//! Fresh-process probe of TCC Accessibility permission.
//!
//! `AXIsProcessTrusted()` in already-running processes can return
//! cached-true for an unbounded window after the user *removes* the
//! app's entry from System Settings → Privacy & Security →
//! Accessibility (vs *toggling* it off, which flips the cache
//! promptly). To detect the "remove" case, the daemon spawns a fresh
//! subprocess of the same binary that runs this probe — a fresh
//! process consults the current TCC state without inheriting the
//! parent's cached trust. See `macos_tcc_watch` for the watcher loop.
unsafe extern "C"