Two findings from the latest Apple betas point in the same direction. Siri is being taught to remember a lot more about you, and Apple is tightening the one Mac permission that third-party AI agents lean on to read everything on your computer.
Neither feature is finished, and Apple hasn’t announced either one. But side by side, they show how Apple is preparing for assistants that act on your behalf: build the memory on its own terms, and make it harder for outside agents to grab the same data.
A “memory graph” for Siri
Code explorer pdfu found an unfinished personal memory system in the iOS 27.3 beta, as reported by MacRumors. It includes a “memory graph” designed to organize information about your relationships, places, routines, health, workouts, and what motivates you or holds you back.
The system breaks that information into “memory atoms” for facts, opinions, intentions, and events, each tied to the people, places, times, and topics involved. According to the findings, it gathers them two ways:
- Structured data, like reading the name fields on your own contact card.
- AI extraction, using an on-device model or Private Cloud Compute to pull insights from sources including Siri conversations, messages, photos, and health data.
Only one of the AI-driven processes appears to exist so far. pdfu believes it’s meant to identify motivations, barriers, and resources using a set of 60 built-in questions, including ones about routines that might get in the way of good sleep. There’s no process yet that actually creates memory atoms, and a separate store for memories you’d explicitly ask Siri to keep has room for records but nothing writing to it.
Both systems reportedly run on Apple’s version of the Kuzu graph database. Apple acquired Kuzu in 2025.
Siri can already find personal context in Mail, Messages, and Photos. A memory graph would go further, letting it keep a running picture of your life instead of searching for it each time you ask.
Full Disk Access gets harder to hand out
On the Mac, Apple is going the other way for third-party software. In a developer post, Apple said it plans additional controls so that users can grant an app Full Disk Access only through very explicit action, according to Silicon Report. Apple said some developers use the privilege in ways that expose personal files, email, messages, and browsing history without users fully understanding it, and that the risk will grow as autonomous AI agents spread.
Today, when an app asks for files outside its allowed scope, macOS denies the request and lists the app in Settings so you can flip a Full Disk Access toggle. Starting as early as macOS 27.3, pdfu reports, those apps will no longer be added to that list automatically. Developers could still have you drag an app’s icon into the Settings panel yourself.
The catch is that people grant Full Disk Access to AI tools largely because macOS has no narrower way to let them read things like your iMessage history. pdfu says Apple is considering an idea called Private Folders that could grant access to a specific folder, such as the Messages database, instead of the whole drive. Apple hasn’t confirmed it will ship.
Our take
This is the privacy-first version of the agent race. Apple wants Siri to know your routines, relationships, and health, and it wants that knowledge processed on device or in Private Cloud Compute. At the same time it’s raising the bar for outside agents that want a master key to your Mac.
That’s a reasonable line, but it only works if users get clear controls over what Siri’s memory holds. Nothing found so far shows how you’d view, edit, or delete those memory atoms, and that’s the part to watch as these betas move toward release. macOS 27.3 is expected in December; there’s no timeline for the Siri memory system.
Sources: MacRumors (Nov. 9) and Silicon Report (Nov. 8), both citing code findings from pdfu, plus Apple’s developer post on Full Disk Access.
Reporting reference: MacRumors ↗