STEP_036J_OBSERVE_5CLASS_CANARY PASS_5CLASS_CANARY_TRAFFIC_CONFIRMED
timestamp: 20260708-130528

Current live canary path:
- selector entry: 10.253.1.10 cs1 canary_vpn3
- expected route: cs1 -> mark 0x203 -> vpn3

Temporary client:
- extract_script_rc: 0
- wg_link_add_rc: 0
- wg_setconf_rc: 0
- wg_link_up_rc: 0
- wg_default_route_rc: 0
- canary_ping_rc: 0
- netns_cleanup_rc: 0
- temp_iface_still_exists_rc: 1

Counters:
- VM100 selector delta packets: 4
- VM101 cs1 mapper delta packets: 4
- VM101 clear cs1 delta packets: 4
- VM101 cs2/cs3/cs4/cs5 mapper delta packets: 0 / 0 / 0 / 0
- VM101 clear cs2/cs3/cs4/cs5 delta packets: 0 / 0 / 0 / 0

Routes:
- mark0x201 -> vpn1 rc: 0
- mark0x202 -> vpn2 rc: 0
- mark0x203 -> vpn3 rc: 0
- mark0x204 -> vpn4 rc: 0
- mark0x205 -> vpn5 rc: 0

Safety:
- no secrets published
- no server WG reload
- no peer changes

Next:
- if PASS, create additional test peer for cs2 or checkpoint 5-class mapper first.