Thank you for your detailed answer. I reproduced your steps and see different outcomes. Let me answer your first two questions and then describe how I reproduced your steps and where I see differences.
Answers
The first divergence I see is at this step.
I don’t have your accessory on my network so no local traffic is generated, so there’s no local network alert
Indeed that checkbox makes the app itself send similar data than our hardware, using multicast.
I don’t understand how that’s possible if this is a “clean install” of macOS.
Where could it possible get a different usage string?
I should have been clearer. It shows the string "This will allow the app to discover, connect to and collect data from devices on your network." which we did not set ourselves. I could not figure out if it comes from an other app, or if it's the default usage description.
Reproduction steps
Here's a Dropbox link to our app (zipped):
https://www.dropbox.com/scl/fi/btnpz64u8rz7y7t0dicbu/FM-Mac-App-Test-5.1.zip?rlkey=8g43pvph7qrld12hp3r6u6yt6&dl=1
Instead of your 26.1 VM, I have a clean install of 26.0.1 on a Mac mini (M2, 2023).
I airdrop FM Mac App Test 5.1.zip.
I unzip it using Finder, move the app to Applications and launch it.
I get this Gatekeeper/Airdop warning. I click Open.
"FM Mac App Test 5.1" is an app
sent over AirDrop. Are you sure
you want to open it?
You received this file today at 11:16.
Apple checked it for malicious software
and none was detected.
Cancel / Open
The app starts. I check "Also send packets" and start the socket.
The Local Network alert presented is here different than yours. It uses this Local Network Usage Description, not the string we set ourselves:
Allow "FM Mac App Test" to find
devices on local networks?
This will allow the app to discover,
connect to and collect data from
devices on your network.
Don't Allow / Allow
Packets are received. I close the app, verify that the app shows in the Settings > Privacy > Local Network list, and restart the Mac.
After restart, the app does not show in the Settings > Privacy list anymore.
I do step 5 again, and get the alert once again, same as step 6, also with the unknown Local Network Usage Description.
From that moment on, the app has permanent Local Network access, even after reboots.
The 3 main differences in my setup are the macOS version (26.0.1 vs 26.1), the physical machine, and the Gatekeeper alert. I then removed those differences one by one:
I tried a 26.0.1 VM, transferring the file directly from my local files (it did not trigger Gatekeeper): same outcomes
I tried a 26.2 VM, same transfer method: same outcomes
I tried a 26.2 VM, this time downloading the app from the Dropbox link, to trigger the Gatekeep alert: same outcomes
I think I now reproduce the exact same steps as you: VM, macOS 26.0 or 26.2, Gatekeeper alert. Yet the Local Network alert shows the wrong usage description and the app disappears from the Privacy list after reboot.
Are you seeing something I do different than you?
And do you know if the usage description "This will allow the app to discover, connect to and collect data from devices on your network." is the default string, or from a specific app?
Topic:
App & System Services
SubTopic:
Networking
Tags: