<!-- TIER:1 -- Managing Network Policies A network policy is a named pair of IP lists -- addresses allowed to connect and addresses always refused -- kept per environment and assigned wherever access should be limited by source address. One policy can guard many things, and a policy guards nothing until it is assigned. Concerns when managing network policies: - What a policy decides -- deny beats allow, and an empty allow list admits everything the deny list doesn't name - Where it applies -- an MCP server, an account API token, workspace-user sign-in, or end-user sign-in - Editing safely --…