STEP_033B_FWMARK_RULES_RUNTIME_ONLY PASS_FWMARK_RULES_RUNTIME_ONLY
timestamp: 20260708-110408

Action:
- runtime ip rules only:
  - pref 10013 fwmark 0x203 lookup 203
  - pref 10014 fwmark 0x204 lookup 204
  - pref 10015 fwmark 0x205 lookup 205

Validation:
- apply_rc: 0
- rule203_lines: 1
- rule204_lines: 1
- rule205_lines: 1
- table200_default_vpn1_lines: 1
- table203_default_vpn3_lines: 2
- table204_default_vpn4_lines: 2
- table205_default_vpn5_lines: 2
- production_unmarked_vpn1_lines: 1
- mark203_vpn3: 1
- mark204_vpn4: 1
- mark205_vpn5: 1
- mark_iif203_vpn3: 1
- mark_iif204_vpn4: 1
- mark_iif205_vpn5: 1
- ping_vpn1_rc: 0
- ping_vpn3_rc: 0
- ping_vpn4_rc: 0
- ping_vpn5_rc: 0
- uci_pending_lines: 0

Remote changes:
- runtime ip rules only
- no nft marking
- no UCI changes
- no firewall changes
- no production switch

Rollback:
- ssh VM101 and run:
  /root/router-ops-step033b-fwmark/rollback-fwmark-rules.sh