# STEP_034C WGPay test peer runbook package

This package is read-only. No peer was created.

Expected future flow, if confirmed by STEP_034C output:

1. Use WG Access backend endpoint:
   - `POST http://127.0.0.1:18080/admin/subscriptions`
   - create one dedicated test subscription/peer
2. Record:
   - subscription_id
   - peer_id
   - tunnel_ip
   - public_key
   - generated client config, stored securely and not published
3. Let existing agent/job flow apply `enable_peer` to MGTS VM100.
4. Verify on VM100 `wg_paid` peer exists and assigned tunnel IP is reachable.
5. Use that `tunnel_ip` as DSCP canary source on VM100, not DHCP lease.
6. Rollback through existing backend:
   - `POST /admin/subscriptions/{subscription_id}/cancel`
   - or `POST /admin/peers/{peer_id}/disable`