How should network policies be designed for production in Container Security?

Verify CNI support, start with default deny, add explicit required flows, test DNS and egress, and observe denied traffic.