Should ATT come before a 3rd party CMP? Does the order matter?

When presenting a cookie banner for GDPR purposes, should ATT precede the cookie banner?

It seems that showing a Cookie Banner and then showing the ATT permission prompt afterwards (if a user elects to allow cookies/tracking) would be more appropriate.

Related question: Should the “Allow Tracking” toggle for an app in system settings serve as a master switch for any granular tracking that might be managed by a 3rd party Consent Management Platform?

If ATT is intended to serve as a master switch for tracking consent, if the ATT prompt is presented before a cookie banner, should the banner even appear if a user declines tracking consent?

I’m not finding any good resources that describe this flow in detail and I’m seeing implementations all over the place on this.

Help!

Thanks!!!