Apple’s Siri Architecture Reportedly Lets Outside Models Run Device Tasks

Private frameworks in unreleased iOS 27 and macOS Golden Gate reportedly show Apple building two routes for outside AI models to work through Siri: one that delegates a request to a model such as Claude, and another that could replace Siri’s server-side model while retaining its interface and access to system tools. The difference matters because it would make Siri less a single AI assistant than a control layer between a user’s device and whichever model handles the request.

The evidence comes from code sleuth pdfu’s videos and analysis of private frameworks, not from a public Apple feature announcement. Apple, OpenAI and Anthropic had not responded to CNET’s requests for comment when its report was published, so the demonstrated behavior remains unconfirmed by the companies involved.

The first reported mechanism is called Model Delegation. In one demonstration, a user asks Siri to ask Claude to set a reminder. Claude interprets the natural-language request, then the task returns to Siri, which creates the reminder in Apple’s Reminders app. A separate example shows Claude generating a CSV file in a Siri conversation window, a task the report says Siri cannot perform itself.

What the demonstrations show

• Claude can interpret a request, while Siri carries out a system action such as creating a reminder.
• A model can handle work beyond Siri’s reported capabilities, including creating a CSV file.
• GPT-5.6 Terra was shown receiving Siri’s planner prompt and tool definitions, then making system tool calls through Siri’s interface and voice.

The second protocol appears more expansive. An Inference Providing protocol in Apple’s Model Manager Services could allow another model to replace Apple’s server-side Siri model. In the reported GPT-5.6 Terra demonstration, the model received Apple’s Siri planner prompt and tool definitions, could call tools that perform system actions, and returned results through Siri’s own interface and voice.

That setup was shown handling a compound request: searching email for a topic, summarizing its contents and action points, then sending a message to someone in the user’s contacts through Messages. CNET reported that information processed by the OpenAI model could be logged in OpenAI’s web interface for later access on another platform. The demonstrations therefore raise a sharper question than whether Siri can call a chatbot: where personal information goes once a third-party model is placed in the path.

The reported capabilities are still behind private interfaces. MacRumors said Apple had not opened the model-delegation entitlement to third parties and that the functionality was not presented directly to users. In the macOS 27 Golden Gate Release Candidate, the Ask interface was limited to the existing ChatGPT extension; Claude was not yet available through it.

Apple’s public developer materials already describe a broader preference for model choice inside apps. Its Foundation Models framework can integrate a cloud model provider of a developer’s choice, including Claude and Gemini, while Apple also says its App Intents framework connects apps to Siri capabilities. Those public tools do not confirm the reported Siri replacement protocol, but they provide context for an architecture built around swapping models and tools.

The reports suggest the European Union’s Digital Markets Act may have helped shape Apple’s approach. Apple has separately said the law prevented it from shipping Siri AI on iOS 27 and iPadOS 27 in the EU, arguing that regulators’ interpretation would require direct assistant access to private data and other installed apps without sufficient safeguards. Apple said Siri AI would remain available to EU users on macOS 27 and visionOS 27.

For now, the leaked code establishes a possible direction, not a commitment to launch. The important unresolved boundary is whether Apple can let users choose a stronger outside model while preserving clear control over which data it receives, which actions it may take, and where the resulting information is retained.