VM101 is OpenWrt with BusyBox ash. All target scripts use /bin/sh and perform command capability preflight. Transport route: VM130 -> pve-mgts -> root@10.71.100.2, standalone scripts through stdin and tar/gzip for binary transfer. Active, quarantined and duplicate endpoints are excluded before probing. Remaining candidates are freshly tested through a dedicated temporary AmneziaWG interface created directly with ip and amneziawg setconf, then ranked by hmn-rank-awg.sh and validated by router-egress-generation-validate. The old HMN tester/loader path is intentionally not used because it changes UCI state and reloads the network. R15B2 performs no UCI write, network reload, ifup/ifdown of production interfaces, service restart or production policy-table change. No active symlink is created. No vpn1..vpn5 configuration, production route, service or repair counter is changed. The safe test phase uses only the temporary interface r15b2t and temporary host routes to 9.9.9.9 and 1.1.1.1, with cleanup traps.