Operational Modes

• Portal: permissive, telemetry-first, light shaping
• Shield: balanced filtering, selective delays, targeted blocks
• Lockdown: deny-by-default, allowlist resolver (FQDN/IP), high-latency shaping