Nothing to try yetTier: how much it should matter to you
2Useful: my rating, 1 to 5
4Signal: worth watching, 1 to 5
Computer UseArea: what it touches
In DevelopmentKind: in v2.1.242,
What probably matters to youSection of the release
An all-apps-granted tier with a required denylist is defined within the host-dependent per-app control feature.
What
Besides granting named applications, there is now a mode that treats every application as granted at the full tier except those a denylist excludes, and it skips the step that hides windows before acting.
Details
Constructing it with an empty denylist throws at runtime on purpose; the code calls that a wiring bug.
It is only used where the host program supplies an every-app policy. The default behaviour, granting specific apps, is unchanged.
Evidence
WildcardGrantSet: deniedBundleIds must be non-empty
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
