Provisioning profile mismatch error for macOS Network Extension with Developer ID

Hello,

I am developing a macOS application that uses the Network Extension framework and I'm planning to distribute it outside the Mac App Store using a Developer ID certificate.

I am running into a persistent provisioning error when I try to manually assign my profile in Xcode:

"Provisioning profile "NetFilterCmd" doesn't match the entitlements file's value for the com.apple.developer.networking.networkextension entitlement."

Here is the process I followed:

1.I added the "Network Extensions" capability in Xcode's "Signing & Capabilities" tab. This automatically created a new App ID in my Apple Developer account.

2.I went to the developer portal, confirmed the App ID had "Network Extensions" enabled, and then generated a "Developer ID" Provisioning Profile associated with this App ID.

3.I downloaded and installed this new profile ("NetFilterCmd.provisionprofile").

4.Back in Xcode, I unchecked "Automatically manage signing" for my app target.

5.When I select the downloaded "NetFilterCmd" profile from the dropdown, the error message immediately appears.

I suspect my issue might be related to the "System Extension" requirement for macOS Network Extensions, or perhaps a mismatch between the specific NE values (e.g., content-filter-provider) in the entitlements file and the App ID configuration.

What is the correct, step-by-step sequence to configure a macOS app (main app + network system extension) for Developer ID distribution?