How to find out which process to unblock in Lulu to allow Xcode to download a component?

I want to be surgical and allow only the rule/process or rules/processes that are blocking this download. I’m trying to avoid blanket disabling Lulu and then reenabling. There are too many Apple rules to unblock and re-block one-by-one.

Happy to post in https://apple.stackexchange.com if it’s more appropriate there.

I tried using Netiquette and Wireshark and even a log stream via terminal but I couldn’t see anything get triggered when I try to “get” a component (see screenshot below):
tried to get iOS component
it fails after a few seconds