Before successful final postcheck, delete the temporary r20qh_vpn2_failure nft table and restore both VM runtime backups. After successful postcheck, the temporary table is absent, the original vpn2 configuration remains unchanged, runtime is NORMAL, and both VM100 and VM101 managed changes are published to Machine Git.