Unlock Full macOS AI on Chinese Macs with One Click

This is a kernel patch that camouflages the underlying region of Chinese Macs as the US version, thereby unlocking all macOS AI features.

https://t.co/bIAMZM7W1j

SkyBlue997/enableMacosAI

Source: https://github.com/SkyBlue997/enableMacosAI

RegionSpoof — Enable Full Apple Intelligence on Chinese Macs (macOS 27)

A minimal kernel extension (kext) that modifies the device region code from CH/A to LL/A (US version) at the IORegistry source, causing MobileGestalt to return the US region for every system process. This enables full Apple Intelligence on Chinese machines (test device: Mac15,9 / M3 Max / macOS 27 26A5353q) — on-device + Private Cloud Compute cloud features (Writing Tools with tone rewriting, Image Playground, Genmoji, Foundation Models, ChatGPT extension).

Quick Install (One-Click, Recommended)

sudo ./install.sh

The script automatically: checks SIP / Apple Silicon, removes the amfi_get_out_of_my_way boot-arg that kills PCC, installs the kext + configures auto-load on boot, loads it, and refreshes Apple Intelligence daemons. On first run, you’ll be prompted to go to System Settings → Privacy & Security and click Allow, then restart.

sudo ./install.sh status      # Health check: SIP / AMFI / region / kext / eligibility status
sudo ./install.sh uninstall   # Uninstall, restore original region

Prerequisite: SIP must be disabled (run csrutil disable in Recovery Mode). The script will provide step-by-step guidance if it detects SIP is still enabled.

How It Works

• Root cause of eligibility gate: MGGetStringAnswer("RegionCode") == "CH" → Apple Intelligence is blocked.
• This value is live-read from the region-info property of IORegistry’s IOPlatformExpertDevice ("CH/A"), not from any plist cache (on macOS 27, eligibilityd recalculates based on SwiftData in real-time; old methods like modifying plist or locking with uchg no longer work).
• This kext matches IOPlatformExpertDevice and in start() calls setProperty("region-info", "LL/A") + setProperty("country-of-origin", "USA") — all system processes read the US region from the source, so eligibility, model downloads, and front-end UI all work seamlessly without per-process injection.

Files

Prerequisites (Apple Silicon)

1. SIP disabled + Permissive security mode + Allow third-party kext — In Recovery Mode (1TR), csrutil disable does all at once.
2. AMFI must remain enabled — The boot-args must not contain amfi_get_out_of_my_way=1. If AMFI is disabled, the SEP will refuse to provide hardware attestation for Private Cloud Compute (logs show AppleKeyStore kIOReturnNotPermitted), making all cloud AI features non-functional; on-device features still work.
3. On first kext load, you need to click Allow in System Settings → Privacy & Security, then restart.
4. Apple Account “Media & Purchases” region must be a supported Apple Intelligence country (not China/CN) — Change to the United States / Japan etc. (System Settings → Your Name at top → Media & Purchases → Manage → Country/Region).
5. System language == Siri language, and both must be a supported Apple Intelligence language — The safest setting is both set to English (US).

⚠️ The kext only handles the “region” item. The GREYMATTER eligibility requires ~10 inputs (region, account region, language match, device type, etc.) all satisfied before it changes to 4. If after installation region=LL/A and the kext is loaded but GREYMATTER is still 2, it’s likely account region or language. Run this to see which item failed (value 2 means it’s the culprit):

sudo /usr/libexec/PlistBuddy -c "Print :OS_ELIGIBILITY_DOMAIN_GREYMATTER:status" \
  /private/var/db/eligibilityd/eligibility.plist

After fixing the corresponding setting, run sudo launchctl kickstart -k system/com.apple.eligibilityd or restart.

Manual Installation (Optional)

sudo cp -R RegionSpoof.kext /Library/Extensions/
sudo chown -R 0:0 /Library/Extensions/RegionSpoof.kext
sudo cp region-kext-load.sh /usr/local/bin/ && sudo chmod +x /usr/local/bin/region-kext-load.sh
sudo cp com.local.regionkext.plist /Library/LaunchDaemons/
sudo kmutil load -p /Library/Extensions/RegionSpoof.kext   # First load prompts you to Allow in Settings → then restart

Verification

# region-info should be 0x4c4c2f41 ("LL/A")
ioreg -ard1 -c IOPlatformExpertDevice | plutil -p - | grep region-info
# GREYMATTER eligibility should be 4 (eligible)
sudo /usr/libexec/PlistBuddy -c 'Print :OS_ELIGIBILITY_DOMAIN_GREYMATTER:os_eligibility_answer_t' \
  /private/var/db/eligibilityd/eligibility.plist

Troubleshooting

region=LL/A and kext loaded, but GREYMATTER still 2

Region is only one of ~10 eligibility inputs; likely account region or language (see Prerequisites #4/#5 above). Run this to see which item failed (value 2 is the culprit), then fix the setting and run sudo launchctl kickstart -k system/com.apple.eligibilityd or restart:

sudo /usr/libexec/PlistBuddy -c "Print :OS_ELIGIBILITY_DOMAIN_GREYMATTER:status" \
  /private/var/db/eligibilityd/eligibility.plist

Kext not loading (region still CH)

• SIP not disabled → csrutil status must say disabled; if not, go to Recovery Mode and run csrutil disable;
• Not approved → kmutil load -p reports not approved → System Settings → Privacy & Security → Allow → restart;
• Authenticating extension failed: Bad code signature → You are in Reduced Security (partial SIP disable); ad-hoc kext is not allowed. Must be Permissive (full SIP disable). If you want SIP-on, you need proper Developer-ID signing;
• System version mismatch → MacOS that is too new or too old may have signature or KPI incompatibility; recompile from source using BUILD.md.

PCC Cloud Features Error (Writing Tools tone rewrite / Image Playground / Reframe etc.)

On-device features (proofread, summary, Genmoji) are unaffected. For PCC issues, first check logs. Don’t spam clicks — each failure may trigger rate limiting from Apple’s backend, making it worse:

sudo log show --last 3m --predicate 'process == "privatecloudcomputed"' 2>/dev/null \
  | grep -iE 'finished successfully|3200[0-9]|RetryAfter|NWError|3205[0-9]|Insufficient inline|32080' | tail -15

Also: PCC requires AMFI enabled (Prerequisite #2). “Internet Connection Required” is often due to the above (not actually no internet).

Reset Attestation Pool (nuclear option for Insufficient or when PCC is flaky after repeated attempts):

# 1) Locate the attestation store (while daemon is alive; container UUID varies per machine)
DIR="$(sudo lsof -c privatecloudcomputed -Fn 2>/dev/null | sed -n 's/^n//p' | grep -m1 -oE '.*/attestationstore_v3')"
# 2) Kill daemon → delete stale attestation store + received nodes cache
sudo launchctl kill KILL system/com.apple.privatecloudcomputed
sudo rm -f "$DIR"/db.sqlite* "$(dirname "$DIR")"/nodesReceived.log
# 3) Restart, then wait 15-30 minutes for it to rebuild a clean attestation pool, then try again (don't click repeatedly)

Uninstall

sudo launchctl bootout system/com.local.regionkext 2>/dev/null
sudo rm -f /Library/LaunchDaemons/com.local.regionkext.plist /usr/local/bin/region-kext-load.sh
sudo rm -rf /Library/Extensions/RegionSpoof.kext
sudo kmutil unload -b com.local.RegionSpoof 2>/dev/null
# Restart to restore original region

Known Limitations (Verified)

• SIP must remain disabled (Permissive). This kext is ad-hoc signed; switching to Reduced Security (SIP enabled) will reject it with Authenticating extension failed: Bad code signature, region falls back to CH, AI disabled. To use with SIP enabled, you must sign the kext with an Apple Developer ID ($99/year) and then use Reduced Security.
• PCC cloud features (tone rewrite, Image Playground) require AMFI enabled. Do not add amfi_get_out_of_my_way boot-arg.
• “New Siri” waitlist is rolled out server-side by Apple in batches, unrelated to local region modification.