Reliable Shield enforcement for Parental Control App when child disables Notifications

We're building a parental control app using FamilyControls (.child authorization). Our architecture:

Parent sends pause command → Firestore + FCM Child receives push → NotificationService Extension triggers main app Main app sets ManagedSettings Shields

Problem: If child disables Notifications in Settings and force-quits the app, we cannot enforce Shields. What we've tried:

Firestore Realtime Listener (works only when app is running) DeviceActivityMonitor (intervalDidStart/End only triggers at schedule boundaries, eventDidReachThreshold requires explicit app selection via FamilyActivityPicker)

Question: Is there a recommended approach for parental control apps to reliably enforce Shields when the child has disabled notifications? Or is this a known limitation?

Reliable Shield enforcement for Parental Control App when child disables Notifications
 
 
Q