Our Network Extension URL Filter configurations in CloudKit Identity & Trust are not moving through onboarding.
- STG: configuration 6e17673d-dbaa-4b35-98c5-ff9e7a357577, bundle ca.itellyou.stg. Submitted 2026-09-25, status Approved, Onboarding Status "Queued".
- PRD: configuration 06fa2558-281b-4b55-b59f-402ecf359d18, bundle ca.itellyou. Submitted 2026-10-20, status In Review.
Evidence (iPhone 17 Pro Max, 2026-11-06, same commit, same server, same user token):
- Development-signed build: the filter reaches "running" and blocks our test domains.
- Ad-hoc (distribution-signed) build: it cycles starting -> stopped with NEURLFilterManager.Error 9.
The PIR server, Privacy Pass issuer and OHTTP gateway are live, and the test entry www.apple.com/url-filter-test is present. An Apple engineer confirmed on GitHub (apple/pir-service-example#185) that nothing is pending on our side. We also opened support case 30000007408474.
Has anyone seen how long onboarding takes these days, or found a way to get it moving?