=== STEP_034E4 ENDPOINT SOURCE APPLY NO RELOAD ===
timestamp=20260708-115205
mode=persistent file replacement only
admin_endpoint=wg-studio.secret-studio.ru:51820
wgpay_endpoint=wg-studio.secret-studio.ru:51830
forbidden: wg reload, network restart, docker restart, peer creation
=== DNS sanity ===
95.165.105.4    wg-studio.secret-studio.ru

=== LOCAL router-ops apply candidates ===
LOCAL_CHANGED_FILES=0

=== VM121 endpoint source apply candidates ===
UPDATED_VM121 /etc/wireguard/wg-mgts.conf
--- /etc/wireguard/wg-mgts.conf.before
+++ /etc/wireguard/wg-mgts.conf.after
@@ -4,6 +4,6 @@
 
 [Peer]
 PublicKey = uTNh8zWnLbORIY2DZeKJMV+ygB+ii69hmDckI/T3h3Y=
-Endpoint = 192.168.30.218:51820
+Endpoint = wg-studio.secret-studio.ru:51820
 AllowedIPs = 10.71.100.0/24, 10.250.100.1/32
 PersistentKeepalive = 25
VM121_CHANGED_FILES=1
VM121_REMOTE_BACKUP_DIR=/root/router-ops-backups/endpoint-source-backup-20260708-115205

=== VM121 post-apply grep active candidates only ===
/etc/wireguard/wg-mgts.conf:7:Endpoint = wg-studio.secret-studio.ru:51820

=== VM121 running backend env endpoint hints, no restart ===
backend_container=wgaccess-backend
DATABASE_URL=postgresql+psycopg://wg_access:fqoFHf2k4AqCh1OEwYjAp6Uv@postgres:5432/wg_access
HOSTNAME=547f5e43daea
POSTGRES_DB=wg_access
POSTGRES_USER=wg_access
WG_CLIENT_ALLOWED_IPS=0.0.0.0/0
WG_CLIENT_ENDPOINT=10.71.100.1:51830
WG_CLIENT_FIRST_IP=10.253.1.10
WG_CLIENT_POOL_CIDR=10.253.0.0/16
WG_SERVER_PUBLIC_KEY=FD1J+KVZ965pCjgtO0YWxJsKANY9uz6v1P54JLkiZzY=

=== VM121 no reload proof ===
no_wg_reload=1
no_docker_restart=1
no_peer_create=1

=== VM121 health after file edits ===
{"status":"ok","service":"wg-access-backend","environment":"dev"}
{"status":"ok","db":1}
vm121_endpoint_apply_done=1

=== LOCAL post-apply grep ===

=== STEP_034E4 RESULT ===
local_changed_files=0
vm121_changed_files=1
old_active_endpoint_remaining_lines=1
final_admin_endpoint_lines=3
final_wgpay_endpoint_lines=1
no_wg_reload_lines=1
no_docker_restart_lines=1
no_peer_create_lines=1
backend_health_ok_lines=2
backup_dir=/opt/router-ops/state/endpoint-source-backup-20260708-115205
decision=BLOCK_OLD_ENDPOINT_REMAINS_ACTIVE_SOURCE