fix(ipsec): различать частичный и неподтверждённый результат операций

docs/ux-ui/acceptance/ipsec-mutations-2026-10-09.json

@@ -0,0 +1,54 @@
+{
+  "date": "2026-10-09",
+  "name": "mm-ipsec81-1791536576686",
+  "serverId": 1,
+  "checks": [
+    {
+      "scenario": "conflicting IP does not rename client",
+      "httpStatus": 409,
+      "nativeCommentPreserved": true
+    },
+    {
+      "scenario": "partial",
+      "httpStatus": 502,
+      "confirmedWrites": 1,
+      "nativeCommentApplied": true,
+      "faultInjection": "reject second patch before transmission"
+    },
+    {
+      "scenario": "unknown",
+      "httpStatus": 502,
+      "confirmedWrites": 0,
+      "nativeCommentApplied": true,
+      "faultInjection": "throw after successful native patch; not physical TCP disconnect"
+    },
+    {
+      "scenario": "plain remote ID normalized on PATCH",
+      "httpStatus": 200,
+      "nativeTypedId": true
+    },
+    {
+      "scenario": "rename and static IP change releases old mode config",
+      "httpStatus": 200,
+      "oldRemoved": true
+    },
+    {
+      "scenario": "isolated AUTH_REQUIRED=true on compiled IPsec routes",
+      "noToken": 401,
+      "invalidToken": 401,
+      "readerWrite": 403,
+      "readerRead": 200,
+      "readerDeleteRestoreExport": 403,
+      "writerPatch": 200,
+      "nativeDeniedPreserved": true,
+      "nativeAuthorizedToggleConfirmed": true,
+      "productionAuthChanged": false
+    }
+  ],
+  "cleanup": {
+    "/ip/ipsec/identity": true,
+    "/ip/ipsec/peer": true,
+    "/ip/ipsec/mode-config": true,
+    "/ip/ipsec/profile": true
+  }
+}