<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
	<key>com.apple.security.app-sandbox</key>
	<true/>
	<key>com.apple.security.files.user-selected.read-write</key>
	<true/>
	<key>com.apple.security.files.bookmarks.app-scope</key>
	<true/>
	<!-- Remotes: pull/push and auth (07-sync-collab.md), which only the git provider ever makes.
	     **Declared now, dormant until Pro ships** — the one-app collapse traded "the free app
	     provably has no network access" for "no network use until you subscribe", with eyes open
	     (12-editions.md ▸ The target, re-ruled 2026-07-30). It sits in the shipped entitlements
	     from the start because a key added later is a new provisioning profile and a new review
	     surface for what is meant to be a StoreKit-only change. No `keychain-access-groups`
	     alongside it: a group shares items *between* apps, and there is one app — Pro's
	     credentials go to the sandbox's own keychain, which needs no key at all. -->
	<key>com.apple.security.network.client</key>
	<true/>
	<!-- No `com.apple.security.application-groups`: a group exists to share a container *between*
	     apps, and there is one app (12-editions.md ▸ App-side state, re-ruled 2026-07-30). The
	     board registry and its Application Support peers home in the ordinary sandbox container
	     (`AppStateHome`), which the sandbox already scopes to this app alone. -->
</dict>
</plist>
