ACCESS MAP CHECKPOINT OK

Date:
  2026-07-06

Files:
  /opt/router-ops/inventory/access-map.yml
  /opt/router-ops/inventory/access-map.md
  /opt/router-ops/inventory/README.md

Command:
  /usr/local/bin/access-map

Verified commands:
  access-map paths
  access-map pve-mgts-check

Verified state:
  router-ops -> pve-wg-paid uses ssh alias pve-mgts
  pve-mgts HostName is 10.71.100.222
  router-ops WG interface router-ops-mgts is enabled and active
  router-ops WG address is 10.250.100.4/32
  SSH path to Proxmox is 10.250.100.4 -> 10.71.100.222:22
  Proxmox vmbr0 has no IPv4
  Proxmox vmbr1 is 10.71.100.222/24
  Proxmox route back to WG admin net is 10.250.100.0/24 via 10.71.100.1
  VM100 and VM101 are running

Policy:
  Do not create new SSH/WG keys unless explicitly requested.
  Before suggesting access commands, read access-map.
  Do not print private keys or WireGuard client configs.
