diff --git a/apps/production/networkpolicy.yaml b/apps/production/networkpolicy.yaml
index 995e5ad..a11c781 100644
--- a/apps/production/networkpolicy.yaml
+++ b/apps/production/networkpolicy.yaml
@@ -461,6 +461,13 @@ spec:
           - wikijs-gruppenpruefung
           - haproxy
           - draupnir
+          # Welle 1 (#0088): kein externer Bedarf nachweisbar.
+          - matrix-rtc-authorisation-service
+          - wikijs-config
+          - init-secrets
+          - synapse-check-config
+          - deployment-markers-pre
+          - deployment-markers-post
       - key: app
         operator: NotIn
         values:
@@ -526,6 +533,13 @@ spec:
           - wikijs-gruppenpruefung
           - haproxy
           - draupnir
+          # Welle 1 (#0088): Deploy- und Hilfs-Arbeitslasten.
+          - matrix-rtc-authorisation-service
+          - wikijs-config
+          - init-secrets
+          - synapse-check-config
+          - deployment-markers-pre
+          - deployment-markers-post
   policyTypes:
     - Egress
   egress: