>>> [00] VM100 profile closure HOSTNAME=OpenWrt DATE_UTC=2026-07-13T06:37:09Z VM100_MODIFIED=false >>> [01] Dependency metadata FILE path=/etc/router-wgpay-selector.d/peers.conf size=315 sha256=2db1a0c46c1b93d9ede5f560d2d00db2dad3283adbc8f6ca6b0434ab695d8460 FILE path=/root/ru.zone size=219728 sha256=f7b57c319d65b4d2284e01dbfd2c4d32853c65139d108ff35e2578ae1da8704f FILE path=/etc/config/network size=2141 sha256=ccce5c82ccb295a2ecc0eea0ee0a60b09eca6b8704783cc3682928dc4d73cbf2 >>> [02] Selector secret scan SELECTOR_SECRET_SCAN=CLEAR >>> [03] Selector contents SELECTOR_CONTENT_BEGIN # router WGPay selector file # format: tunnel_ip dscp_class comment # STEP_035B: one proven canary only, no production-wide switch 10.253.1.10 cs1 canary_vpn3 # STEP_037B: second canary for cs2 -> vpn4 10.253.1.11 cs2 canary_vpn4 10.253.1.12 cs3 canary_vpn5 10.253.1.13 cs4 canary_vpn1 10.253.1.14 cs5 canary_vpn2 SELECTOR_CONTENT_END SELECTOR_ACTIVE_COUNT=5 >>> [04] RU zone structural validation RU_ZONE_TOTAL_LINES=14092 RU_ZONE_ACTIVE_LINES=14092 RU_ZONE_INVALID_LINES=0 RU_ZONE_DUPLICATE_LINES=0 >>> [05] Network sensitive-field proof NETWORK_SENSITIVE_FIELD_COUNT=4 option private_key. option private_key. option private_key. option private_key. >>> [06] Proposed strict managed paths MANAGED_PATH=/etc/config/pbr MANAGED_PATH=/etc/config/firewall MANAGED_PATH=/etc/config/dhcp MANAGED_PATH=/etc/pbr.d/default_lan_to_vpn.sh MANAGED_PATH=/etc/pbr.d/ru_to_direct.sh MANAGED_PATH=/etc/hotplug.d/iface/99-pbr-delayed-restart MANAGED_GLOB=/etc/init.d/router-* MANAGED_GLOB=/usr/local/bin/router-* MANAGED_GLOB=/usr/local/sbin/router-* MANAGED_GLOB=/usr/local/lib/router-* MANAGED_PATH=/etc/router-egress-activity/router_egress_activity.nft MANAGED_PATH=/etc/router-wgpay-egress-local.conf MANAGED_PATH=/etc/router-wgpay-selector.d/peers.conf MANAGED_PATH=/root/ru.zone MANAGED_GLOB=/etc/nftables.d/*wg*.nft OPTIONAL_MANAGED_PATH=/etc/crontabs/root >>> [07] Explicit exclusions EXCLUDE_PATH=/etc/config/network EXCLUDE_PATH=/etc/init.d/pbr EXCLUDE_PATH=/usr/share/pbr EXCLUDE_PATH=/usr/share/nftables.d/ruleset-post/30-pbr.nft EXCLUDE_PATH=/etc/nftables.d/10-custom-filter-chains.nft EXCLUDE_PATH=/etc/rc.local EXCLUDE_PATH=/root/mgts-wg-remote-keys EXCLUDE_PATH=/root/router-ops-backups EXCLUDE_PATH=/root/rollbacks EXCLUDE_GLOB=/root/rollback-* EXCLUDE_GLOB=/root/*.backup EXCLUDE_PATH=/var/lib/router-wgpay-egress EXCLUDE_PATH=/var/log/router-wgpay-egress-local.log >>> [08] Result RESULT=PASS_VM100_GIT_PROFILE_CLOSURE_READONLY VM100_MODIFIED=false