Wawona has two privilege classes. App Store / Play builds are always Mode A. Mode B is for jailbreak, SIP-disabled macOS, and privileged Android. Never inside the store binary.
Canonical: mode-a-b.md.
Quick matrix
| Mode A | Mode B | |
|---|---|---|
| Who | App Store, TestFlight, Play | Jailbreak / SIP / root |
| iOS VMs & containers | UTM-SE-class jitless interpreter | JIT-enabled UTM/QEMU |
| iOS shell | Sandboxed wwn-zsh | Unsandboxed / NewTerm-class + host APT |
| Desktop / LockScreen (iOS) | Not in the store app | repo.wawona.io |
| Packages | Wasm from repo.wawona.io/wasm + Files + wpm | Wasm plus jailbreak .deb APT |
Wasm is not platform-native (tradeoff vs a Mach-O port). The payoff is a portable Wawona Runtime with full App Store compliance via WASI P1/P2 and wpm. The Runtime has no Mode B flavor. See WASM / WASI.
Mode B IPA (iOS)
repo.wawona.io will automatically package a Wawona Mode B IPA for Sileo. That build can run Containers and VMs with JIT and use jailbreak APT tooling. It is not the App Store IPA.
App Store and TestFlight materials must never mention jailbreak, Sileo Mode B IPA, or JIT.