STEP_036I_VM101_5CLASS_MAPPER PASS_VM101_5CLASS_MAPPER_APPLIED
timestamp: 20260708-130358

VM101 mapper:
- cs1 -> 0x203 -> vpn3
- cs2 -> 0x204 -> vpn4
- cs3 -> 0x205 -> vpn5
- cs4 -> 0x201 -> vpn1
- cs5 -> 0x202 -> vpn2

Validation:
- mapper_service_start_rc: 0
- mapper_service_enabled_rc: 0
- prerouting mapper rule count: 5
- postrouting clear rule count: 5
- mark routes 0x201..0x205 rc: 0 / 0 / 0 / 0 / 0
- table200_default_vpn1_rc: 0

VM100 read-only:
- selector active entry count: 1
- selector rule visible rc: 0

Rollback:
- VM101: /root/rollback-step036i-vm101-5class-mapper.sh

Changes:
- VM101 mapper script updated and service restarted
- VM100 read-only verification only
- no table200 intended change
- no production switch
- no network/firewall/WG reload
- no peer changes
- no selector changes

Next:
- run current canary traffic observe:
  - cs1 should increment
  - cs2/cs3/cs4/cs5 should stay zero