Implement authenticated credential vending, country-filtered recommendations, atomic status storage, WireGuard health checks, native apply sequencing, RFC 1918 enrollment inspection, and synthetic tests.
Add the package metadata and OPNsense model for country eligibility, native traffic selectors, direct egress, failure policy, and managed object identity.
