# description
Per-service ingress posture + egress allowlist. The single source of truth that gen_netcfg.py compiles into AllowedEgress (Go), ALLOWED_EGRESS (Python), and netcfg.json for the Terraform perimeter module.

# properties.managed.description
Managed data-plane dependencies (Memorystore, etc.) that aren't Billy services but whose firewall posture we care about.