Geographic Labyrinth, Part 2: Handshakes Up, Routing Down — Three Bugs That Bypassed the Chain
Brought the six-hop chain up. WireGuard handshakes were green on every container; pcaps proved every container was still talking to the real WAN through the Docker bridge, never the tunnels. Three config bugs, all in the routing layer. Diagnosis from pcaps and a one-shot patch.