Apple's PPL has served as the last line of defense for the kernel on A12+ devices for years, and bypassing it has become increasingly difficult. This talk shares the researcher’s study of PPL and walks through two PPL bypass issues, one of which is useful for building an iOS 26 jailbreak on a limited set of devices.