<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>PayloadType</key>
    <string>Configuration</string>
    <key>PayloadVersion</key>
    <integer>1</integer>
    <key>PayloadIdentifier</key>
    <string>org.rebreak.protection.contentfilter.mdm</string>
    <key>PayloadUUID</key>
    <string>F4A82F1A-9D6E-4B11-A9C2-3B5F8E7C9D11</string>
    <key>PayloadDisplayName</key>
    <string>ReBreak Schutz</string>
    <key>PayloadDescription</key>
    <string>NEFilter ContentFilter + Anti-Tampering. MDM-managed.</string>
    <key>PayloadOrganization</key>
    <string>ReBreak</string>
    <key>PayloadScope</key>
    <string>System</string>
    <key>PayloadContent</key>
    <array>
        <!-- 1) WEBCONTENT-FILTER (NEFilter via ReBreak-App-Extension) -->
        <dict>
            <key>PayloadType</key>
            <string>com.apple.webcontent-filter</string>
            <key>PayloadVersion</key>
            <integer>1</integer>
            <key>PayloadIdentifier</key>
            <string>org.rebreak.protection.contentfilter.mdm.filter</string>
            <key>PayloadUUID</key>
            <string>D2C71A4F-8B3C-4E5D-9F6A-2B1C8D7E6F50</string>
            <key>PayloadDisplayName</key>
            <string>ReBreak Content Filter</string>
            <key>UserDefinedName</key>
            <string>ReBreak Schutz</string>
            <key>FilterType</key>
            <string>Plugin</string>
            <key>AutoFilterEnabled</key>
            <true/>
            <key>PluginBundleID</key>
            <string>org.rebreak.app</string>
            <key>FilterDataProviderBundleIdentifier</key>
            <string>org.rebreak.app.ContentFilterExtension</string>
            <key>FilterDataProviderDesignatedRequirement</key>
            <string>anchor apple generic and identifier "org.rebreak.app.ContentFilterExtension" and certificate leaf[subject.CN] = "Apple Distribution: CHAHINE BRINI (84BQ7MTFYK)" and certificate 1[field.1.2.840.113635.100.6.2.1] /* exists */</string>
            <key>FilterGrade</key>
            <string>firewall</string>
            <key>FilterBrowsers</key>
            <true/>
            <key>FilterSockets</key>
            <false/>
            <key>FilterPackets</key>
            <false/>
            <key>Organization</key>
            <string>ReBreak</string>
        </dict>

        <!-- 2) RESTRICTIONS (supervised-only) -->
        <!-- HINWEIS: allowAppRemoval=false ist bewusst NICHT drin (global zu invasiv).
             Per-App-Removal-Block für ReBreak kommt automatisch über Take-Management
             (Settings → InstallApplication ChangeManagementState=Managed → iOS verbirgt
             Wackel-X für managed apps). Andere Apps bleiben löschbar. -->
        <dict>
            <key>PayloadType</key>
            <string>com.apple.applicationaccess</string>
            <key>PayloadVersion</key>
            <integer>1</integer>
            <key>PayloadIdentifier</key>
            <string>org.rebreak.protection.contentfilter.mdm.restrictions</string>
            <key>PayloadUUID</key>
            <string>A1B2C3D4-E5F6-4789-ABCD-1234567890AB</string>
            <key>PayloadDisplayName</key>
            <string>ReBreak Restrictions</string>
            <key>PayloadDescription</key>
            <string>Anti-Tampering (Factory-Reset + Profile-Install blockiert)</string>
            <key>allowEraseContentAndSettings</key>
            <false/>
            <key>allowUIConfigurationProfileInstallation</key>
            <false/>
        </dict>
    </array>
</dict>
</plist>
