Detect Configuration Profile state change (DoH .mobileconfig) without VPN/MDM/supervised — any API I missed?

Is there any iOS API, framework, or entitlement (public or beta) that lets an app detect when a user disables or removes a Configuration Profile (specifically a DNS-over-HTTPS profile) — without VPN extension, MDM, or supervised mode?

Use case: I need to know server-side, in real time, when the user toggles off a .mobileconfig DoH profile they previously installed.

Things I've already reviewed and ruled out:

  • NetworkExtension (NEDNSSettingsManager — only fires while app is running)
  • BGTaskScheduler (iOS-scheduled, not real-time)
  • NEFilterDataProvider (requires supervised)
  • VPN / MDM / supervised

Anything I'm missing?

Detect Configuration Profile state change (DoH .mobileconfig) without VPN/MDM/supervised — any API I missed?
 
 
Q