Update — root cause found and a working workaround I cracked it. Posting the solution here so other admins can stop trying random bundle IDs. Root cause (confirmed via watchOS sysdiagnose) When you install a profile with com.apple.applicationaccess + allowListedAppBundleIDs, lsd on the paired Apple Watch immediately sends uninstalledNotifications for every PluginKit extension whose bundle ID is NOT in the whitelist. The watch's Carousel then cascades by terminating the parent apps that own those extensions, disguising the action as user initiated quit. Captured from watchOS sysdiagnose at the moment of profile install: 17:22:56 lsd: Sending uninstalledNotifications for ( pluginID=com.apple.MobileSMS.MessagesAssistantExtension pluginID=com.apple.tincan.SiriExtension pluginID=com.apple.SessionTrackerApp.SessionTrackerSiriExtension ) 17:23:13 Carousel: com.apple.MobileSMS: terminateApplication - uninstalling app (user initiated quit) 17:23:13 Carousel: com.apple.tincan: terminateApplication - uninstalling app (u
Topic:
Business & Education
SubTopic:
Device Management
Tags: