# HideMyName adapter

Provider-specific adapter for the generic egress system.

Inputs are sanitized metadata TSV files from the existing HMN layer on VM101:

- `/root/hmn/cache/ok-awg1-strict-foreign-latest.tsv`
- `/root/hmn/cache/selected-awg1-latest.tsv`
- `/root/hmn/cache/ok-awg1-strict-all-latest.tsv`
- `/root/hmn/cache/quarantine-awg1-latest.tsv`

The adapter must never publish raw configs, private keys, HMN access codes, or full WireGuard config content.

Initial apply strategy should prefer `preserve_existing`:
- keep existing legacy `vpn1` and `vpn2` endpoint assignments where possible;
- fill `vpn3`-`vpn5` from non-quarantined primary candidates;
- only later switch to full latency/balancer mode.