Portmaster has been filling this role for me for the last couple years.

It has no rules, like "Allow a file with THIS name on THAT path", the biggest complain of every simplewall user is its biggest flaw and annoyance: It asks you a million times to allow or deny the "same" app, after its checksum changed. So all the Windows apps that auto update always pop up again and again.

A coding agent autonomously compiling and testing an exe with network access is impossible. I have to turn off simplewall, because it would constantly block the executable after recompilation.