Remove allow-dyld-env entitlement; doc clarifications

Author: Protonk

PolicyWitness.md

@@ -186,7 +186,7 @@ Ports (v1):
 - `dylib_load`: load a dylib and optionally call a symbol (uses `com.apple.security.cs.disable-library-validation`).
 - `debug_wait`: sleep before sandbox apply for debugger attach (uses `com.apple.security.get-task-allow`).
 - `execmem_probe`: attempt a JIT mapping (`MAP_JIT`, `PROT_READ|PROT_WRITE`) and report success/failure (requires `com.apple.security.cs.allow-jit`; falls back to legacy RWX if available).
-- `dyld_env`: report expected `DYLD_*` env vars (uses `com.apple.security.cs.allow-dyld-environment-variables`).
+- `dyld_env`: report expected `DYLD_*` env vars (observation only; for actual `DYLD_*` injection use an external runner installed with `--env DYLD_*`).
 
 Convenience flag (injects instrumentation into the request JSON at runtime):
 

README.md

@@ -31,7 +31,7 @@ PolicyWitness treats entitlements as a first-class input alongside SBPL. Registe
 
 Instrumentation ports are part of the debuggable runner, allowing closer inspection.
 
-- `dyld_env`: report expected `DYLD_*` env vars (`com.apple.security.cs.allow-dyld-environment-variables`); set via an external runner with `policy-witness runner install --env KEY=VALUE`.
+- `dyld_env`: report expected `DYLD_*` env vars (observation only); to set them, use an external runner installed with `--env KEY=VALUE`.
 - `dylib_load`: load a dylib and optionally call a symbol (`com.apple.security.cs.disable-library-validation`)
 - `debug_wait`: pause before sandbox apply for debugger attach (`com.apple.security.get-task-allow`)
 - `execmem_probe`: attempt JIT `mmap` (MAP_JIT, PROT_READ|PROT_WRITE) and report success/failure (`com.apple.security.cs.allow-jit`; falls back to legacy RWX if available)

runner/README.md

@@ -95,7 +95,7 @@ Supported ports (v1):
 - `debug_wait`: sleep for `sleep_ms` before sandbox apply to allow debugger
   attach (uses `com.apple.security.get-task-allow`).
 - `execmem_probe`: attempt a JIT mapping (`MAP_JIT`, `PROT_READ|PROT_WRITE`) and report success/failure (uses
-  `com.apple.security.cs.allow-unsigned-executable-memory`).
+  `com.apple.security.cs.allow-jit`).
 - `dyld_env`: report whether expected `DYLD_*` env vars are present; the runner
   cannot set these at runtime, so use an external runner with launchd
   `EnvironmentVariables`.

runner/services/PWRunner/Entitlements.plist

@@ -3,8 +3,6 @@
  "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
 <plist version="1.0">
 <dict>
-	<key>com.apple.security.cs.allow-dyld-environment-variables</key>
-	<true/>
 	<key>com.apple.security.cs.allow-jit</key>
 	<true/>
 	<key>com.apple.security.cs.disable-library-validation</key>