{"schema_version":"0.10.0","id":"LR-2026-0555","record_version":1,"title":"Apple Support app v5.13 accidentally included Claude.md","verification":{"human_verified":false,"method":"automated_gate","auto_verified":true,"score":46.3,"score_breakdown":{"source_authority":12.1,"independent_corroboration":7.0,"implicated_party_confirmed":0.0,"citation_integrity":14.0,"specificity":3.0,"completeness":2.88,"unhedged_language":5.0},"checks":{"schema_valid":true,"every_field_cited":true,"quotes_verbatim":true,"source_fetched":true,"distinct_incident":true,"dates_plausible":true,"sources_agree":true,"source_describes_incident":true,"severe_backed_by_source":true,"record_integrity":true,"eligible":true,"about_this_case":true},"gate_version":"gate-2026-10-18.7","cross_check_model":null,"cross_check_agreement":null,"duplicate_of":null,"verified_by":null,"verified_at":"2026-11-01","extraction_run_id":null,"evidence_level":{"level":"preliminary","reason":"1 report: 36Kr · subject to change","original_document":null,"reports_total":1,"reports_independent":1,"reports_derivative":0,"developing":false,"disputed":false,"rules_version":"evidence-2026-10-29.1","computed_at":"2026-11-01","history":[{"date":"2026-11-01","from_level":null,"to_level":"preliminary","reason":"1 report: 36Kr · subject to change"}]},"sources_hash":"0acf20d573371145d10f8316ac1f40ec34089c77b145ca02ae865e8d387e6469"},"system":{"model_name":null,"model_version":null,"developer":"Apple","harness":null,"tools_granted":[],"permissions_scope":null,"autonomy_level":"unknown","guardrails_present":[],"deployment_context":"unknown","tier":null,"lifecycle_stage":null,"integration_type":null,"intended_use":"Official after-sales service app with online chat with Apple experts","safeguard_state":null,"production_intended":null},"event":{"date_occurred":null,"date_disclosed":"2026-05-01","incident_class":"operational_error","failure_class":null,"agent_involved":null,"secondary_failure_classes":[],"trigger":"unknown","duration":null,"detection_method":"third_party","summary":"Apple's Apple Support app, version v5.13, was pushed as an update on May 1 and unexpectedly included a Claude.md file. The source describes such a file as one that tells an AI what a project is, how to build it, and what to avoid, and says Apple uses Claude Code internally to build production-level applications. The file exposed the app's dialogue architecture, in which an automatic AI backend and human agents switch through a protocol layer. Aaron Perris, an analyst at MacRumors, discovered it. Apple recalled the update within 24 hours, but some content was already exposed. The source says the file itself contained no secrets, and it raises questions about how AI-written code reached a release package despite review.","tags":[],"date_detected":null,"near_miss":null,"root_cause":null,"root_cause_detail":null,"failure_class_detail":null,"responsible_party":null,"adversarial_actor":null,"input_provenance":null,"time_to_contain":null,"operations_paused":null,"remediation":null,"precursor_events":null},"impact":{"direct_loss_usd":null,"remediation_hours":null,"records_exposed":null,"third_parties_affected_count":null,"severity":"minor","severity_because":"Test: contained to one deployer, routine cleanup, no third party touched. Fact: Apple recalled the update within 24 hours; no third-party effect is stated.","harm_class":[],"affected_description":null,"protected_class_involved":null,"data_categories_exposed":[],"loss_range_usd":null,"reversibility":null,"downstream_exposure_count":null},"evidence":{"sources":[{"url":"https://eu.36kr.com/en/p/3791662444911617","publisher":"36Kr","date":"2026-05-01","type":"press","title":"Apple's Official App Accidentally Included Claude.md: Is a Big Company Engaging in Vibe Coding? - 36Kr","archived_url":null,"attachment":"first_report","independence":"independent"}],"per_field_confidence":{"system.developer":"C","system.intended_use":"C","event.detection_method":"C","event.incident_class":"D","impact.severity":"D","impact.severity_because":"D","event.summary":"C","system.autonomy_level":"D","system.deployment_context":"D","event.trigger":"D","context.country":"D","event.date_disclosed":"D","context.denominator_available":"D"},"field_citations":{"system.developer":[{"source_index":0,"quote":"Apple Support is Apple's official after - sales service app, which supports online chat with Apple experts for problem and fault diagnosis, booking repair services, purchasing Apple Care services, and other functions."}],"system.intended_use":[{"source_index":0,"quote":"Apple Support is Apple's official after - sales service app, which supports online chat with Apple experts for problem and fault diagnosis, booking repair services, purchasing Apple Care services, and other functions."}],"event.detection_method":[{"source_index":0,"quote":"Aaron Perris, an analyst at MacRumors discovered and exposed this."}],"event.incident_class":[{"source_index":0,"quote":"The question is, what does it mean that even Apple pushed files that shouldn't be submitted to the production environment?"}],"impact.severity":[{"source_index":0,"quote":"After the incident, Apple urgently recalled it within 24 hours, but some content has already been exposed."}],"impact.severity_because":[{"source_index":0,"quote":"After the incident, Apple urgently recalled it within 24 hours, but some content has already been exposed."}],"event.summary":[{"source_index":0,"quote":"The Apple Support app pushed an update to version v5.13 on May 1st, which unexpectedly included Claude.md."},{"source_index":0,"quote":"The project - level Claude.md is usually used to tell the AI what this project is, how to build it, what specifications to follow, and what pitfalls to avoid..."},{"source_index":0,"quote":"This has directly confirmed that Apple is using Claude Code internally to build production - level applications."},{"source_index":0,"quote":"The two backends seamlessly switch through a Protocol layer."},{"source_index":0,"quote":"Aaron Perris, an analyst at MacRumors discovered and exposed this."},{"source_index":0,"quote":"After the incident, Apple urgently recalled it within 24 hours, but some content has already been exposed."},{"source_index":0,"quote":"The file itself didn't leak any secrets, but it confirmed something that everyone guessed but no one could provide actual evidence for:"}]},"notes_on_gaps":"Only one press source (36Kr, citing MacRumors analyst Aaron Perris) was provided; Apple's own report is absent. The source does not state the discovery or disclosure date, so date_detected and date_disclosed are omitted. The year 2026 comes from the article date. The source does not state whether an AI agent pushed the release, so agent_involved, failure_class and trigger are omitted. The incident class operational_error, the root cause oversight and the minor severity are my judgements from the source's description. The source does not state a model name, version or country, nor any harm class or count of affected parties. The 'Update recalled within 24 hours' remediation is reported, but no control is stated as added, so no remediation entry is given. The order of discovery relative to the recall is not stated. The Gurman item is an earlier, separate report, not a fact about this incident. [case created by the backfill: read by claude-haiku-5-5, backfill-2026-11-01.2, 2026-11-01; not yet reviewed] [2026-11-01: evidence level set: Preliminary (1 report: 36Kr · subject to change)]"},"context":{"industry":null,"org_size_band":null,"country":"unknown","denominator_available":false,"denominator":null,"related_incident_ids":[],"systemic_exposure":null,"shared_model_id":null,"upstream_incident_id":null,"incident_evidence":null,"regulatory":null,"coverage":null},"analysis":{"sections":{"timeline":[{"text":"Apple Support app update v5.13 was pushed and unexpectedly included Claude.md.","quote":"The Apple Support app pushed an update to version v5.13 on May 1st, which unexpectedly included Claude.md.","source_index":0,"when":"2026-05-01"},{"text":"Aaron Perris, an analyst at MacRumors, discovered and exposed the included file. The date is not stated.","quote":"Aaron Perris, an analyst at MacRumors discovered and exposed this.","source_index":0,"when":null},{"text":"Apple urgently recalled the update.","quote":"After the incident, Apple urgently recalled it within 24 hours, but some content has already been exposed.","source_index":0,"when":"within 24 hours of the incident"}]},"model":"claude-haiku-5-5","prompt_version":"backfill-2026-11-01.2","extracted_at":"2026-11-01","source_urls":["https://eu.36kr.com/en/p/3791662444911617"]}}