ROGUE PIXEL · Illustrative scenario

One permission. Every later read.

Code-generated illustration, not incident footage.

Read the comic

A code-generated illustration, not incident footage. Captions: "Apple is tightening Full Disk Access.", "One grant can reach messages and history." and "Going forward: very explicit user action." A chat labelled macOS · FULL DISK ACCESS (header: ILLUSTRATIVE · BASED ON APPLE'S NOTE) shows a user granting FDA once, an agent reading Messages and browsing history, then an Apple notice on explicit consent. Aside: "A yes once. Then a thousand reads." Closing lesson: "Permission isn't judgment". judge each action by what it touches, not by the permission granted at install.

Apple plans clearer consent controls for macOS Full Disk Access as AI agents grow more autonomous. This comic illustrates why permission alone cannot judge each later action.

THE CONTROL LESSON

What should we watch for?

Ackuity's view: a permission granted once is not a judgment of each action. Judge each agent action by what it touches, not by the Full Disk Access checkbox clicked at install.

THE EVIDENCE

What does the report establish?

This is an illustrative scenario, not a reported breach. Apple announced a consent change, not a new limit on what Full Disk Access permits. Apple did not name Meta or Muse. Separately, Meta disputes claims about unauthorized Muse message access and says its Messages integration requires both Full Disk Access and an enabled connector.

Read the full account

On October 2, 2026, Apple announced plans for additional macOS Full Disk Access controls. Its developer note warns that this permission can expose files, mail, messages and browsing history, and that autonomous AI agents increase the risk. Apple wants users to understand that scope and deliberately approve it. The announcement gives no release date and names no specific app.

Full Disk Access is a one-time grant that can reach sensitive local data agents then use repeatedly. When that permission is easy to misunderstand, a yes at install becomes a blank check for every later read of mail, messages, files, or history.

Explore Ackuity’s Agent Execution Control Switch →