What happens to a Pod's network traffic once any NetworkPolicy selects it?

For whichever direction the policy addresses, that Pod's traffic becomes default-deny except for explicit allows. Pods not selected remain fully open.