Thanks, Ziqiao! We've already shipped this app with the container (com.luiz.PandaApp, live on the App Store), so moving to a new container would orphan existing users' public-database data. Per your suggestion I've filed a Feedback report with full details, the server request IDs, and CloudKit Console logs: FB22832742. Happy to provide anything else that helps, thank you!

followup point #2 (Security Roles): checked Schema → Security Roles. GuardianRequest and GuardianResponse grant Read via _world, Create via _icloud, Write via _creator — a standard public-DB config. The Read permission query subscriptions need is present, so Security Roles don't appear to be the cause.

thanks! Tried both suggestions: (1) visible NotificationInfo (alertBody + shouldBadge + category, dropped shouldSendContentAvailable) and (2) CKModifySubscriptionsOperation. Both still fail identically: CKError 12 / BAD_REQUEST / "attempting to create a subscription in a production container", 0 subscriptions. Full results + server RequestUUIDs are in my detailed reply below. Is this the known server-side issue?

Hi Ziqiao, thanks! Tried both suggestions: (1) visible NotificationInfo (alertBody + shouldBadge + category, dropped shouldSendContentAvailable) and (2) CKModifySubscriptionsOperation. Both still fail identically: CKError 12 / BAD_REQUEST / "attempting to create a subscription in a production container", 0 subscriptions. Full results + server RequestUUIDs are in my detailed reply below. Is this the known server-side issue?