https://security.apple.com/blog/expanding-pcc/

The code is open source: https://github.com/apple/security-pcc