JIT-Less Mode Diagnose

Use LiveContainer's diagnose screen until every critical field is healthy and Test JIT-Less Mode passes.

App Group ID / Accessible / Store checks are red

Typical causes: missing application-groups, installers other than AltStore/SideStore/Impactor, or a Team ID mismatch with the store app.

Fixes: sign LiveContainer and the store with the same Apple account; reinstall while keeping all extensions / using the main profile; confirm the entitlement file has get-task-allow true, correct application-groups, and correct keychain-access-groups.

Certificate data, password, or last update is red

The import is incomplete. Re-import from the store or from an exported .p12, then refresh diagnose.

Certificate Team ID is red

You imported a certificate from the wrong team. Remove it, import the matching team certificate, and ensure the store login matches the account that signed LiveContainer.

Status revoked/unknown or the test fails

The certificate is revoked or expired. Re-import with the correct password, refresh apps in the store, retest, and reinstall LiveContainer if needed. SideStore installs performed only through AltServer are a common source of this failure - prefer SideStore's current install guide.

Entitlement file checklist

• application-identifier should be TeamID + LiveContainer's bundle ID pattern.
• com.apple.developer.team-identifier must be present.
• application-groups should include AltStore and SideStore group variants with your Team ID.
• get-task-allow must be true - distribution profiles are unsupported.
• If the bundle ID (without the Team ID prefix) does not match LiveContainer, features such as the file picker fix break.
• Expect 128 keychain-access-groups (shared through shared.127). Missing groups usually mean an old iloader, an unsupported signer, or forgotten entitlement configuration.