STEP_036H_CHECKPOINT_5SLOT_POLICY PASS_5SLOT_POLICY_CHECKPOINT
timestamp: 20260708-130214

Snapshot:
- name: S036H_WGPAY_5SLOT_POLICY_PERSISTED
- VM100 snapshot rc/visible: 0 / 0
- VM101 snapshot rc/visible: 0 / 0

VM101 5-slot policy:
- service/apply rc: 0 / 0
- tables 201..205 rc: 0 / 0 / 0 / 0 / 0
- rules 0x201..0x205 rc: 0 / 0 / 0 / 0 / 0
- mark routes 0x201..0x205 rc: 0 / 0 / 0 / 0 / 0
- table200 default vpn1 rc: 0

Mapper/selector:
- VM101 mapper service/pre/post: 0 / 3 / 3
- VM100 selector active entries: 1
- VM100 wg_paid peer count: 1

VM121:
- peer_count: 21
- enabled_peer_count: 1
- job_count: 37
- pending_job_count: 0
- canary_peer_enabled: True
- canary_tunnel_ip_matches: True
- canary_job_status: completed
- pg_dump_rc: 0
- endpoint_final_lines: 1
- backend_health_ok_lines: 2

Changes:
- snapshots VM100/VM101
- VM121 pg_dump backup only
- no policy switch
- no peer disable
- no WG/network/firewall reload
- no backend restart

Next:
- extend VM101 mapper to cs4/cs5:
  cs4 -> 0x201/vpn1
  cs5 -> 0x202/vpn2