device-integrity

The device-integrity skill provides comprehensive guidance for implementing Apple's DeviceCheck and App Attest frameworks to verify device legitimacy and app authenticity in iOS applications. It addresses the critical security challenge of ensuring that API requests originate from genuine Apple devices running unmodified versions of your app, protecting against fraud, jailbreak exploits, and unauthorized access to sensitive backend endpoints.

This skill covers two primary Apple frameworks: DCDevice for simple per-device flag management through ephemeral tokens, and DCAppAttestService for cryptographic verification using Secure Enclave-backed keys. The documentation includes complete implementation patterns for token generation, server communication, attestation flows, and assertion validation. It provides both client-side Swift code and server-side architectural guidance for integrating with Apple's verification endpoints.

Ideal for iOS developers building applications with fraud prevention requirements, payment systems, promotional offer redemption, or any scenario requiring strong device and app integrity guarantees. The skill includes error handling patterns, common implementation mistakes to avoid, server verification workflows, and security best practices for production deployments. It targets intermediate to advanced iOS developers who need to protect backend APIs from compromised devices or tampered applications.