{
  "schema": "router-step-release-v1",
  "step_id": "STEP_050M07P28R1_R01_VM100_AWG_REMOTE_FOUNDATION",
  "revision": "R01",
  "classification": "core",
  "step_class": "B",
  "workflow_contract_version": 2,
  "canonical_zip_required": true,
  "runtime_impact": true,
  "functional_stage": "awg_remote_vm100_foundation",
  "touched_machines": ["VM100"],
  "worker_entry": "scripts/worker.sh",
  "exact_worker_fixture": "tests/exact-worker.sh",
  "mandatory_fixture_count": 5,
  "target_package_path": "payload/vm100-awg-remote-foundation-target-package.tar.gz",
  "target_package_sha256": "edc4a231becc13b852a235584fff50886e2faa9b4cffdf055630c7b98b7d9f78",
  "expected_installer_sha256": "4fdb6cc6604fa74d0a43c2bcc4174d7f3c2446b11d88dbb10b688a5a59413f47",
  "path_ownership_manifest": "reference/path-ownership.tsv",
  "target_environment_matrix": "reference/target-environment.tsv",
  "current_latest": "WG_PAID_MGTS_LATEST_20260915-055329.zip",
  "current_latest_sha256": "ee6508b3aea9e7f359f41286b87db65f208cc91a4b8fd8bade64f3a102c2d715",
  "baseline_commit": "1923d6a191395c6ad90e486cb4d36cff1f83b33e",
  "baseline_tree": "79fcd14b0b8764744db7fda39dbbd4de26f6349a",
  "baseline_file_count": 34,
  "baseline_file_sha256": {
    "etc/config/firewall": "00683f3fd085510f2942761b8eec663b4afabaee9b5de5ff637a1e6e43996fd5",
    "etc/pbr.d/default_lan_to_vpn.sh": "d207bd15aa10c6971525722b7960752b2e319c932f53bb9574a5058d60dcb185",
    "etc/nftables.d/91-wg-remote-default-selector.nft": "d4bc25c4b9aa995799f6734a8c12bd260cf54e7450161f17edf5c156c60bd5da"
  },
  "target_file_sha256": {
    "etc/config/firewall": "6cbc675df617c1d877aaec0625ead82e245c187bd159dc601504cef8169030e5",
    "etc/pbr.d/default_lan_to_vpn.sh": "9c658c5dd49ad068655c048611cc3214027620d2f0a3ff750982d48ffdbe4d8a",
    "etc/nftables.d/91-wg-remote-default-selector.nft": "1f3e948015059252a9da6255b7481c6788cf053a710b6028d73d6253682a5964"
  },
  "source_of_truth": "current_latest_plus_vm100_machine_git_plus_dynamic_runtime_preflight",
  "machine_git_change_required": true,
  "network_uci_intended_change": true,
  "firewall_uci_intended_change": true,
  "awg_remote_subnet": "10.250.101.0/24",
  "awg_remote_address": "10.250.101.1/24",
  "awg_remote_listen_port": 51832,
  "awg_remote_fixed_selector": "cs4",
  "amneziawg_tools_version": "3.1.20260812-r1",
  "kmod_amneziawg_version": "6.6.93.3.1.20260906-r1",
  "luci_proto_amneziawg_version": "3.1.1-r1",
  "secret_generation": "vm100_only_awg_genkey_plus_awg_genpsk_no_secret_evidence",
  "reference_bundles": [
    {"zip": "STEP_050M07P28R0_R02_VM100_AWG_LUCI31.zip", "sha256": "05568eba70d54240d3493672cee717050d4de6cb30b0555b1339f88479faf34e", "purpose": "current accepted VM100 OpenWrt runtime/package/UCI workflow mechanics"},
    {"zip": "STEP_050M07P28F1_R04_VM100_AWG_PBR.zip", "sha256": "841ddbffbda491a1e70d5b66cd2d430c5154e6f8fbd0234cf9a659d7bdd0d944", "purpose": "current accepted VM100 managed source/PBR semantic membership and Machine Git close mechanics"}
  ],
  "vm130_contract_commit": "fadde79bcc5756d478b8814f94ad16ad48fd25d2"
}