STEP_034H_VERIFY_CANARY_PEER_APPLIED BLOCK_VM100_ALLOWED_IP_MISMATCH
timestamp: 20260708-121402

Canary peer:
- subscription_id: e4f76d40-b063-4be7-b2c1-7eecdafce36d
- peer_id: 376dfa07-0ba4-4182-af39-389a2cb3badd
- job_id: 95463317-b0a0-4117-84fd-2a0dcf387741
- node_id: ddn-test
- tunnel_ip: 10.253.1.10
- job_status: pending
- peer_enabled: True

VM100 wg_paid validation:
- pubkey_present_from_backend: 1
- vm100_pubkey_in_wg_show_rc: 1
- vm100_pubkey_in_wg_dump_rc: 1
- vm100_allowed_ip_match_rc: 1

Changes:
- none
- no manual peer write
- no WG reload
- no job run

Next:
- if PASS, use tunnel_ip 10.253.1.10 as WGPay source for VM100-side DSCP canary.
- if job is pending or peer is not visible on VM100, inspect agent/job processing without manual peer write.