Problem seems to be fixed, since neither fix(es) nor the problem has been acknowledged in beta logs I will be waiting for a writeup when CeeVeeeEeee is made public.

+1

The format and location of the TCC database is not considered API, so it’s not something I’ve spent a lot of time looking at Suppose you have a security product doing a scan of your computer and upon initiation of that scan, contents of $HOME is enumerated and user is spammed with every TCC access dialogue in the book (Downloads, Contacts, ...). Yes please, give us an API to do this transparently so that we don't have to access SIP protected files in order to gain FDA and forego the rest.

Merely opening the file for reading should give you your answer (denied access and created TCC record for FDA).

FB13194377