Removing stale Local Network entries?

Hello,

I'm desperately looking for a way to purge the contents of the Local Network allowlist in System Settings. Every version of a test app I've ever used gets an entry in there, and apparently so does each build of Chrome and Claude Code.

Claude recommended I include the following context, and if there's a specific answer to that, great, but any way of purging this list would make me very happy.

==== Caution: slop below this line ====

macOS 27.0 (26A428), Apple silicon. The Local Network list has 471 entries, many dead: Chrome code_sign_clone paths that no longer exist, old ad-hoc builds, uninstalled apps. The pane can't remove any.

Is there a supported way to remove entries or reset the list, short of Recovery?

Editing /Library/Preferences/com.apple.networkextension.plist as root fails with EPERM, both rename-over and open-for-write. New files in that directory work. SIP is on, the file has no flags or xattrs, Full Disk Access didn't help, and there are no Sandbox/TCC denials in the log.

What protects this file?

Removing stale Local Network entries?
 
 
Q