--- public/fieldnotes/default-deny-und-die-offene-regel.before.json	2026-11-09 15:22:19
+++ public/fieldnotes/default-deny-und-die-offene-regel.after.json	2026-11-09 15:22:19
@@ -20,7 +20,7 @@
     "apiVersion": "networking.k8s.io/v1",
     "kind": "NetworkPolicy",
     "metadata": {
-      "name": "legacy-api",
+      "name": "front-to-api",
       "namespace": "payments"
     },
     "spec": {
@@ -33,7 +33,27 @@
         "Ingress"
       ],
       "ingress": [
-        {}
+        {
+          "from": [
+            {
+              "namespaceSelector": {
+                "matchLabels": {
+                  "zone": "edge"
+                }
+              },
+              "podSelector": {
+                "matchLabels": {
+                  "app": "web"
+                }
+              }
+            }
+          ],
+          "ports": [
+            {
+              "port": 8443
+            }
+          ]
+        }
       ]
     }
   }