receives a notification to wake Siri, not the audio itself. Audio can reach the Siri service once active interaction begins and the microphone indicator and security checks are complete.
According to the report, Secure Exclaves also support camera and microphone screen indicators on iPhone 18 Pro, iPhone 18 Pro Max and iPhone Duo, and camera indicators on MacBook Neo and HomeView. Apple says it has formally verified parts of the microkernel against functional specifications, but not the entire microkernel.
Source: ithome.com (originally published 2026-11-12 13:17 UTC+8)