• Sources: primary, discussion
  • Summary: The MIT-licensed repository, at 8,900 stars and 1,300 forks, states it boots a virtual iPhone using Apple's Virtualization.framework and PCC research VM infrastructure, and lists prerequisites of Apple Silicon, macOS 15 or later, Xcode with the iOS SDK, and SIP or AMFI relaxation to allow private PV=3 entitlements with unsigned binaries, by two documented routes. It ships five firmware patch variants, from less at 4 boot-chain patches, which keeps iOS mitigations enabled, to exp at 141 patches including anti-VM-detection research patches. It exposes a host control socket for screenshots, touch, swipes, hardware keys, and clipboard, each action returning an inline screenshot, points to a separate MCP server wrapping it, lists a tested host and guest matrix, and publishes no tagged release.
  • Why it matters: An iOS guest that exposes a scriptable control socket makes device-level automated testing possible without hardware, and the entry price is turning off the host's own code-signing enforcement.

send feedback on this story