remindctl uses EventKit. macOS grants Reminders access per app, so the terminal app that runs remindctl must have permission.
#Check access
remindctl status#Request access
remindctl authorizeIf macOS reports access as denied, enable the terminal app in:
System Settings > Privacy & Security > RemindersIf no prompt appears, run this once from the same terminal app:
osascript -e 'tell application "Reminders" to get name of reminders'Then allow access and rerun:
remindctl statusWhen running over SSH, grant access on the Mac that actually runs remindctl.
#Signed binary upgrades
Observed development grants are attributed to the host terminal application (Terminal or Ghostty), not to the remindctl executable. The official binary keeps the identifier com.steipete.remindctl, but identifier continuity alone does not prove that macOS will preserve Reminders access while the signing Team changes to OpenClaw Foundation.
Release qualification therefore includes a separate clean-VM migration gate. Until that test records the actual TCC principal and proves read/write behavior across the upgrade, release notes and support guidance must not claim permission continuity.