Interesting. Apparently they shelved a lot of their documentation around this a few months back. Such a disapointment that we are subjected to guessing at entitlements needed, and of course the wait time for any response is weeks...

Yes same issue for me the filter extension never gets called by the main target so no logs to go by