How to get url-filter-provider entitlement approved for App Store distribution?

I'm building a content filtering app using NEURLFilterManager and NEURLFilterControlProvider (introduced in iOS 26). The app uses a PIR server for privacy-preserving URL filtering.

Everything works with development-signed builds, but App Store export validation rejects:

1. Entitlement value "url-filter-provider" for com.apple.developer.networking.networkextension — "not supported on iOS"

I have "Network Extensions" enabled on my App IDs in the developer portal, but the provisioning profiles don't seem to include url-filter-provider, and I don't see a URL filter option in the Capability Requests tab.

What I've tried:

• Entitlement values: url-filter-provider, url-filter — both rejected at export
• Extension points: com.apple.networkextension.url-filter, com.apple.networkextension.url-filter-control — both rejected
• Regenerating provisioning profiles after enabling Network Extensions capability

My setup:

• iOS 26, Xcode 26
• Main app bundle: com.pledgelock.app
• URL filter extension bundle: com.pledgelock.app.url-filter
• PIR server deployed and functional

Is there a specific request or approval process needed for the url-filter-provider entitlement? The WWDC25 session "Filter and tunnel network traffic with NetworkExtension" mentions this entitlement but I can't find documentation on how to get it approved for distribution.

Any guidance appreciated. Thanks!