============================================================ EVIDENCE LOG — Apple Watch native apps disappear when allowListedAppBundleIDs payload is installed Source: idevicesyslog captures from iPhone 16, iOS 26.4.2 Test profile: com.apple.applicationaccess with 295 bundle IDs (v2 — includes extensions of all Apple system apps) ============================================================ ─── [1] iOS profile installer warns: payload not supported on watchOS ─── ─── (but installs it anyway) May 12 17:51:18.555490 profiled[179] : Payload class MCRestrictionsPayload (com.apple.applicationaccess) is not supported on any Watch version: ( May 12 17:51:18.555826 profiled[179] : Payload class MCRestrictionsPayload (com.apple.applicationaccess) is not available on HomePod May 12 17:51:23.938670 profiled[179] : Beginning profile installation... May 12 17:51:23.939477 profiled[179] : Beginning profile installation for isaac.watch-bug.profile.v2.271FAC5B-8A15-464D-9EBE-09A65DF384FA May 12 17:51:25.812478 profiled[179] : Installing payload handler: May 12 17:51:26.033233 profiled[179] : Profile “isaac.watch-bug.profile.v2.271FAC5B-8A15-464D-9EBE-09A65DF384FA” installed. ─── [2] cfgutil triggered the install at 17:51:23-29 ─── ─── User completed Settings > Profile Downloaded > Install manually May 12 17:51:23.938670 profiled[179] : Beginning profile installation... May 12 17:51:23.939477 profiled[179] : Beginning profile installation for isaac.watch-bug.profile.v2.271FAC5B-8A15-464D-9EBE-09A65DF384FA May 12 17:51:25.812478 profiled[179] : Installing payload handler: May 12 17:51:26.033233 profiled[179] : Profile “isaac.watch-bug.profile.v2.271FAC5B-8A15-464D-9EBE-09A65DF384FA” installed. May 12 17:51:26.064167 wifid(WiFiPolicy)[55] : WiFi debug profile is not installed ─── [3] SMOKING GUN — nanotimekitcompaniond fails to enumerate ─── ─── .app/Watch/ subdirectories ──────────────── May 12 17:51:27.660786 nanotimekitcompaniond(NanoTimeKit)[1498] : Error. Missing .app from directory: file:///Applications/MobilePhone.app/Watch/ May 12 17:51:27.661134 nanotimekitcompaniond(NanoTimeKit)[1498] : Error. Missing .app from directory: file:///private/var/containers/Bundle/Application/277BEFA6-889A-4C93-856A-33538EF84D3D/Calculator.app/Watch/ May 12 17:51:27.661517 nanotimekitcompaniond(NanoTimeKit)[1498] : Error. Missing .app from directory: file:///private/var/containers/Bundle/Application/C3E02989-B0A7-4154-8C23-B1F6305445B3/Bridge.app/Watch/ May 12 17:51:27.662886 nanotimekitcompaniond(NanoTimeKit)[1498] : Error. Missing .app from directory: file:///private/var/containers/Bundle/Application/EF03D96E-6532-48F8-81E4-D119EA134D90/MobileTimer.app/Watch/ May 12 17:51:27.663941 nanotimekitcompaniond(NanoTimeKit)[1498] : Error. Missing .app from directory: file:///private/var/containers/Bundle/Application/6A5EB0BE-6290-47B2-BA03-D84F8AD880AF/Camera.app/Watch/ May 12 17:51:27.664223 nanotimekitcompaniond(NanoTimeKit)[1498] : Error. Missing .app from directory: file:///private/var/containers/Bundle/Application/7B9A1B13-E2F9-4340-B559-9D7C107093A1/VoiceMemos.app/Watch/ May 12 17:51:27.664907 nanotimekitcompaniond(NanoTimeKit)[1498] : Error. Missing .app from directory: file:///private/var/containers/Bundle/Application/8871ECC8-C89D-4607-9E53-42B0AC980AB9/MobileMail.app/Watch/ May 12 17:51:27.665384 nanotimekitcompaniond(NanoTimeKit)[1498] : Error. Missing .app from directory: file:///private/var/containers/Bundle/Application/7B419C3C-5340-42C0-AC48-DDB878CDC95C/FindMy.app/Watch/ May 12 17:51:27.674028 NTKFaceSnapshotService(NanoTimeKit)[3758] : Error. Missing .app from directory: file:///Applications/MobilePhone.app/Watch/ May 12 17:51:27.678946 NTKFaceSnapshotService(NanoTimeKit)[3758] : Error. Missing .app from directory: file:///private/var/containers/Bundle/Application/277BEFA6-889A-4C93-856A-33538EF84D3D/Calculator.app/Watch/ May 12 17:51:27.679096 NTKFaceSnapshotService(NanoTimeKit)[3758] : Error. Missing .app from directory: file:///private/var/containers/Bundle/Application/C3E02989-B0A7-4154-8C23-B1F6305445B3/Bridge.app/Watch/ May 12 17:51:27.679696 NTKFaceSnapshotService(NanoTimeKit)[3758] : Error. Missing .app from directory: file:///private/var/containers/Bundle/Application/EF03D96E-6532-48F8-81E4-D119EA134D90/MobileTimer.app/Watch/ May 12 17:51:27.681423 NTKFaceSnapshotService(NanoTimeKit)[3758] : Error. Missing .app from directory: file:///private/var/containers/Bundle/Application/6A5EB0BE-6290-47B2-BA03-D84F8AD880AF/Camera.app/Watch/ May 12 17:51:27.683227 NTKFaceSnapshotService(NanoTimeKit)[3758] : Error. Missing .app from directory: file:///private/var/containers/Bundle/Application/7B9A1B13-E2F9-4340-B559-9D7C107093A1/VoiceMemos.app/Watch/ May 12 17:51:27.685619 NTKFaceSnapshotService(NanoTimeKit)[3758] : Error. Missing .app from directory: file:///private/var/containers/Bundle/Application/8871ECC8-C89D-4607-9E53-42B0AC980AB9/MobileMail.app/Watch/ May 12 17:51:27.686653 NTKFaceSnapshotService(NanoTimeKit)[3758] : Error. Missing .app from directory: file:///private/var/containers/Bundle/Application/7B419C3C-5340-42C0-AC48-DDB878CDC95C/FindMy.app/Watch/ ─── [4] These iOS apps' Watch/ subdirectories went 'Missing': ─── file:///Applications/MobilePhone.app/Watch/ file:///private/var/containers/Bundle/Application/277BEFA6-889A-4C93-856A-33538EF84D3D/Calculator.app/Watch/ file:///private/var/containers/Bundle/Application/6A5EB0BE-6290-47B2-BA03-D84F8AD880AF/Camera.app/Watch/ file:///private/var/containers/Bundle/Application/7B419C3C-5340-42C0-AC48-DDB878CDC95C/FindMy.app/Watch/ file:///private/var/containers/Bundle/Application/7B9A1B13-E2F9-4340-B559-9D7C107093A1/VoiceMemos.app/Watch/ file:///private/var/containers/Bundle/Application/8871ECC8-C89D-4607-9E53-42B0AC980AB9/MobileMail.app/Watch/ file:///private/var/containers/Bundle/Application/C3E02989-B0A7-4154-8C23-B1F6305445B3/Bridge.app/Watch/ file:///private/var/containers/Bundle/Application/EF03D96E-6532-48F8-81E4-D119EA134D90/MobileTimer.app/Watch/ ─── [5] tursd (Walkie-Talkie daemon) reacts to profile install ─── ─── It receives a 'profile list changed' notification, invalidates ─── caches, and looks up its prefs in /var/Managed Preferences/ ── May 12 17:21:45.956242 tursd(ManagedConfiguration)[47] : Received profile list changed notification May 12 17:21:46.006006 tursd(ManagedConfiguration)[47] : Invalidating caches May 12 17:21:46.026850 tursd(ManagedConfiguration)[47] : Sending out a localized restriction source notification! May 12 17:21:59.055486 cfprefsd(CoreFoundation)[113] : Process 47 (tursd) sent a request related to { com.apple.tursd, user: kCFPreferencesAnyUser, kCFPreferencesCurrentHost, /var/Managed Preferences/com.apple.tursd.plist, managed: 1 } (0x67ad60820) May 12 17:21:59.056167 cfprefsd(CoreFoundation)[113] : Process 47 (tursd) sent a request related to { com.apple.tincan, user: kCFPreferencesAnyUser, kCFPreferencesCurrentHost, /var/Managed Preferences/com.apple.tincan.plist, managed: 1 } (0x67ad61c20) May 12 17:21:59.062338 cfprefsd(CoreFoundation)[113] : Process 47 (tursd) sent a request related to { kCFPreferencesAnyApplication, user: kCFPreferencesAnyUser, kCFPreferencesCurrentHost, /var/Managed Preferences/.GlobalPreferences.plist, managed: 1 } (0x67ad63160) May 12 17:21:59.111077 cfprefsd(CoreFoundation)[112] : Process 47 (tursd) sent a request related to { kCFPreferencesAnyApplication, user: mobile, kCFPreferencesCurrentHost, /var/Managed Preferences/mobile/.GlobalPreferences.plist, managed: 1 } (0x6cd014820) May 12 17:21:59.111238 cfprefsd(CoreFoundation)[112] : Process 47 (tursd) read data for { kCFPreferencesAnyApplication, mobile, kCFPreferencesCurrentHost, /var/Managed Preferences/mobile/.GlobalPreferences.plist, managed: 1 }, backed by /private/var/Managed Preferences/mobile/.GlobalPreferences.plist May 12 17:21:59.112116 cfprefsd(CoreFoundation)[112] : Process 47 (tursd) sent a request related to { com.apple.tincan, user: mobile, kCFPreferencesCurrentHost, /var/Managed Preferences/mobile/com.apple.tincan.plist, managed: 1 } (0x6cd286940) May 12 17:21:59.112179 cfprefsd(CoreFoundation)[112] : Process 47 (tursd) sent a request related to { com.apple.tursd, user: mobile, kCFPreferencesCurrentHost, /var/Managed Preferences/mobile/com.apple.tursd.plist, managed: 1 } (0x6cd286300) ─── [6] cfprefsd marks com.apple.tincan plist as 'managed' even ─ ─── though the corresponding /var/Managed Preferences/com.apple. ─── tincan.plist remains an empty plist ──────────────────────── May 12 17:21:59.056167 cfprefsd(CoreFoundation)[113] : Process 47 (tursd) sent a request related to { com.apple.tincan, user: kCFPreferencesAnyUser, kCFPreferencesCurrentHost, /var/Managed Preferences/com.apple.tincan.plist, managed: 1 } (0x67ad61c20) May 12 17:21:59.056596 cfprefsd(CoreFoundation)[113] : Notifying observers of { com.apple.tincan, managed: 1 } May 12 17:21:59.086891 cfprefsd(CoreFoundation)[112] : Notifying observers of { com.apple.tincan, managed: 1 } May 12 17:21:59.101932 tursd(CoreFoundation)[47] : CFPrefsManagedSource<0x7b506b780> (Domain: com.apple.tincan, User: kCFPreferencesAnyUser, ByHost: Yes, Container: (null), Contents Need Refresh: No) loaded: an empty base plist and no additional changes from the base plist May 12 17:21:59.112116 cfprefsd(CoreFoundation)[112] : Process 47 (tursd) sent a request related to { com.apple.tincan, user: mobile, kCFPreferencesCurrentHost, /var/Managed Preferences/mobile/com.apple.tincan.plist, managed: 1 } (0x6cd286940) May 12 17:21:59.122247 tursd(CoreFoundation)[47] : CFPrefsManagedSource<0x7b506b700> (Domain: com.apple.tincan, User: kCFPreferencesCurrentUser, ByHost: Yes, Container: (null), Contents Need Refresh: No) loaded: an empty base plist and no additional changes from the base plist May 12 17:21:59.138292 cfprefsd(CoreFoundation)[113] : Process 47 (tursd) sent a request related to { com.apple.tincan, user: kCFPreferencesAnyUser, kCFPreferencesCurrentHost, /var/Managed Preferences/com.apple.tincan.plist, managed: 1 } (0x67ad638e0) May 12 17:21:59.139283 cfprefsd(CoreFoundation)[113] : Notifying observers of { com.apple.tincan, managed: 1 } ─── [7] At remove time, profiled cleanly recomputes restrictions ─── (when iPhone is unlocked), apps reappear on Watch in ~5 sec ─ May 12 17:45:06.811013 profiled[179] : Removing profile “isaac.watch-bug.profile.969334B6-68FA-4E07-91D4-F4D9DE5AA078” on behalf of “com.apple.dmd”... May 12 17:45:06.811150 profiled[179] : Profile “isaac.watch-bug.profile.969334B6-68FA-4E07-91D4-F4D9DE5AA078” being removed. May 12 17:45:06.833473 profiled[179] : Committing restrictions. May 12 17:45:06.968004 profiled[179] : Recomputing app options. May 12 17:45:08.680957 profiled[179] : Profile “isaac.watch-bug.profile.969334B6-68FA-4E07-91D4-F4D9DE5AA078“ removed May 12 17:45:08.735667 profiled[179] : Recomputing app options. ─── [8] Counter-test: when iPhone is LOCKED during remove, ────── ─── profiled cannot complete the recompute ──────────────────── May 12 17:37:13.030151 profiled[179] : MCRestrictionManagerWriter cannot recompute nag metadata because the device is locked. May 12 17:37:13.031839 profiled[179] : MCRestrictionManagerWriter cannot recompute nag metadata because the device is locked. ═══════════════════════════════════════════════════════════════ TEST MATRIX ═══════════════════════════════════════════════════════════════ v1 whitelist: 249 bundle IDs (all installed iOS apps including com.apple.tincan, com.apple.MobileSMS, com.apple.findmy, com.apple.Bridge, com.apple.mobilephone, all 3rd party). RESULT: Walkie-Talkie / Messages / Find My disappear from Watch. v2 whitelist: 295 bundle IDs (v1 + every Apple system app's extensions and Nano* companions discovered in syslog: *.MessagesActionExtension, *.FindMyNotifications*Extension, *.FindMyWidget*, com.apple.NanoBackup, com.apple.NanoMusicSync, com.apple.NanoPreferencesSync, com.apple.NanoUniverse.AegirProxyApp, com.apple.tursd, com.apple.FaceTime.FTConversationService, etc.). RESULT: Same. Missing .app errors are IDENTICAL. Conclusion: this is not a bundle ID matching issue. The system fails to enumerate .app/Watch/ subdirectories regardless of which bundle IDs are present in the whitelist.