=== STEP_036G PERSIST VM101 5SLOT POLICY ===
timestamp=20260708-130019
mode=VM101 persist policy routes/rules for 0x201..0x205
target=0x201/vpn1 0x202/vpn2 0x203/vpn3 0x204/vpn4 0x205/vpn5
forbidden: table200 changes, production switch, VM100 writes, network/firewall reload, WG reload, peer changes, mapper change
date=Wed Jul  8 13:00:20 UTC 2026
backup_dir=/root/router-ops-backups/step036g-persist-5slot-policy-20260708-130020

=== guards before persistence ===
guard_vpn1_link_rc=0
guard_vpn2_link_rc=0
guard_vpn3_link_rc=0
guard_vpn4_link_rc=0
guard_vpn5_link_rc=0
guard_table200_default_vpn1_rc=0
guard_table201_vpn1_rc=0
guard_rule_0x201_table201_rc=0
guard_mark0x201_route_vpn1_rc=0
guard_table202_vpn2_rc=0
guard_rule_0x202_table202_rc=0
guard_mark0x202_route_vpn2_rc=0
guard_table203_vpn3_rc=0
guard_rule_0x203_table203_rc=0
guard_mark0x203_route_vpn3_rc=0
guard_table204_vpn4_rc=0
guard_rule_0x204_table204_rc=0
guard_mark0x204_route_vpn4_rc=0
guard_table205_vpn5_rc=0
guard_rule_0x205_table205_rc=0
guard_mark0x205_route_vpn5_rc=0
guard_mapper_service_enabled_rc=0
guard_mapper_prerouting_rule_count=3
uci_changes_before_rc=0

=== backup existing policy service if any ===
backup_done=1

=== write apply script ===

=== write init script ===

=== rollback script ===
rollback_vm101=/root/rollback-step036g-persist-5slot-policy.sh

=== enable + start policy service ===
egress_slots_init_enable_rc=0
applied_router_egress_slots_5=1
egress_slots_init_start_rc=0

=== verify service and 5 slots ===
egress_slots_init_enabled_rc=0
table201_vpn1_rc=0
rule_0x201_table201_rc=0
mark0x201_route_vpn1_rc=0
table202_vpn2_rc=0
rule_0x202_table202_rc=0
mark0x202_route_vpn2_rc=0
table203_vpn3_rc=0
rule_0x203_table203_rc=0
mark0x203_route_vpn3_rc=0
table204_vpn4_rc=0
rule_0x204_table204_rc=0
mark0x204_route_vpn4_rc=0
table205_vpn5_rc=0
rule_0x205_table205_rc=0
mark0x205_route_vpn5_rc=0
table200_default_vpn1_rc=0
table200_cmp_rc=0

=== mapper unchanged check ===
mapper_service_enabled_rc=0
mapper_prerouting_rule_count=3
mapper_postrouting_rule_count=3

=== concise state ===
10011:	from all fwmark 0x201 lookup 201
10012:	from all fwmark 0x202 lookup 202
10013:	from all fwmark 0x203 lookup 203
10014:	from all fwmark 0x204 lookup 204
10015:	from all fwmark 0x205 lookup 205
--- table 201 ---
default dev vpn1 scope link 
--- table 202 ---
default dev vpn2 scope link 
--- table 203 ---
default dev vpn3 scope link 
--- table 204 ---
default dev vpn4 scope link 
--- table 205 ---
default dev vpn5 scope link 

=== UCI changes after ===
uci_changes_after_rc=0

=== no forbidden action proof ===
no_table200_change_intended=1
no_production_switch=1
no_network_reload=1
no_firewall_reload=1
no_wg_reload=1
no_peer_change=1
no_mapper_change=1
vm101_persist_done=1

=== STEP_036G RESULT ===
egress_slots_init_enable_rc=0
egress_slots_init_start_rc=0
egress_slots_init_enabled_rc=0
table201_vpn1_rc=0
table202_vpn2_rc=0
table203_vpn3_rc=0
table204_vpn4_rc=0
table205_vpn5_rc=0
rule_0x201_table201_rc=0
rule_0x202_table202_rc=0
rule_0x203_table203_rc=0
rule_0x204_table204_rc=0
rule_0x205_table205_rc=0
mark0x201_route_vpn1_rc=0
mark0x202_route_vpn2_rc=0
mark0x203_route_vpn3_rc=0
mark0x204_route_vpn4_rc=0
mark0x205_route_vpn5_rc=0
table200_default_vpn1_rc=0
table200_cmp_rc=0
mapper_service_enabled_rc=0
mapper_prerouting_rule_count=3
mapper_postrouting_rule_count=3
rollback_vm101=/root/rollback-step036g-persist-5slot-policy.sh
decision=PASS_VM101_5SLOT_POLICY_PERSISTED