vpnonlykanishkdan
ADDEDvpnonly routes selected macOS apps through a WireGuard VPN tunnel while keeping all other traffic on the normal connection. It uses macOS PF firewall group matching to split-tunnel applications without kernel extensions or Network Extension entitlements.