harden macOS networking port

proxy_chain_manager/telemetry_kill.py

@@ -21,6 +21,7 @@ from __future__ import annotations
 import json
 import logging
 import subprocess
+import sys
 import winreg
 from dataclasses import dataclass, field
 
@@ -175,6 +176,8 @@ def _delete_reg_value(hive: int, path: str, name: str) -> None:
 
 def telemetry_status() -> dict[str, str]:
     """Read-only snapshot for the audit panel."""
+    if sys.platform == "darwin":
+        return {"macOS": "not applicable"}
     out: dict[str, str] = {}
     for svc in _SERVICES:
         out[f"svc.{svc}"] = _service_start_type(svc)
@@ -199,6 +202,8 @@ def telemetry_status() -> dict[str, str]:
 
 def engage_telemetry_kill() -> tuple[TelemetrySnapshot | None, list[str]]:
     logs: list[str] = []
+    if sys.platform == "darwin":
+        return None, ["Telemetry kill is Windows-only; no macOS telemetry mutation applied."]
     if not is_admin():
         return None, ["Telemetry kill skipped — needs Administrator."]
     snap = TelemetrySnapshot()
@@ -240,6 +245,8 @@ def engage_telemetry_kill() -> tuple[TelemetrySnapshot | None, list[str]]:
 
 
 def restore_telemetry(snap: TelemetrySnapshot | None) -> list[str]:
+    if sys.platform == "darwin":
+        return []
     if snap is None or not is_admin():
         return []
     logs: list[str] = []