ScopeGuard: MDM Policy Refiner

Intune configurations often suffer from policy bleed, where iOS-specific restrictions unintentionally trigger disruptive authentication requirements on paired Apple Watches. ScopeGuard audits and segments device management profiles to ensure security mandates stay strictly within their intended hardware boundaries.