PhantomGuardian will turn technical security events into explanations you can use, with on-device processing. Guardian will explain what happened and what to consider next. The background Agent will remain responsible for live protection.
PhantomGuardian is planned for macOS 27 or later on Apple silicon. Security-event explanations and prompts will stay on the Mac. Optional product telemetry is separate and will remain off until you explicitly opt into that category.
Planned styles will change how Guardian explains an event, not the underlying protection rule or threat decision.