TheUnboundDeveloper/AM-Reaper v3.6.5-beta-RT-BE86U

Reaper v3.6.5-beta — RT-BE86U

on GitHub

v3.6.5 — seven more Reaper settings pages, AiMesh and Network on their own stylesheet, AiMesh nodes exempt everywhere, WireGuard through Warden

Everything in v3.6.4 is included. Both lines carry the same changes: RT-BE96U, RT-BE86U, RT-BE88U and GT-BE98 Pro on
3006.102.10; GT-BE98, GT-BE19000, BQ16 and BQ16 Pro on 3006.102.8.

• Seven more settings pages on the Reaper kit, and the stock ones gone. Wireless > WPS, WDS, Wireless MAC Filter,
  RADIUS Setting, Roaming Block List and MLO, and LAN > VLAN (Switch and Profiles), are Reaper pages that keep the
  stock settings and apply them the way stock does. The stock pages they replace no longer ship; their old addresses
  open the new pages. The Roaming Block List is read from all three radios (stock read one and wrote three, so a list
  that had drifted apart lost entries on the next save); MLO's "Add a Network" opens the Network page's own MLO
  wizard; VLAN keeps a trunk that carries several VLANs as it is; RADIUS Setting shows which bands use the server.
• AiMesh and Network: their own stylesheet. Both pages keep the stock layout and now link a Reaper stylesheet of
  their own, with the same look (compared element by element); the router no longer injects one into them, and the
  stock white / ROG / TUF themes of those pages are gone.
• AiMesh nodes are exempt everywhere, from one list. Gatekeeper exempted AiMesh nodes; the firewall rules engine
  (Service Intercept) and Policy Routing did not, so one broad rule could cut a node off. One shared list
  (reaper_aimesh), refreshed from the router's AiMesh registry, is now honoured by Gatekeeper, the rules engine,
  Policy Routing and the watchdog.
• Warden: the WireGuard server is reachable with country blocking or feeds on. Field report (GT-BE98, v3.6.2): a
  phone on mobile data could not reach the router's WireGuard server. Warden now lets UDP through to the listen ports
  of the enabled WireGuard servers (WireGuard answers only peers it holds keys for) and re-applies when a server is
  switched on or off or its port changes. OpenVPN and IPsec are not exempted.
• Header on a phone: Reboot and Logout hold still. The ? / Reboot / Logout buttons are one group that fits beside
  the logo or wraps whole; a live tile spilling past a phone screen no longer shrinks them and lets them spring back.
• Reaper pages fit a phone. Under 680 px a settings row is one column and a data table scrolls sideways in its
  own box with its headers whole; every kit page is the width of the screen at 402, 375 and 320 px. The dashboard's
  phone strip matches the one on every other page.
• Pop-up panels open where you are looking. Inside the Reaper frame a stock pop-up (the AiMesh client card, for
  example) opened near the top of the page however far down it was scrolled; it now opens centred in the part of the
  page on screen.
• DNS Director: device names on per-device rules. The rule list shows the device's name beside its MAC.
• One MAC-vendor table in the image (3006.102.10). The web pages' vendor table was a second copy of the
  networkmap one (about 352 KB of flash, its accented names stripped); the web path now points at the networkmap
  table. The 3006.102.8 GPL ships no networkmap table, so those models keep the web copy.

Images & checksums (RT-BE86U)

Two flashable images: + AI Advisor (default) and Standard (noMCP, all AI components compiled out entirely). Flash the *_nand_squashfs.pkgtb via Administration > Firmware Upgrade.

This is a beta release. Its filename carries _BETA and the router reports the same string on the dashboard and the About page, so you can always tell which channel a flashed image came from. Stable releases carry no marker.

Verify a download against the attached SHA256SUMS-RT-BE86U-Reaper_v3.6.5.txt.

Corresponding source & reproducibility

The RT-BE86U image for v3.6.5-beta is built from this repository at tag v3.6.5-beta-RT-BE86U: the pinned Asuswrt-Merlin base (3006.102.10, ca72a61f8bc) plus the complete patch series. The tag freezes the exact source that produced it.

• Patches: patches/
• Provenance record: provenance/manifest.json
• How to verify: docs/REPRODUCIBILITY.md and docs/SOURCE-AVAILABILITY.md

The auto-attached Source code (zip/tar.gz) asset below is this repository at tag v3.6.5-beta-RT-BE86U (patches + docs).