# hipaa (blogs) — RSS Amplifier Recent posts from the 2 feeds in the RSS Amplifier directory that cover hipaa. Page: Feed: --- ## [JSON-schema-coerced tool dispatch: catching prompt injection at the boundary](https://sentinelden.com/blog/json-schema-coerced-tool-dispatch) _2026-08-17 · Sentinel Den · Engineering blog_ Compile-time-checked tool shapes. JSON-schema validation between SLM output and Swift function dispatch. Why this is the right prompt-injection layer. ## [Bayesian fusion across motion, vision, audio: when one modality lies](https://sentinelden.com/blog/bayesian-fusion-motion-vision-audio-when-one-lies) _2026-08-13 · Sentinel Den · Engineering blog_ Multi-modal presence verification. Inverse-variance weighting, when one channel goes adversarial, and why the fused metric refuses to flap. ## [AnomalyKit + RuntimeGuard + BehaviorGuard: layered tamper detection](https://sentinelden.com/blog/anomalykit-runtimeguard-behaviorguard-layered-tamper) _2026-08-10 · Sentinel Den · Engineering blog_ Why no single-signal detector catches a real attack. Statistical anomalies + hard-edge runtime indicators + behavioral drift, fused with a sliding-window consensus policy. ## [Shipping a clean App Store privacy review: ScreenGuard + RedactKit + ManifestGuard + EnclaveVault](https://sentinelden.com/blog/clean-app-store-privacy-review-four-sdk-checklist) _2026-08-06 · Sentinel Den · Engineering blog_ Apple's privacy review asks four questions. Four SDKs answer them at code level. PrivacyInfo.xcprivacy, on-device PII, capture protection, enclave storage. ## [AgenticGuard + IntentKit + RuntimeGuard: the verify-classify-defend stack](https://sentinelden.com/blog/agenticguard-intentkit-runtimeguard-verify-classify-defend) _2026-08-03 · Sentinel Den · Engineering blog_ Three layers for an iOS LLM-agent app. RuntimeGuard is the floor, IntentKit classifies the input, AgenticGuard scopes the tool dispatch. Order matters. ## [BehaviorGuard + PresenceKit: composing risk-engine input with NPU verification](https://sentinelden.com/blog/behaviorguard-presencekit-composing-risk-engine) _2026-07-30 · Sentinel Den · Engineering blog_ Wiring PresenceKit's PresenceMetrics stream into BehaviorGuard's hysteretic 4-band risk engine. The integration loop, the back-pressure design, the math. ## [On-device PII redaction across visual, audio, text in one policy](https://sentinelden.com/blog/on-device-pii-redaction-visual-audio-text-one-policy) _2026-07-27 · Sentinel Den · Engineering blog_ Three modalities, one declarative RedactionPolicy. Why a single allow/block surface beats hand-rolling per-engine code. ## [Detection is not defense: we measured our own injection classifier on novel attacks](https://sentinelden.com/blog/detection-is-not-defense-injection-benchmark) _2026-07-26 · Sentinel Den · Engineering blog_ Everyone quotes a prompt-injection benchmark number. We ran ours against attacks it had never seen (40% recall on the held-out set) and we're publishing it, because the authorization layer is what actually stops the attack. ## [Catching hidden Required-Reason API calls in vendor SDKs](https://sentinelden.com/blog/catching-hidden-required-reason-api-calls) _2026-07-23 · Sentinel Den · Engineering blog_ Your privacy manifest declares what your code reads. What about the analytics SDK quietly polling SystemBootTime? Debug-time auditing for vendor dependencies. ## [Telemetry-anomaly detection on-device with explicit\_bzero hygiene](https://sentinelden.com/blog/telemetry-anomaly-detection-explicit-bzero) _2026-07-20 · Sentinel Den · Engineering blog_ Detecting anomalies in app telemetry without ever sending raw logs off-device. mlock'd buffers, explicit\_bzero, INT4 inference. ## [Zuverlässiges Hosting, Domains, Server (Sponsored)](https://crawlproof.com/a/L0K2MIoaOYop) _2026-07-19 · **Sponsored**_ Zuverlässige Infrastruktur, niedrige Preise und skalierbare Server für deinen Webauftritt. ## [Offline SLM intent extraction without the cloud round-trip](https://sentinelden.com/blog/offline-slm-intent-extraction-no-cloud) _2026-07-16 · Sentinel Den · Engineering blog_ On-device small language models for natural-language intent classification. Latency, energy, privacy. The case for on-device + the cost. ## [NPU-pinned continuous presence verification on iPhone 17 Pro](https://sentinelden.com/blog/npu-pinned-continuous-presence-iphone-17-pro) _2026-07-13 · Sentinel Den · Engineering blog_ Anchoring vision inference to the Apple Neural Engine on iPhone 17 Pro. Latency, energy, thermal throttling, and why ANE-first dispatch matters. ## [Training a per-app behavioral biometrics model on-device with Core ML](https://sentinelden.com/blog/core-ml-behavioral-biometrics-private-training) _2026-07-09 · Sentinel Den · Engineering blog_ BehaviorGuard ships a baseline ensemble that works day one. How to train a per-customer model on your app's real user population, on-device, no upload. ## [OAuth 2.0 for iOS in 2026: PKCE, PAR, DPoP, and JAR](https://sentinelden.com/blog/oauth-pkce-par-dpop-jar-ios-2026) _2026-07-06 · Sentinel Den · Engineering blog_ PKCE was 2015's OAuth hardening for mobile. PAR, DPoP, and JAR are 2026's. What each fixes, when to use which, and how they compose for regulated iOS apps. ## [Memory analysis of iOS apps via Studio: what page tables tell you](https://sentinelden.com/blog/memory-analysis-ios-studio-page-tables) _2026-07-02 · Sentinel Den · Engineering blog_ Static analysis tells you what an app could do; memory analysis tells you what it's doing now. The workflow for inspecting a running iOS app in Studio. ## [Lockdown Mode and your security SDK: detecting + responding](https://sentinelden.com/blog/lockdown-mode-and-your-security-sdk) _2026-06-29 · Sentinel Den · Engineering blog_ Lockdown Mode is user opt-in but it shifts your app's runtime profile in ways your SDK must detect and adapt to. Treating Lockdown users the same is a failure. ## [iOS background-location threat model: the surface nobody documents](https://sentinelden.com/blog/ios-background-location-threat-model) _2026-06-25 · Sentinel Den · Engineering blog_ Background location is treated as a UX concern. It's also an attack surface; the threat model for Always authorization is more elaborate than most ship. ## [macOS Sequoia 15 and Studio's audit pipeline: what survives SIP](https://sentinelden.com/blog/macos-sequoia-sip-studio-pipeline) _2026-06-22 · Sentinel Den · Engineering blog_ macOS Sequoia tightened SIP on inter-process calls. For SentinelDen Studio Frida-based instrumentation, that changes which parts need entitlements. ## [mTLS revocation done right: when CRL is too slow](https://sentinelden.com/blog/mtls-revocation-when-crl-too-slow) _2026-06-18 · Sentinel Den · Engineering blog_ Client mTLS revocation isn't solved by CRLs or OCSP; both bake in latency that doesn't match how compromised mobile credentials get used. The alternative. ## [Tamper-evident logging on iOS: hash-chained, HMAC-signed audit ledgers](https://sentinelden.com/blog/tamper-evident-logging-ios-2026) _2026-06-15 · Sentinel Den · Engineering blog_ An audit log editable by the host app or anyone with jailbreak filesystem access isn't an audit log. The hash-chain plus HMAC-signature plus off-device-replication pattern, and the real BehaviorGuard AuditLog that implements it. ## [Transcript-Driven Stock Discovery (Sponsored)](https://crawlproof.com/a/GSDmTFjQJ8CG) _2026-06-14 · **Sponsored**_ Ranked, evidence-backed watchlists from indexed executive transcripts for 1–2 quarter horizons ## [codesign -dvv and the resource directory: what your signature claims](https://sentinelden.com/blog/codesign-resource-directory-what-signature-claims) _2026-06-11 · Sentinel Den · Engineering blog_ \`codesign -dvv\` is the canonical "is this app properly signed" check. It is also the most-misread output in iOS forensics. ## [The iOS 17/18/19 security-API deprecation matrix](https://sentinelden.com/blog/ios-security-api-deprecation-matrix) _2026-06-08 · Sentinel Den · Engineering blog_ Apple deprecates security APIs every release. Three iOS versions of accumulated deprecations means most pre-2024 codebases ship silent App Review rejections. ## [Making behavioral biometrics observable: BehaviorGuard telemetry](https://sentinelden.com/blog/observable-behavioral-biometrics-telemetry) _2026-06-04 · Sentinel Den · Engineering blog_ Behavioral biometrics SDKs default to a black-box risk score. Triage, drift detection, and forensics need structured telemetry. The schema and metric surface. ## [Apple Private Cloud Compute: rethinking your AgenticGuard threat model](https://sentinelden.com/blog/apple-intelligence-private-cloud-compute-agenticguard) _2026-06-01 · Sentinel Den · Engineering blog_ When an on-device LLM agent hands off a prompt to Private Cloud Compute, AgenticGuard tool-permissioning and audit trail span two trust domains. What changes. ## [Self-custody wallets on iOS: secure-input plus Secure-Enclave](https://sentinelden.com/blog/self-custody-wallets-secure-input-enclave) _2026-05-28 · Sentinel Den · Engineering blog_ Self-custody wallets need two rare things: every seed-phrase keystroke in a protected buffer, and the signing key non-extractable even on compromise. ## [xcprivacy-lint: declaring required-reason APIs your SDK is calling](https://sentinelden.com/blog/xcprivacy-lint-required-reason-apis) _2026-05-25 · Sentinel Den · Engineering blog_ App Store review rejects iOS 17+ apps whose PrivacyInfo.xcprivacy misses any required-reason API. The hard part is finding the ones your dependencies hide. ## [Auditing an .xcarchive you didn't build: forensic patterns](https://sentinelden.com/blog/auditing-xcarchive-incident-response) _2026-05-21 · Sentinel Den · Engineering blog_ When a customer ships an .xcarchive after an incident, the build environment is gone but the artifact is rich. A defensible audit without a rebuild. ## [Beyond Frida: detecting the long-tail injection toolchain in 2026](https://sentinelden.com/blog/beyond-frida-long-tail-injection) _2026-05-18 · Sentinel Den · Engineering blog_ Most iOS injection checks in 2026 are scoped to Frida and miss Theos hooks, dyld interposing, ObjC swizzling, and runtime-hopping bypass kits. ## [PCI-DSS 4.0 mobile on iOS: mapping requirements to ScreenGuard](https://sentinelden.com/blog/pci-dss-mobile-controls-screenguard) _2026-05-14 · Sentinel Den · Engineering blog_ PCI-DSS 4.0 added explicit mobile requirements in 6.2 and 8.6. The line-by-line mapping from each screen-layer requirement to an iOS control via ScreenGuard. ## [App Attest plus DeviceCheck: iOS identity for revocable enrollment](https://sentinelden.com/blog/app-attest-devicecheck-combined-2026) _2026-05-11 · Sentinel Den · Engineering blog_ App Attest proves the binary, DeviceCheck persists two bits across reinstalls. How EnclaveVault wires them together for revocable enrollment. ## [Non-custodial Crypto Payments & Escrow (Sponsored)](https://crawlproof.com/a/HnsCq2z41AKR) _2026-05-10 · **Sponsored**_ Accept multi-chain crypto with trustless escrow, instant confirmations, and no KYC ## [Verifying an on-device agent's audit chain off-device: the CI replay](https://sentinelden.com/blog/audit-chain-verification-off-device) _2026-05-07 · Sentinel Den · Engineering blog_ The agent emits a hash-chained, Secure-Enclave-signed audit log. The CI-side verification protocol and Swift CLI for regulators and incident responders. ## [Face ID isn't a liveness check: behavioral signals as companion](https://sentinelden.com/blog/liveness-detection-faceid-companion) _2026-05-04 · Sentinel Den · Engineering blog_ Face ID matches a template; it doesn't verify the face is conscious or driving the session. How BehaviorGuard composes with biometrics, not against them. ## [SentinelDen Studio CVE feed: Ed25519 signatures and supply-chain trust](https://sentinelden.com/blog/cve-feeds-in-ios-audit-tooling) _2026-04-30 · Sentinel Den · Engineering blog_ Auditing iOS binaries means trusting a CVE feed. How the feed works, why every entry is Ed25519-signed, and what the redirect guard prevents. ## [Step-up auth on risk, not fat-finger taps: hysteretic transitions](https://sentinelden.com/blog/step-up-auth-when-risk-rises) _2026-04-27 · Sentinel Den · Engineering blog_ Stepping up on every threshold crossing produces auth fatigue. The hysteretic state machine BehaviorGuard uses to distinguish session-takeover from brief noise. ## [Capability-based tool permissioning for on-device LLM agents on iOS](https://sentinelden.com/blog/tool-permissioning-on-device-agents) _2026-04-23 · Sentinel Den · Engineering blog_ A typed tool registry says what an agent can call, not whether the caller may call it now. The capability-handle pattern that closes the authorization gap. ## [Three ReplayKit and AirPlay bypass techniques seen in the wild in 2026](https://sentinelden.com/blog/replaykit-bypass-in-the-wild) _2026-04-20 · Sentinel Den · Engineering blog_ UIScreen.isCaptured misses real bypasses: USB-C alt-mode displays, jailbreak mirroring kexts, CarPlay screen-sharing. Three patterns and the fix. ## [Detecting pasteboard reads on iOS 16+ without triggering the banner](https://sentinelden.com/blog/pasteboard-detection-without-banner) _2026-04-16 · Sentinel Den · Engineering blog_ iOS 16's paste banner fires on every UIPasteboard.general.string call. How changedNotification and changeCount let a security tool observe without reading. ## [mTLS on iOS vs Android: why the Secure Enclave wins on device identity](https://sentinelden.com/blog/mtls-iphone-vs-android-2026) _2026-04-13 · Sentinel Den · Engineering blog_ Both platforms support mTLS and hardware-backed keys. The engineering diverges sharply on ship. Why the Secure Enclave model is structurally stronger. ## [HIPAA Technical Safeguards on iOS: 45 CFR § 164.312 to ScreenGuard](https://sentinelden.com/blog/hipaa-technical-safeguards-screenguard) _2026-04-09 · Sentinel Den · Engineering blog_ HIPAA § 164.312 is auditor-facing prose. The line-by-line mapping from each safeguard to a concrete iOS control, and what ScreenGuard's .hipaa preset ships. ## [iOS clipboard threat model: why UIPasteboard fails crypto wallets](https://sentinelden.com/blog/ios-clipboard-threat-model-2026) _2026-04-06 · Sentinel Den · Engineering blog_ UIPasteboard is shared, synced via Universal Clipboard, and readable by siblings. The in-process AES-GCM clipboard pattern that closes every leak path. ## [PSI drift detection on iOS: when has the user's baseline changed?](https://sentinelden.com/blog/psi-drift-detection-ios) _2026-04-02 · Sentinel Den · Engineering blog_ Behavioral biometrics rely on a stable user feature distribution. Population Stability Index detects when behavior has drifted past the baseline's range. ## [Forensic HMAC watermarks on iOS: attributing a leaked screenshot](https://sentinelden.com/blog/forensic-hmac-watermarks-ios) _2026-03-30 · Sentinel Den · Engineering blog_ Visible CONFIDENTIAL stamps don't survive cropping. HMAC-signed invisible watermarks do, recoverable via Vision OCR. How they work, what they catch. ## [BIP-39 verification on iOS: confirming the user wrote down the phrase](https://sentinelden.com/blog/bip39-verification-challenges-ios) _2026-03-26 · Sentinel Den · Engineering blog_ Most wallet apps show the mnemonic and trust 'I wrote it down'. The BIP-39 verification pattern that catches recovery failures before access is lost. ## [Ten on-device behavioral signals on iOS and what each catches](https://sentinelden.com/blog/ten-behavioral-signals-ios) _2026-03-23 · Sentinel Den · Engineering blog_ BehaviorGuard ships 10 behavioral collectors, each with its own threat coverage and false-positive profile. What each measures, what it catches, who opts in. ## [iOS screen-capture: why UIScreen.isCaptured alone isn't enough](https://sentinelden.com/blog/uiscreen-iscaptured-isnt-enough) _2026-03-19 · Sentinel Den · Engineering blog_ Most apps rely on UIScreen.isCaptured plus an overlay. That misses AirPlay timing, screenshot bursts, ReplayKit-from-another-app, and camera attacks. ## [Every place an iOS keyboard leaks before your mnemonic hits the wallet](https://sentinelden.com/blog/ios-keyboard-leak-surfaces) _2026-03-16 · Sentinel Den · Engineering blog_ iOS keyboards leak across six surfaces between tap and in-memory secret. Each surface, the actor it leaks to, and the engineering pattern that closes it. ## [Continuous authentication on iOS: why one-shot Face ID isn't enough](https://sentinelden.com/blog/continuous-authentication-ios-after-faceid) _2026-03-12 · Sentinel Den · Engineering blog_ Face ID is a great unlock primitive, a poor session-integrity one. What fails when biometry is treated as session auth, and the continuous-auth shape on 17+. ## [Static analysis for iOS: 8 pre-submission defects to catch first](https://sentinelden.com/blog/static-analysis-ios-pre-submission) _2026-03-09 · Sentinel Den · Engineering blog_ App Review rejection costs a week. Most incidents start as static-findable defects. The 8 patterns SentinelDen Studio catches pre-submission, with Swift fixes. ## [Dopamine and palera1n: rootless jailbreak detection without misfires](https://sentinelden.com/blog/dopamine-palera1n-rootless-detection) _2026-03-05 · Sentinel Den · Engineering blog_ Rootless jailbreaks shift every iOS 7-11 detection assumption. The legacy path list fails on Dopamine, palera1n, and Taurine. What to probe instead. ## [iOS Secure Enclave key persistence: re-enrollment to factory reset](https://sentinelden.com/blog/secure-enclave-key-persistence-ios) _2026-03-02 · Sentinel Den · Engineering blog_ Secure Enclave keys survive some events, not others, in ways the docs miss. A tested matrix: Face ID re-enrollment, lockout, restore, factory reset, OS upgrade.