<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <!-- Boot Linux VMs in-process (Virtualization.framework). This is sufficient for vmnet too:
         the Step-0 spike confirmed NAT egress works with virtualization alone. Do NOT add
         `com.apple.vm.networking` — it's a restricted entitlement that, under an ad-hoc signature,
         causes the kernel to KILL the binary at launch (observed: immediate exit 137, no output). -->
    <key>com.apple.security.virtualization</key>
    <true/>
</dict>
</plist>
