STEP_035G_OBSERVE_MULTICLASS_CANARY PASS_MULTICLASS_CANARY_TRAFFIC_CONFIRMED
timestamp: 20260708-124708

Live canary path:
- selector entry: 10.253.1.10 cs1 canary_vpn3
- expected route: cs1 -> mark 0x203 -> vpn3

Temporary client:
- extract_script_rc: 0
- wg_link_add_rc: 0
- wg_setconf_rc: 0
- wg_link_up_rc: 0
- wg_default_route_rc: 0
- canary_ping_rc: 0
- netns_cleanup_rc: 0
- temp_iface_still_exists_rc: 1

Counters:
- VM100 selector delta packets: 4
- VM101 cs1 mapper delta packets: 4
- VM101 clear cs1 delta packets: 4
- VM101 cs2 mapper delta packets: 0
- VM101 cs3 mapper delta packets: 0
- VM101 clear cs2 delta packets: 0
- VM101 clear cs3 delta packets: 0

Routes:
- mark203 -> vpn3 rc: 0
- mark204 -> vpn4 rc: 0
- mark205 -> vpn5 rc: 0

Safety:
- no secrets published
- no server WG reload
- no peer changes

Next:
- if PASS, checkpoint VM100/VM101 after multiclass mapper.