Three exact R20H R05 candidates were tested on the isolated vpn_test interface in two modes. endpoint_only reused the active egress2 key/address/AWG parameters and changed only the endpoint, matching current LOCAL_REPAIR behavior. full_config loaded the candidate own HideMyName configuration. Each mode was checked near 12 and 45 seconds with live endpoint, handshake, transfer counters and the exact production strict probes 1.1.1.1 plus 8.8.8.8. Health and full-refresh retry services were stopped with bounded procd status plus exact-process polling, and restored to their baseline states afterward. Private configuration contents were not published.