diff --git a/apps/rebreak-native/plugins/with-rebreak-protection-ios.js b/apps/rebreak-native/plugins/with-rebreak-protection-ios.js
index d35b84c..a6f0add 100644
--- a/apps/rebreak-native/plugins/with-rebreak-protection-ios.js
+++ b/apps/rebreak-native/plugins/with-rebreak-protection-ios.js
@@ -47,7 +47,11 @@ function withMainAppEntitlements(config) {
     cfg.modResults['com.apple.developer.networking.networkextension'] = [
       'content-filter-provider',
     ];
-    cfg.modResults['com.apple.developer.family-controls'] = true;
+    // TEMP: Family Controls Distribution Entitlement liegt bei Apple zur Freigabe.
+    // Solange das Antrag nicht durch ist, kann EAS kein AppStore-Provisioning-Profil
+    // mit FC erstellen → Build-Fehler. Sobald Apple freigibt: Zeile wieder rein
+    // (oder via Env-Flag) + buildNumber bump.
+    // cfg.modResults['com.apple.developer.family-controls'] = true;
     const groups = cfg.modResults['com.apple.security.application-groups'] || [];
     if (!groups.includes(APP_GROUP)) {
       cfg.modResults['com.apple.security.application-groups'] = [...groups, APP_GROUP];
@@ -149,6 +153,10 @@ function withExtensionTarget(config) {
           buildSettingsObj.SWIFT_VERSION = '5.9';
           buildSettingsObj.TARGETED_DEVICE_FAMILY = '"1,2"';
           buildSettingsObj.CODE_SIGN_STYLE = 'Automatic';
+          // EAS managed credentials setzen DEVELOPMENT_TEAM nur auf der Main-App.
+          // Die Extension ist ein eigenes Target → muss expliziten Team-Wert haben,
+          // sonst: "Signing for 'RebreakURLFilter' requires a development team".
+          buildSettingsObj.DEVELOPMENT_TEAM = '84BQ7MTFYK';
         }
       });