"""Network-access policy helpers shared by the Console control plane."""