Endpoint isolation policy blocks the EDR cloud callback and the host never recovers from containment

Containment starts correctly, but the host stays permanently isolated because the policy also cut off the control channel required to release it safely.