knowledge-agent

executablemacOS393.3 KBx86_64, arm64

Apple device pairing assistant — manages connections with paired Apple hardware and services

Facilitates pairing and communication with connected Apple devices through hardware abstraction frameworks. Processes usage analytics, prediction data, and contact suggestions to optimize device interactions. Maintains private storage for pairing credentials and device state, with exceptions for accessing additional system file paths. Exposes an XPC service for other system components to query device connectivity and manage pairing relationships. Communicates with Apple endpoints for syncing device configurations and telemetry.AI

Fingerprint

Platform: macOS
Type: executable
Arch: x86_64, arm64
Min OS: 26.1.0
SDK: 26.1.0
File Size: 393.3 KB
UUID: 791522F9-2298-39E4-925C-33FCD6E1652D
Analyzed: 2026-04-09T09:53:18Z
CDHash: 0751aba8670168e754544b2c620e11fe5551270706d19803ee6a7194be403cdb

Capabilities

StoragePrivate storage area access

com.apple.private.security.storage.SiriInference [object Object]

StoragePrivate storage area access

com.apple.private.security.storage.SiriVocabulary [object Object]

StorageException: access additional file paths

com.apple.security.exception.files.home-relative-path.read-write

/Library/com.apple.siri.inference/

HardwareCommunicate with paired Apple devices

com.apple.CompanionLink [object Object]

AnalyticsUsage prediction and tracking

/System/Library/PrivateFrameworks/CoreDuet.framework/Versions/A/CoreDuet

AnalyticsContact/people suggestion engine

/System/Library/PrivateFrameworks/PeopleSuggester.framework/Versions/A/PeopleSuggester

Frameworks9

BiomeFoundation CoreDuet PeopleSuggester CoreDuetSync Foundation libobjc.A.dylib libSystem.B.dylib CoreFoundation SoftLinking

Entitlements39

aps-environment production

com.apple.CompanionLinktrue

com.apple.Contacts.database-allowtrue

com.apple.application-identifier com.apple.knowledge-agent

com.apple.coreduetd.allowtrue

com.apple.coreduetd.contexttrue

com.apple.coreduetd.peopletrue

com.apple.developer.device-information.user-assigned-device-nametrue

com.apple.developer.icloud-container-environment Production

com.apple.developer.icloud-container-identifiers

com.apple.knowledgestore2 com.apple.knowledgestore4

com.apple.developer.icloud-services

com.apple.imdpersistence.IMDPersistenceAgent-GroupMetadatatrue

com.apple.knowledgestore2 com.apple.knowledgestore2

com.apple.knowledgestore4 com.apple.knowledgestore2

com.apple.private.aps-connection-initiate com.apple.icloud-container.com.apple.knowledge-agent

com.apple.private.assets.accessible-asset-types

com.apple.MobileAsset.Trial.Siri.SiriUnderstandingMorphun

com.apple.private.biome.pruner

App.RelevantShortcuts App.InFocus App.Intent FrontBoard.DisplayElement Location.Semantic Siri.AppSelection.Music Siri.Remembers.AssistantSuggestions Siri.Remembers.CallHistory Siri.Remembers.AudioHistory Siri.Remembers.InteractionHistory Siri.Remembers.MessageHistory IntelligenceEngine.Interaction.Donation Media.NowPlaying

com.apple.private.biome.read-write

App.RelevantShortcuts App.InFocus App.Intent

com.apple.private.biome.writer

App.Activity App.LocationActivity

com.apple.private.cloudkit.serviceNameForContainerMap <dict>

com.apple.private.cloudkit.setEnvironmenttrue

com.apple.private.cloudkit.systemServicetrue

com.apple.private.communicationsfiltertrue

com.apple.private.dark-wake-pushtrue

com.apple.private.imcore.spi.database-accesstrue

com.apple.private.intelligenceplatform.views.read-only

visualIdentifier photosAutonamingView

com.apple.private.memorystatustrue

com.apple.private.screen-timetrue

com.apple.private.security.storage.SiriInferencetrue

com.apple.private.security.storage.SiriVocabularytrue

com.apple.private.tcc.allow

kTCCServiceCalendar kTCCServiceReminders kTCCServiceAddressBook kTCCServiceLiverpool

com.apple.proactive.PersonalizationPortrait.Contacttrue

com.apple.proactive.ProactiveSuggestionClientModel.xpctrue

com.apple.proactive.eventtrackertrue

com.apple.reminddtrue

com.apple.rootless.storage.coreduet_knowledge_storetrue

com.apple.security.exception.files.home-relative-path.read-write

/Library/com.apple.siri.inference/

com.apple.security.personal-information.addressbooktrue

com.apple.trial.client

Interesting Strings

Bundle IDs(130)

com.apple.application-identifier com.apple.private.dark-wake-push com.apple.proactive.eventtracker !com.apple.Contacts.database-allow "/Library/com.apple.siri.inference/08

File Paths(19)

"/Library/com.apple.siri.inference/08 %@C.db %@C.db-shm %@C.db-wal /AppleInternal/Library/BuildRoots/4~B_wrugCuIyLUVV0Ixwt3Pk2u_4Pgy3jlcZv-Fm8/Library/Caches/com.apple.xbs/Sources/CoreDuet/CoreDuetDaemon/CoreDuetDaemon/Knowledge/CDKnowledgeDaemon.m:613

telemetry(3)

LifespanLimitDeleted=%{signpost.telemetry:number1,public}lu TotalLimitDeleted=%{signpost.telemetry:number2,public}lu UserDoesNotExistDeleted=%{signpost.telemetry:number3,public}lu Size=%{signpost.telemetry:number1,public}lluB enableTelemetry=YES submitMessagesPinningFeedback:

URLs & Endpoints(5)

$http://crl.apple.com/codesigning.crl0 %http://www.apple.com/appleca/root.crl0 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"><string>com.apple.compilers.llvm.clang.1_0</string>https://www.apple.com/appleca/0

Network Surface

Networking Frameworks

BiomeFoundation CoreFoundation Foundation

Endpoints(8)

Urlhttp://www.apple.com/DTDs/PropertyList-1.0.dtd">

Hostnamewww.apple.com

Hostnamemacosx26.1.internal

Urlhttp://www.apple.com/appleca/root.crl0

Urlhttp://crl.apple.com/codesigning.crl0

Hostnamecrl.apple.com

Urlhttps://www.apple.com/appleca/0

DNA Capability Vector

Location

0

Keychain

0

Network

0

Storage

3

Hardware

1

IPC

0

Analytics

2

Security

0

System

0

Behavioral Profile

URL Endpoints

5

Telemetry Strings

3

File Paths

19

Bundle IDs

130

IOKit Constants

0

Library Functions

0

Structural HashesSHA-256

Code69564a77cf4d17d026dec3e82c84c72315d7d3ceca1166d79923cbd4ffa2a3fa

Imports94482de791c2ce043d6548f1c24bd027851ff80d00318655da9703f76234bdb8

Frameworks91ddfab1a879bd0073aab87790f3dfa478408e5e7b0b35b63561c27b367a2ee8

Classes5c0a630c8b89143ef93b1142bcd21126aa8992ffa95bf2bbdfaa329e0ba64753

Entitlements6bf9fa73a16a57debb56257e85f25e0c2896db9124e17536e2b30d3434eefac9

Symbols2a646a46655a7fd72992ea5d965a88b7b9ad4669167c3e9bdbad776239b3a9d5

Static Libraries0 / 378 functions identified

Functions(378)

0x100001050-[CDPeopleDaemonConnection unauthorizedClientError]

0x100001134-[CDPeopleDaemonConnection recordInteractions:enforceDataLimits:enforcePrivacy:reply:]

0x1000011f8-[CDPeopleDaemonConnection updateInteractions:enforceDataLimits:enforcePrivacy:reply:]

0x1000012bc-[CDPeopleDaemonConnection queryInteractionsUsingPredicate:sortDescriptors:limit:reply:]

0x100001370-[CDPeopleDaemonConnection queryContactsUsingPredicate:sortDescriptors:limit:reply:]

0x100001460-[CDPeopleDaemonConnection countInteractionsUsingPredicate:reply:]

0x100001524-[CDPeopleDaemonConnection countContactsUsingPredicate:reply:]

0x1000015e8-[CDPeopleDaemonConnection deleteInteractionsMatchingPredicate:sortDescriptors:limit:reply:]

0x1000016d8-[CDPeopleDaemonConnection deleteInteractionsWithBundleId:reply:]

0x10000179c-[CDPeopleDaemonConnection deleteInteractionsWithBundleId:account:reply:]

0x10000187c-[CDPeopleDaemonConnection deleteInteractionsWithBundleId:domainIdentifier:reply:]

0x10000195c-[CDPeopleDaemonConnection deleteInteractionsWithBundleId:domainIdentifiers:reply:]

0x100001a3c-[CDPeopleDaemonConnection rankCandidateContacts:usingSettings:reply:]

0x100001b04-[CDPeopleDaemonConnection adviseInteractionsUsingSettings:reply:]

0x100001bb4-[CDPeopleDaemonConnection adviseInteractionsForDate:usingSettings:reply:]

0x100001c7c-[CDPeopleDaemonConnection adviseSocialInteractionsForDate:andSeedContacts:usingSettings:reply:]

0x100001d50-[CDPeopleDaemonConnection adviseInteractionsForKeywordsInString:usingSettings:reply:]

0x100001e18-[CDPeopleDaemonConnection tuneSocialAdvisorUsingSettings:heartBeatHandler:reply:]

0x100001edc-[CDPeopleDaemonConnection suggestInteractionsFromContext:maxSuggestions:reply:]

0x100001fc4-[CDPeopleDaemonConnection reportShareSheetTimeoutWithReply:]

Imports194 symbols from 9 dylibs

libSystem.B.dylib84 CoreDuet39 libobjc.A.dylib28 Foundation17 CoreFoundation14

Exports1

_mh_execute_header0x0

Similar Binaries1,470 comparable

videosubscriptionsd

proactiveeventtrackerd