PVE_EVIDENCE_RESULT=PASS VM100_STATUS=running VM100_NAME=VM100-OpenWRT-core VM100_SATA1=local-lvm:vm-100-disk-0,size=1148M VM100_ONBOOT=1 VM100_STARTUP=order=10,up=30,down=30 VM100_BOOT=order=sata1;ide2 VM100_SNAPSHOT=r20q100-toolset-ready VM100_SNAPSHOT_PRESENT=true --- VM100 SNAPSHOTS --- `-> MGTS_RESTORED_BEFORE_FIRST_BOOT 2026-07-06 12:28:36 pve-wg-paid: VM100 restored from golden, before first boot `-> MGTS_INTERNAL_LAN_RENUMBERED_OK 2026-07-06 12:52:29 pve-wg-paid: VM100 LAN renumbered to 10.71.100.1, wg_remote 10.250.100.1 `-> MGTS_VM100_WG_REMOTE_ROTATED_OK 2026-07-06 13:04:15 pve-wg-paid: VM100 wg_remote keys rotated for 10.250.100.0/24; client configs stored on VM100 `-> MGTS_VM100_ROUTER_OPS_WG_PEER_OK 2026-07-06 14:08:27 pve-wg-paid: VM100 wg_remote has router-ops-mgts peer 10.250.100.4/32; management path via WG `-> MGTS_VM100_BEFORE_WG_PAID_CREATE 2026-07-06 17:37:41 Before creating wg_paid on MGTS VM100 for WG Paid migration `-> MGTS_VM100_WG_PAID_BASE_OK 2026-07-06 17:47:21 MGTS VM100: wg_paid created; 10.253.1.1/16; UDP 51830; firewall wg_paid; live wg set dummy peer add/remove OK `-> STEP_004B_WG_PAID_CLIENT_PATH_OK 2026-07-06 18:33:19 MGTS VM100: wg_paid live client smoke OK; client can reach 10.253.1.1 and internet via VM101 `-> STEP_004C_ACCESS_MAP_VM121_DIRECT_OK 2026-07-06 18:43:30 MGTS VM100: VM121 direct wg-mgts admin access documented in access-map `-> STEP_005_MGTS_EGRESS_PANEL_OK 2026-07-06 20:52:45 MGTS/WG Paid: VM100 PBR fixed; VM101 egress OK; vpn_user manual mode smoke OK; VM105 control panel identified; deferred UI/cleanup tasks recorded `-> STEP_028A_MGTS_WG_PAID_E2E_OK 2026-07-06 22:01:22 MGTS VM100: wg_paid target E2E smoke OK; peer lifecycle via agent OK; PBR direct/vpn route decision OK; final test peer removed `-> S034K_WGPAY_DSCP_CANARY_PROVEN 2026-07-08 15:23:36 WGPay canary peer 10.253.1.10 DSCP/fwmark path proven to vpn3 after STEP_034J `-> S034O_WGPAY_PERSISTED_CANARY_OK 2026-07-08 15:31:52 WGPay persisted per-peer DSCP canary proven by real traffic after STEP_034N `-> S035D_WGPAY_SELECTOR_CANARY_OK 2026-07-08 15:41:26 WGPay selector-file canary proven by real traffic after STEP_035C `-> S035H_WGPAY_MULTICLASS_MAPPER_OK 2026-07-08 15:48:57 WGPay multiclass mapper proven by real canary traffic after STEP_035G `-> S036H_WGPAY_5SLOT_POLICY_PERSISTED 2026-07-08 16:02:14 WGPay VM101 persistent 5-slot policy routes/rules OK after STEP_036G `-> S036K_WGPAY_5CLASS_MAPPER_OK 2026-07-08 16:30:01 WGPay 5-class mapper proven by canary traffic after STEP_036J `-> S037D_WGPAY_CS2_PROVEN_OK 2026-07-08 17:00:09 WG Paid STEP_037D cs2 proven checkpoint: cs2 peer 10.253.1.11 -> fwmark 0x204 -> vpn4 `-> S038D_WGPAY_CS3_PROVEN_OK 2026-07-08 17:13:59 WG Paid STEP_038D cs3 proven checkpoint: 10.253.1.12 -> cs3 -> fwmark 0x205 -> table205/vpn5 `-> S039E_WGPAY_CS4_PROVEN_OK 2026-07-08 18:18:57 WG Paid checkpoint: cs1/cs2/cs3/cs4 proven; cs4 10.253.1.13 -> cs4 -> 0x201 -> vpn1 `-> STEP_042F_BEFORE_VM100_REBOOT_TEST 2026-07-09 13:53:53 before STEP_042F VM100 reboot recovery test `-> S042K_OK_20260709_1110 2026-07-09 14:10:08 STEP_042K agent automation + VM100 reboot recovery OK `-> S046U_OK_20260710_1216 2026-07-10 15:16:14 WG Paid 046U OK: VM100 local commit loop reboot survival OK `-> S047C_OK_20260710_1230 2026-07-10 15:33:07 WG Paid 047C v7 cooldown/reboot OK `-> S047E_OK_20260710_1305 2026-07-10 16:05:57 WG Paid 047E old VM121 reconcile proof OK `-> S048O100_20260710_1816 2026-07-10 21:16:55 STEP_048O2 clean post-quarantine checkpoint VM100 `-> S049H100_0919 2026-07-11 12:20:29 VM100 after 049H daily rebalance and health repair proven `-> R20Q100_PRE_ROOTFS_GROW 2026-07-24 21:19:50 no-description `-> r20q100-pre-root-grow 2026-07-24 23:19:16 no-description `-> r20q100-toolset-ready 2026-07-25 09:13:01 VM100 root 1.1G, extended toolset and runtime postcheck PASS `-> current You are here!