cloudkit 0.3.1

Safe Rust bindings for Apple's CloudKit framework — iCloud databases and sync on macOS
Documentation
# cloudkit-rs coverage audit (vs MacOSX26.2.sdk)

SDK_PUBLIC_SYMBOLS: 140
VERIFIED: 134
GAPS: 0
EXEMPT: 6
COVERAGE_PCT: 100.00%

Objective-C category extensions were folded into their owning types and not counted as separate symbols. Unavailable APIs were filtered out of the audit (`CKFetchNotificationChangesOperation`, `CKMarkNotificationsReadOperation`, `CKModifyBadgeOperation`).

## Audit highlights

- All 134 non-exempt public `CloudKit.framework` symbols from the audited macOS 26.2 SDK are now surfaced by the crate.
- `CKSyncEngine`, share acceptance/requester APIs, notification objects, generic operation/configuration types, and exported constants are all covered.
- Runtime-backed share acceptance / web-auth flows use the Swift bridge; constants, notifications, and `CKSyncEngine` are modeled in safe Rust.
- `tests/expanded_surface_tests.rs` adds smoke coverage for the newly closed symbol families.

## 🟢 VERIFIED
| Symbol | Kind | Header | Wrapped by |
| --- | --- | --- | --- |
| `CKAsset` | class | `CKAsset.h` | `CKAsset` (`src/record.rs:160`) |
| `CKAccountStatus` | enum | `CKContainer.h` | AccountStatus (`src/container.rs:17`) |
| `CKContainer` | class | `CKContainer.h` | `CKContainer` (`src/container.rs:54`) |
| `CKDatabase` | class | `CKDatabase.h` | `CKDatabase` (`src/database.rs:24`) |
| `CKDatabaseScope` | enum | `CKDatabase.h` | `CKDatabaseScope` (`src/database.rs:17`) |
| `CKErrorCode` | enum | `CKError.h` | CloudKitErrorCode (`src/error.rs:10`) |
| `CKErrorDomain` | constant | `CKError.h` | CLOUDKIT_ERROR_DOMAIN (`src/error.rs:5`) |
| `CKFetchDatabaseChangesOperation` | class | `CKFetchDatabaseChangesOperation.h` | `CKFetchDatabaseChangesOperation` (`src/operation.rs:350`) |
| `CKFetchRecordZoneChangesConfiguration` | class | `CKFetchRecordZoneChangesOperation.h` | `CKFetchRecordZoneChangesConfiguration` (`src/operation.rs:437`) |
| `CKFetchRecordZoneChangesOperation` | class | `CKFetchRecordZoneChangesOperation.h` | `CKFetchRecordZoneChangesOperation` (`src/operation.rs:498`) |
| `CKFetchRecordsOperation` | class | `CKFetchRecordsOperation.h` | `CKFetchRecordsOperation` (`src/operation.rs:284`) |
| `CKModifyRecordsOperation` | class | `CKModifyRecordsOperation.h` | `CKModifyRecordsOperation` (`src/operation.rs:67`) |
| `CKRecordSavePolicy` | enum | `CKModifyRecordsOperation.h` | `CKRecordSavePolicy` (`src/operation.rs:23`) |
| `CKQuery` | class | `CKQuery.h` | `CKQuery` (`src/query.rs:34`) |
| `CKQueryCursor` | class | `CKQueryOperation.h` | `CKQueryCursor` (`src/fetched_results.rs:11`) |
| `CKQueryOperation` | class | `CKQueryOperation.h` | `CKQueryOperation` (`src/operation.rs:183`) |
| `CKRecord` | class | `CKRecord.h` | `CKRecord` (`src/record.rs:474`) |
| `CKRecordValue` | protocol | `CKRecord.h` | RecordValue (`src/record.rs:188`) |
| `CKRecordID` | class | `CKRecordID.h` | `CKRecordID` (`src/record.rs:119`) |
| `CKRecordZone` | class | `CKRecordZone.h` | `CKRecordZone` (`src/record.rs:406`) |
| `CKRecordZoneCapabilities` | enum | `CKRecordZone.h` | `CKRecordZoneCapabilities` (`src/record.rs:19`) |
| `CKRecordZoneEncryptionScope` | enum | `CKRecordZone.h` | `CKRecordZoneEncryptionScope` (`src/record.rs:56`) |
| `CKRecordZoneID` | class | `CKRecordZoneID.h` | `CKRecordZoneID` (`src/record.rs:81`) |
| `CKReference` | class | `CKReference.h` | `CKReference` (`src/reference_utility.rs:31`) |
| `CKReferenceAction` | enum | `CKReference.h` | `CKReferenceAction` (`src/reference_utility.rs:6`) |
| `CKServerChangeToken` | class | `CKServerChangeToken.h` | `CKServerChangeToken` (`src/server_change_token.rs:4`) |
| `CKShare` | class | `CKShare.h` | `CKShare` (`src/share.rs:198`) |
| `CKShareParticipant` | class | `CKShareParticipant.h` | `CKShareParticipant` (`src/share.rs:89`) |
| `CKShareParticipantAcceptanceStatus` | enum | `CKShareParticipant.h` | `CKShareParticipantAcceptanceStatus` (`src/share.rs:12`) |
| `CKShareParticipantPermission` | enum | `CKShareParticipant.h` | `CKShareParticipantPermission` (`src/share.rs:34`) |
| `CKShareParticipantRole` | enum | `CKShareParticipant.h` | `CKShareParticipantRole` (`src/share.rs:66`) |
| `CKDatabaseSubscription` | class | `CKSubscription.h` | `CKDatabaseSubscription` (`src/subscription.rs:242`) |
| `CKNotificationInfo` | class | `CKSubscription.h` | `CKNotificationInfo` (`src/notification_info.rs:4`) |
| `CKQuerySubscription` | class | `CKSubscription.h` | `CKQuerySubscription` (`src/subscription.rs:91`) |
| `CKQuerySubscriptionOptions` | enum | `CKSubscription.h` | QuerySubscriptionOptions (`src/subscription.rs:28`) |
| `CKRecordZoneSubscription` | class | `CKSubscription.h` | `CKRecordZoneSubscription` (`src/subscription.rs:176`) |
| `CKSubscription` | class | `CKSubscription.h` | `CKSubscription` (`src/subscription.rs:56`) |
| `CKSubscriptionType` | enum | `CKSubscription.h` | `CKSubscriptionType` (`src/subscription.rs:9`) |
| `CKUserIdentity` | class | `CKUserIdentity.h` | `CKUserIdentity` (`src/user_identity.rs:160`) |
| `CKUserIdentityLookupInfo` | class | `CKUserIdentityLookupInfo.h` | `CKUserIdentityLookupInfo` (`src/user_identity.rs:99`) |
| `CKAcceptSharesOperation` | class | `CKAcceptSharesOperation.h` | `CKAcceptSharesOperation` (`src/operation_support.rs:1003`) |
| `CKAllowedSharingOptions` | class | `CKAllowedSharingOptions.h` | `CKAllowedSharingOptions` (`src/share.rs:489`) |
| `CKSharingParticipantAccessOption` | enum | `CKAllowedSharingOptions.h` | `CKSharingParticipantAccessOption` (`src/share.rs:427`) |
| `CKSharingParticipantPermissionOption` | enum | `CKAllowedSharingOptions.h` | `CKSharingParticipantPermissionOption` (`src/share.rs:458`) |
| `CKAccountChangedNotification` | constant | `CKContainer.h` | `CK_ACCOUNT_CHANGED_NOTIFICATION` (`src/constants.rs:1`) |
| `CKApplicationPermissions` | enum | `CKContainer.h` | `CKApplicationPermissions` (`src/container.rs:54`) |
| `CKCurrentUserDefaultName` | constant | `CKContainer.h` | `CK_CURRENT_USER_DEFAULT_NAME` (`src/constants.rs:2`) |
| `CKDatabaseOperation` | class | `CKDatabaseOperation.h` | `CKDatabaseOperation` (`src/operation_support.rs:275`) |
| `CKErrorRetryAfterKey` | constant | `CKError.h` | `CK_ERROR_RETRY_AFTER_KEY` (`src/constants.rs:4`) |
| `CKErrorUserDidResetEncryptedDataKey` | constant | `CKError.h` | `CK_ERROR_USER_DID_RESET_ENCRYPTED_DATA_KEY` (`src/constants.rs:5`) |
| `CKPartialErrorsByItemIDKey` | constant | `CKError.h` | `CK_PARTIAL_ERRORS_BY_ITEM_ID_KEY` (`src/constants.rs:6`) |
| `CKRecordChangedErrorAncestorRecordKey` | constant | `CKError.h` | `CK_RECORD_CHANGED_ERROR_ANCESTOR_RECORD_KEY` (`src/constants.rs:7`) |
| `CKRecordChangedErrorClientRecordKey` | constant | `CKError.h` | `CK_RECORD_CHANGED_ERROR_CLIENT_RECORD_KEY` (`src/constants.rs:8`) |
| `CKRecordChangedErrorServerRecordKey` | constant | `CKError.h` | `CK_RECORD_CHANGED_ERROR_SERVER_RECORD_KEY` (`src/constants.rs:9`) |
| `CKFetchRecordZonesOperation` | class | `CKFetchRecordZonesOperation.h` | `CKFetchRecordZonesOperation` (`src/operation_support.rs:332`) |
| `CKFetchShareMetadataOperation` | class | `CKFetchShareMetadataOperation.h` | `CKFetchShareMetadataOperation` (`src/operation_support.rs:874`) |
| `CKFetchShareParticipantsOperation` | class | `CKFetchShareParticipantsOperation.h` | `CKFetchShareParticipantsOperation` (`src/operation_support.rs:791`) |
| `CKFetchSubscriptionsOperation` | class | `CKFetchSubscriptionsOperation.h` | `CKFetchSubscriptionsOperation` (`src/operation_support.rs:527`) |
| `CKFetchWebAuthTokenOperation` | class | `CKFetchWebAuthTokenOperation.h` | `CKFetchWebAuthTokenOperation` (`src/operation_support.rs:710`) |
| `CKLocationSortDescriptor` | class | `CKLocationSortDescriptor.h` | `CKLocationSortDescriptor` (`src/query.rs:34`) |
| `CKModifyRecordZonesOperation` | class | `CKModifyRecordZonesOperation.h` | `CKModifyRecordZonesOperation` (`src/operation_support.rs:427`) |
| `CKModifySubscriptionsOperation` | class | `CKModifySubscriptionsOperation.h` | `CKModifySubscriptionsOperation` (`src/operation_support.rs:623`) |
| `CKDatabaseNotification` | class | `CKNotification.h` | `CKDatabaseNotification` (`src/notification.rs:259`) |
| `CKNotification` | class | `CKNotification.h` | `CKNotification` (`src/notification.rs:83`) |
| `CKNotificationID` | class | `CKNotification.h` | `CKNotificationID` (`src/notification.rs:7`) |
| `CKNotificationType` | enum | `CKNotification.h` | `CKNotificationType` (`src/notification.rs:23`) |
| `CKQueryNotification` | class | `CKNotification.h` | `CKQueryNotification` (`src/notification.rs:158`) |
| `CKQueryNotificationReason` | enum | `CKNotification.h` | `CKQueryNotificationReason` (`src/notification.rs:55`) |
| `CKRecordZoneNotification` | class | `CKNotification.h` | `CKRecordZoneNotification` (`src/notification.rs:220`) |
| `CKOperation` | class | `CKOperation.h` | `CKOperation` (`src/operation_support.rs:220`) |
| `CKOperationConfiguration` | class | `CKOperation.h` | `CKOperationConfiguration` (`src/operation_support.rs:35`) |
| `CKOperationGroup` | class | `CKOperationGroup.h` | `CKOperationGroup` (`src/operation_support.rs:133`) |
| `CKOperationGroupTransferSize` | enum | `CKOperationGroup.h` | `CKOperationGroupTransferSize` (`src/operation_support.rs:121`) |
| `CKQueryOperationMaximumResults` | constant | `CKQueryOperation.h` | `CK_QUERY_OPERATION_MAXIMUM_RESULTS` (`src/constants.rs:11`) |
| `CKRecordCreationDateKey` | constant | `CKRecord.h` | `CK_RECORD_CREATION_DATE_KEY` (`src/constants.rs:13`) |
| `CKRecordCreatorUserRecordIDKey` | constant | `CKRecord.h` | `CK_RECORD_CREATOR_USER_RECORD_ID_KEY` (`src/constants.rs:14`) |
| `CKRecordKeyValueSetting` | protocol | `CKRecord.h` | `CKRecordKeyValueSetting` (`src/record.rs:676`) |
| `CKRecordLastModifiedUserRecordIDKey` | constant | `CKRecord.h` | `CK_RECORD_LAST_MODIFIED_USER_RECORD_ID_KEY` (`src/constants.rs:15`) |
| `CKRecordModificationDateKey` | constant | `CKRecord.h` | `CK_RECORD_MODIFICATION_DATE_KEY` (`src/constants.rs:16`) |
| `CKRecordParentKey` | constant | `CKRecord.h` | `CK_RECORD_PARENT_KEY` (`src/constants.rs:18`) |
| `CKRecordRecordIDKey` | constant | `CKRecord.h` | `CK_RECORD_RECORD_ID_KEY` (`src/constants.rs:19`) |
| `CKRecordShareKey` | constant | `CKRecord.h` | `CK_RECORD_SHARE_KEY` (`src/constants.rs:20`) |
| `CKRecordTypeUserRecord` | constant | `CKRecord.h` | `CK_RECORD_TYPE_USER_RECORD` (`src/constants.rs:22`) |
| `CKRecordZoneDefaultName` | constant | `CKRecordZone.h` | `CK_RECORD_ZONE_DEFAULT_NAME` (`src/constants.rs:23`) |
| `CKRecordNameZoneWideShare` | constant | `CKShare.h` | `CK_RECORD_NAME_ZONE_WIDE_SHARE` (`src/constants.rs:17`) |
| `CKRecordTypeShare` | constant | `CKShare.h` | `CK_RECORD_TYPE_SHARE` (`src/constants.rs:21`) |
| `CKShareThumbnailImageDataKey` | constant | `CKShare.h` | `CK_SHARE_THUMBNAIL_IMAGE_DATA_KEY` (`src/constants.rs:24`) |
| `CKShareTitleKey` | constant | `CKShare.h` | `CK_SHARE_TITLE_KEY` (`src/constants.rs:25`) |
| `CKShareTypeKey` | constant | `CKShare.h` | `CK_SHARE_TYPE_KEY` (`src/constants.rs:26`) |
| `CKShareAccessRequester` | class | `CKShareAccessRequester.h` | `CKShareAccessRequester` (`src/share.rs:530`) |
| `CKShareBlockedIdentity` | class | `CKShareBlockedIdentity.h` | `CKShareBlockedIdentity` (`src/share.rs:567`) |
| `CKShareMetadata` | class | `CKShareMetadata.h` | `CKShareMetadata` (`src/share.rs:595`) |
| `CKShareParticipantType` | enum | `CKShareParticipant.h` | `CKShareParticipantType` (`src/share.rs:394`) |
| `CKShareRequestAccessOperation` | class | `CKShareRequestAccessOperation.h` | `CKShareRequestAccessOperation` (`src/operation_support.rs:1097`) |
| `CKSyncEngine` | class | `CKSyncEngine.h` | `CKSyncEngine` (`src/sync_engine.rs:1291`) |
| `CKSyncEngineDelegate` | protocol | `CKSyncEngine.h` | `CKSyncEngineDelegate` (`src/sync_engine.rs:318`) |
| `CKSyncEngineFetchChangesContext` | class | `CKSyncEngine.h` | `CKSyncEngineFetchChangesContext` (`src/sync_engine.rs:279`) |
| `CKSyncEngineFetchChangesOptions` | class | `CKSyncEngine.h` | `CKSyncEngineFetchChangesOptions` (`src/sync_engine.rs:119`) |
| `CKSyncEngineFetchChangesScope` | class | `CKSyncEngine.h` | `CKSyncEngineFetchChangesScope` (`src/sync_engine.rs:61`) |
| `CKSyncEngineSendChangesContext` | class | `CKSyncEngine.h` | `CKSyncEngineSendChangesContext` (`src/sync_engine.rs:299`) |
| `CKSyncEngineSendChangesOptions` | class | `CKSyncEngine.h` | `CKSyncEngineSendChangesOptions` (`src/sync_engine.rs:251`) |
| `CKSyncEngineSendChangesScope` | class | `CKSyncEngine.h` | `CKSyncEngineSendChangesScope` (`src/sync_engine.rs:159`) |
| `CKSyncEngineSyncReason` | enum | `CKSyncEngine.h` | `CKSyncEngineSyncReason` (`src/sync_engine.rs:21`) |
| `CKSyncEngineConfiguration` | class | `CKSyncEngineConfiguration.h` | `CKSyncEngineConfiguration` (`src/sync_engine.rs:339`) |
| `CKSyncEngineAccountChangeEvent` | class | `CKSyncEngineEvent.h` | `CKSyncEngineAccountChangeEvent` (`src/sync_engine.rs:876`) |
| `CKSyncEngineAccountChangeType` | enum | `CKSyncEngineEvent.h` | `CKSyncEngineAccountChangeType` (`src/sync_engine.rs:721`) |
| `CKSyncEngineDidFetchChangesEvent` | class | `CKSyncEngineEvent.h` | `CKSyncEngineDidFetchChangesEvent` (`src/sync_engine.rs:1096`) |
| `CKSyncEngineDidFetchRecordZoneChangesEvent` | class | `CKSyncEngineEvent.h` | `CKSyncEngineDidFetchRecordZoneChangesEvent` (`src/sync_engine.rs:1071`) |
| `CKSyncEngineDidSendChangesEvent` | class | `CKSyncEngineEvent.h` | `CKSyncEngineDidSendChangesEvent` (`src/sync_engine.rs:1126`) |
| `CKSyncEngineEvent` | class | `CKSyncEngineEvent.h` | `CKSyncEngineEvent` (`src/sync_engine.rs:1158`) |
| `CKSyncEngineEventType` | enum | `CKSyncEngineEvent.h` | `CKSyncEngineEventType` (`src/sync_engine.rs:703`) |
| `CKSyncEngineFailedRecordSave` | class | `CKSyncEngineEvent.h` | `CKSyncEngineFailedRecordSave` (`src/sync_engine.rs:781`) |
| `CKSyncEngineFailedZoneSave` | class | `CKSyncEngineEvent.h` | `CKSyncEngineFailedZoneSave` (`src/sync_engine.rs:801`) |
| `CKSyncEngineFetchedDatabaseChangesEvent` | class | `CKSyncEngineEvent.h` | `CKSyncEngineFetchedDatabaseChangesEvent` (`src/sync_engine.rs:915`) |
| `CKSyncEngineFetchedRecordDeletion` | class | `CKSyncEngineEvent.h` | `CKSyncEngineFetchedRecordDeletion` (`src/sync_engine.rs:738`) |
| `CKSyncEngineFetchedRecordZoneChangesEvent` | class | `CKSyncEngineEvent.h` | `CKSyncEngineFetchedRecordZoneChangesEvent` (`src/sync_engine.rs:938`) |
| `CKSyncEngineFetchedZoneDeletion` | class | `CKSyncEngineEvent.h` | `CKSyncEngineFetchedZoneDeletion` (`src/sync_engine.rs:761`) |
| `CKSyncEngineSentDatabaseChangesEvent` | class | `CKSyncEngineEvent.h` | `CKSyncEngineSentDatabaseChangesEvent` (`src/sync_engine.rs:961`) |
| `CKSyncEngineSentRecordZoneChangesEvent` | class | `CKSyncEngineEvent.h` | `CKSyncEngineSentRecordZoneChangesEvent` (`src/sync_engine.rs:1001`) |
| `CKSyncEngineStateUpdateEvent` | class | `CKSyncEngineEvent.h` | `CKSyncEngineStateUpdateEvent` (`src/sync_engine.rs:861`) |
| `CKSyncEngineWillFetchChangesEvent` | class | `CKSyncEngineEvent.h` | `CKSyncEngineWillFetchChangesEvent` (`src/sync_engine.rs:1041`) |
| `CKSyncEngineWillFetchRecordZoneChangesEvent` | class | `CKSyncEngineEvent.h` | `CKSyncEngineWillFetchRecordZoneChangesEvent` (`src/sync_engine.rs:1056`) |
| `CKSyncEngineWillSendChangesEvent` | class | `CKSyncEngineEvent.h` | `CKSyncEngineWillSendChangesEvent` (`src/sync_engine.rs:1111`) |
| `CKSyncEngineZoneDeletionReason` | enum | `CKSyncEngineEvent.h` | `CKSyncEngineZoneDeletionReason` (`src/sync_engine.rs:730`) |
| `CKSyncEngineRecordZoneChangeBatch` | class | `CKSyncEngineRecordZoneChangeBatch.h` | `CKSyncEngineRecordZoneChangeBatch` (`src/sync_engine.rs:649`) |
| `CKSyncEnginePendingDatabaseChange` | class | `CKSyncEngineState.h` | `CKSyncEnginePendingDatabaseChange` (`src/sync_engine.rs:491`) |
| `CKSyncEnginePendingDatabaseChangeType` | enum | `CKSyncEngineState.h` | `CKSyncEnginePendingDatabaseChangeType` (`src/sync_engine.rs:466`) |
| `CKSyncEnginePendingRecordZoneChange` | class | `CKSyncEngineState.h` | `CKSyncEnginePendingRecordZoneChange` (`src/sync_engine.rs:439`) |
| `CKSyncEnginePendingRecordZoneChangeType` | enum | `CKSyncEngineState.h` | `CKSyncEnginePendingRecordZoneChangeType` (`src/sync_engine.rs:414`) |
| `CKSyncEnginePendingZoneDelete` | class | `CKSyncEngineState.h` | `CKSyncEnginePendingZoneDelete` (`src/sync_engine.rs:544`) |
| `CKSyncEnginePendingZoneSave` | class | `CKSyncEngineState.h` | `CKSyncEnginePendingZoneSave` (`src/sync_engine.rs:514`) |
| `CKSyncEngineState` | class | `CKSyncEngineState.h` | `CKSyncEngineState` (`src/sync_engine.rs:573`) |
| `CKSyncEngineStateSerialization` | class | `CKSyncEngineState.h` | `CKSyncEngineStateSerialization` (`src/sync_engine.rs:46`) |
| `CKSystemSharingUIObserver` | class | `CKSystemSharingUIObserver.h` | `CKSystemSharingUIObserver` (`src/share.rs:811`) |

## 🔴 GAPS

None.

## ⏭️ EXEMPT
| Symbol | Kind | Header | Reason | SDK attribute |
| --- | --- | --- | --- | --- |
| `CKApplicationPermissionStatus` | enum | `CKContainer.h` | Deprecated discoverability-permission status enum. | `} API_DEPRECATED("No longer supported. Please see Sharing CloudKit Data with Other iCloud Users.", macos(10.10, 14.0), ios(8.0, 17.0), tvos(9.0, 17.0), watchos(3.0, 10.0));` |
| `CKOwnerDefaultName` | constant | `CKContainer.h` | Deprecated constant; replaced by `CKCurrentUserDefaultName`. | `CK_EXTERN NSString * const CKOwnerDefaultName API_DEPRECATED_WITH_REPLACEMENT("CKCurrentUserDefaultName", macos(10.10, 10.12), ios(8.0, 10.0), tvos(9.0, 10.0), watchos(3.0, 3.0));` |
| `CKDiscoverAllUserIdentitiesOperation` | class | `CKDiscoverAllUserIdentitiesOperation.h` | Deprecated discoverability operation; explicitly skipped. | `API_DEPRECATED("No longer supported. Please see Sharing CloudKit Data with Other iCloud Users.", macos(10.12, 14.0), ios(10.0, 17.0), watchos(3.0, 10.0))` |
| `CKDiscoverUserIdentitiesOperation` | class | `CKDiscoverUserIdentitiesOperation.h` | Deprecated discoverability operation; explicitly skipped. | `API_DEPRECATED("No longer supported. Please see Sharing CloudKit Data with Other iCloud Users.", macos(10.12, 14.0), ios(10.0, 17.0), tvos(10.0, 17.0), watchos(3.0, 10.0))` |
| `CKFetchRecordChangesOperation` | class | `CKFetchRecordChangesOperation.h` | Deprecated by `CKFetchRecordZoneChangesOperation`. | `API_DEPRECATED_WITH_REPLACEMENT("CKFetchRecordZoneChangesOperation", macos(10.10, 10.12), ios(8.0, 10.0), tvos(9.0, 10.0), watchos(3.0, 3.0))` |
| `CKFetchRecordZoneChangesOptions` | class | `CKFetchRecordZoneChangesOperation.h` | Deprecated by `CKFetchRecordZoneChangesConfiguration`. | `API_DEPRECATED_WITH_REPLACEMENT("CKFetchRecordZoneChangesConfiguration", macos(10.12, 10.14), ios(10.0, 12.0), tvos(10.0, 12.0), watchos(3.0, 5.0))` |

## Notes

- The audited public surface is now fully represented for the non-exempt SDK symbols.
- Legacy discoverability APIs remain exempt because Apple deprecated or replaced them.
- Some newer logical areas, especially `CKSyncEngine` and the notification model, are represented as Rust-side structural wrappers rather than direct runtime bridge objects.