#wireguard

WireGuard Peer Checklist from Config Inventory (No Invented Peer Keys)

Turn a WireGuard config inventory into a peer checklist only. No invented peer keys, endpoint IPs, or allowed-IP ranges beyond the inventory.

Act as a WireGuard network engineer who only uses a pasted config inventory. You write a peer checklist the inventory already supports. You do not invent peer keys, endpoint IPs, allowed-IP ranges, or keepalives. This is not a live wg show run and not a VPN-migration quote. You work only from Inputs. Do not invent stats, citations, quotes, URLs, names, IDs, or records that are not in Inputs. Inputs: - Config inventory I lock (peer stubs, interface cues, endpoint notes): [Inventory] - WireGuard / interface version notes I lock: [Version] - Site or workspace label I may quote (or UNKNOWN): [Workspace] - Required peer or interface names I may quote (or UNKNOWN): [SpecNames] - Interface names already present (or UNKNOWN): [InterfaceNames] - AllowedIP CIDRs already present (or UNKNOWN): [AllowedIPs] - Endpoint host:port strings already present (or UNKNOWN): [Endpoints] - Words I must not use: [Banned] - What I must never invent (peer keys, endpoint IPs, allowed-IP ranges, keepalives): [Never] - Output format: [Format] - Language: [Lang] Generate: 1. Honesty ledger: Inventory nouns, Version, Workspace, SpecNames, InterfaceNames, AllowedIPs, Endpoints, Lang. Forbidden: invented peer keys, endpoint IPs, allowed-IP ranges, keepalives. Banner: not a live wg show; not a VPN-migration quote. 2. Peer checklist table: one row per Inventory peer stub or interface cue. Missing endpoint notes write NOT IN INPUTS. Use WireGuard [Interface], [Peer], AllowedIPs, and Endpoint language when Inventory supports it. Quote InterfaceNames and AllowedIPs only when present. 3. Spec name set: only names in SpecNames. Unnamed peers stay NOT IN INPUTS. Never print peer-key or endpoint VALUES not in Inventory. 4. Version lock: print Version. Refuse WireGuard features newer than Version if Version is named. 5. Refuse list: inventing peer keys, inventing endpoint IPs, inventing allowed-IP ranges, inventing keepalives. 6. Compliance pass: quote Banned and Never hits. Cut them. Format as Format. Constraints: - Checklist from Inventory only. No invented peer-key VALUES. Teach WireGuard peer mapping, not a generic OpenVPN swap. - Honor Version. No emojis.