=== STEP_036C IFUP VPN2 TABLE202 RUNTIME ===
timestamp=20260708-125352
mode=VM101 guarded ifup vpn2 + runtime table202/rule202
target=vpn2 table202 fwmark0x202
forbidden: table200 changes, production switch, VM100 writes, network/firewall reload, peer changes
date=Wed Jul  8 12:53:52 UTC 2026
backup_dir=/root/router-ops-backups/step036c-ifup-vpn2-table202-20260708-125352

=== before state ===
before_vpn2_link_rc=1
before_rule_0x202_rc=1
before_table202_vpn2_rc=1
Error: ipv4: FIB table does not exist.
Dump terminated
before_mark202_route_vpn2_rc=1

=== guards ===
guard_uci_network_vpn2_rc=0
guard_firewall_vpn2_present_rc=0
guard_vpn3_link_rc=0
guard_vpn4_link_rc=0
guard_vpn5_link_rc=0
guard_table203_vpn3_rc=0
guard_table204_vpn4_rc=0
guard_table205_vpn5_rc=0
uci_changes_before_rc=0

=== rollback script ===
rollback_vm101=/root/rollback-step036c-vpn2-table202-runtime.sh

=== guarded ifup vpn2 ===
ifup_vpn2_rc=0

=== after ifup vpn2 state ===
after_ifup_vpn2_link_rc=0
vpn2             UNKNOWN        10.86.108.200/32 
vpn2_latest 4c5teOPebMxBd3Cn80pG3uRPvJWtfxv2jv9DTMOZaH0=	1783515232
vpn2_transfer 4c5teOPebMxBd3Cn80pG3uRPvJWtfxv2jv9DTMOZaH0=	92	504

=== add runtime table202/rule202 ===
route_replace_table202_rc=0
rule202_exists_before_add_rc=1
rule_add_0x202_rc=0

=== verify slot202 ===
vpn2_link_rc=0
table202_vpn2_rc=0
rule_0x202_rc=0
mark202_route_vpn2_rc=0

=== existing 3-slot still OK ===
still_0x203_route_vpn3_rc=0
still_0x204_route_vpn4_rc=0
still_0x205_route_vpn5_rc=0

=== table200 untouched check ===
table200_default_vpn1_rc=0

=== current policy summary ===
10012:	from all fwmark 0x202 lookup 202
10013:	from all fwmark 0x203 lookup 203
10014:	from all fwmark 0x204 lookup 204
10015:	from all fwmark 0x205 lookup 205
10019:	from all iif eth1 lookup 200
10020:	from 10.200.0.0/24 lookup 200
--- table 200 ---
default dev vpn1 scope link 
10.200.0.0/24 dev eth1 scope link src 10.200.0.2 
10.201.0.0/24 dev eth3 scope link src 10.201.0.2 
--- table 202 ---
default dev vpn2 scope link 
--- table 203 ---
default dev vpn3 scope link 
--- table 204 ---
default dev vpn4 scope link 
--- table 205 ---
default dev vpn5 scope link 

=== UCI changes after ===
uci_changes_after_rc=0

=== no forbidden action proof ===
no_table200_change_intended=1
no_production_switch=1
no_network_reload=1
no_firewall_reload=1
no_peer_change=1
vm101_apply_done=1

=== STEP_036C RESULT ===
before_vpn2_link_rc=1
guard_uci_network_vpn2_rc=0
guard_firewall_vpn2_present_rc=0
ifup_vpn2_rc=0
after_ifup_vpn2_link_rc=0
route_replace_table202_rc=0
rule_add_0x202_rc=0
vpn2_link_rc=0
table202_vpn2_rc=0
rule_0x202_rc=0
mark202_route_vpn2_rc=0
still_0x203_route_vpn3_rc=0
still_0x204_route_vpn4_rc=0
still_0x205_route_vpn5_rc=0
table200_default_vpn1_rc=0
rollback_vm101=/root/rollback-step036c-vpn2-table202-runtime.sh
decision=PASS_VPN2_TABLE202_RUNTIME_READY