# STEP_036A five-slot readiness plan

No remote changes were made.

Current proven state:

- VM100 selector has one entry:
  - 10.253.1.10 cs1 canary_vpn3
- VM101 mapper supports:
  - cs1 -> 0x203 -> vpn3
  - cs2 -> 0x204 -> vpn4
  - cs3 -> 0x205 -> vpn5

Candidate 5-slot extension:

- cs4 -> 0x201 -> vpn1
- cs5 -> 0x202 -> vpn2

Important caution:

- vpn1 is still related to legacy production/table 200 path.
- vpn2 was previously absent/down at runtime.
- Do not extend mapper to cs4/cs5 until vpn1/vpn2 readiness is proven and rollback is clear.
- Do not move legacy table 200 yet.

Likely next steps depending on readiness:

1. If vpn2/table202/rule 0x202 are missing:
   - repair/load vpn2 as slot 2 first.
2. If table201/rule 0x201 are missing for vpn1:
   - add runtime-only 0x201/table201 support without touching table 200.
3. Only after both are ready:
   - extend VM101 mapper to cs4/cs5.
4. Then create additional WGPay test peers and assign one to cs2/cs3/cs4/cs5 one by one.