=== STEP_034H VERIFY CANARY PEER APPLIED ===
timestamp=20260708-121402
mode=read-only verification
subscription_id=e4f76d40-b063-4be7-b2c1-7eecdafce36d
peer_id=376dfa07-0ba4-4182-af39-389a2cb3badd
job_id=95463317-b0a0-4117-84fd-2a0dcf387741
tunnel_ip=10.253.1.10
forbidden: manual peer write, job run, wg reload
=== VM121 backend peer/job lookup ===
date=Wed Jul  8 12:14:02 UTC 2026
peers_curl_rc=0
jobs_curl_rc=0
peer_found=True
peer_id=376dfa07-0ba4-4182-af39-389a2cb3badd
peer_user_id=5af6e227-e772-4a29-9290-7a74aea8bb18
peer_node_id=ddn-test
peer_tunnel_ip=10.253.1.10
peer_enabled=True
peer_created_at=2026-07-08T12:12:18.380667Z
peer_disabled_at=None
peer_public_key=fmcqSUy1fErBV5RrcoVoex2VAgaxz2i79GzK8qd88UI=
peer_tunnel_ip_matches=True
job_found=True
job_id=95463317-b0a0-4117-84fd-2a0dcf387741
job_node_id=ddn-test
job_action=enable_peer
job_peer_id=None
job_status=pending
job_attempts=0
job_last_error=None
job_created_at=2026-07-08T12:12:18.382277Z
job_updated_at=None
job_peer_id_matches=False

=== backend health ===
{"status":"ok","service":"wg-access-backend","environment":"dev"}
{"status":"ok","db":1}
no_peer_create=1
no_job_run=1
vm121_lookup_done=1

=== MGTS VM100 wg_paid lookup ===
date=Wed Jul  8 12:14:03 UTC 2026
pubkey_present_from_backend=1

=== interfaces ===
eth0             UP             10.201.0.1/24 fe80::be24:11ff:fe94:bbfb/64 
eth2             UP             10.200.0.1/24 fe80::be24:11ff:fee4:6cfb/64 
br-lan           UP             10.71.100.1/24 fe80::be24:11ff:feee:7d14/64 
wg_paid          UNKNOWN        10.253.1.1/16 

=== wg_paid show ===
interface: wg_paid
  public key: FD1J+KVZ965pCjgtO0YWxJsKANY9uz6v1P54JLkiZzY=
  private key: (hidden)
  listening port: 51830

=== wg_paid dump ===
4HdlxlrT3zfHmoWXFYrbsPLlrNf/baQGIVRizcqCvW0=	FD1J+KVZ965pCjgtO0YWxJsKANY9uz6v1P54JLkiZzY=	51830	off

=== peer checks ===
vm100_pubkey_in_wg_show_rc=1
vm100_pubkey_in_wg_dump_rc=1
vm100_allowed_ip_match_rc=1

=== UCI wg_paid snippets ===
network.wg_paid=interface
network.wg_paid.proto='wireguard'
network.wg_paid.private_key='4HdlxlrT3zfHmoWXFYrbsPLlrNf/baQGIVRizcqCvW0='
network.wg_paid.listen_port='51830'
network.wg_paid.addresses='10.253.1.1/16'

=== firewall/DNAT 51830 snippets ===
firewall.wg_paid=zone
firewall.wg_paid.name='wg_paid'
firewall.wg_paid.input='ACCEPT'
firewall.wg_paid.output='ACCEPT'
firewall.wg_paid.forward='REJECT'
firewall.wg_paid.network='wg_paid'
firewall.wg_paid_to_transit_direct=forwarding
firewall.wg_paid_to_transit_direct.src='wg_paid'
firewall.wg_paid_to_transit_direct.dest='transit_direct'
firewall.wg_paid_to_transit_vpn=forwarding
firewall.wg_paid_to_transit_vpn.src='wg_paid'
firewall.wg_paid_to_transit_vpn.dest='transit_vpn'
firewall.allow_wg_paid_51830=rule
firewall.allow_wg_paid_51830.name='Allow-WG-Paid-51830'
firewall.allow_wg_paid_51830.proto='udp'
firewall.allow_wg_paid_51830.dest_port='51830'
firewall.allow_wg_paid_51830.target='ACCEPT'

no_manual_peer_write=1
no_wg_reload=1
vm100_lookup_done=1

=== STEP_034H RESULT ===
peer_found=True
peer_enabled=True
peer_node_id=ddn-test
peer_tunnel_ip_matches=True
job_found=True
job_status=pending
job_peer_id_matches=False
pubkey_present_from_backend=1
vm100_pubkey_in_wg_show_rc=1
vm100_pubkey_in_wg_dump_rc=1
vm100_allowed_ip_match_rc=1
backend_health_ok_lines=2
decision=BLOCK_VM100_ALLOWED_IP_MISMATCH