Thank you, Quinn. For the bounded offline operation in this question, the requirement is to deny all network access, rather than selectively allow or inspect destinations. The scope is the operation's supervisor, controller and helper, including network requests attributable to them through delegated system services. Unrelated applications on the Mac should retain their normal network access. The restriction must apply before releasing any of these processes and remain effective until the processes and attributable delegated work are quiescent. In particular, a filtering-provider crash, disconnect, hang or restart must not open a temporary network-access window. Does that clarification point to a supported macOS mechanism for this scope, including whether individually sandboxing the roles without network entitlements provides the needed independent boundary? We are asking about a supported design; we have not established or claimed that our current implementation provides this guarantee.