STEP_035E_MULTICLASS_SELECTOR_PLAN_READONLY PASS_MULTICLASS_SELECTOR_PLAN_READONLY
timestamp: 20260708-124404

VM100 selector readiness:
- vm100_apply_script_mentions_cs123_rc: 0
- vm100_selector_rule_count: 1
- vm100_wg_paid_peer_count: 1
- vm100_canary_ip_in_wg_paid_rc: 0

VM101 multiclass readiness:
- vm101_vpn3_link_rc: 0
- vm101_vpn4_link_rc: 0
- vm101_vpn5_link_rc: 0
- vm101_table203_vpn3_rc: 0
- vm101_table204_vpn4_rc: 0
- vm101_table205_vpn5_rc: 0
- vm101_mark203_route_vpn3_rc: 0
- vm101_mark204_route_vpn4_rc: 0
- vm101_mark205_route_vpn5_rc: 0
- vm101_current_cs1_mapper_visible_rc: 0

WG Access:
- peer_count: 21
- enabled_peer_count: 1
- pending_job_count: 0
- endpoint_final_lines: 1

Package:
- /opt/router-ops/apply-packages/20260708-124404_step035e_multiclass_selector_plan_readonly

Recommended next apply:
- VM101 only: extend mapper to cs1/cs2/cs3 -> 0x203/0x204/0x205.
- VM100 selector remains one entry only: 10.253.1.10 cs1 canary_vpn3.
- Then retest current canary traffic to ensure cs1/vpn3 still works.

Changes:
- none
- read-only only
- no remote writes
- no nft changes
- no reloads
- no peer changes
