Deploy: configure.ps1 hardening + co-located smoke-test caveats in the plan

configure.ps1: bay-IP pick now filters to Up physical adapters and fails
loudly on multiple candidates instead of coin-tossing by InterfaceMetric;
-BayIp forces the choice (and permits binding a virtual adapter on a dev
rig); -ConsoleIp sets WATTCP gateway/nameserver (default: the bay IP --
needs only to be a live on-subnet host, the console DIALS the pod);
-Root is validated up front.

DEPLOYMENT-PLAN: record the four first-smoke-test findings (2026-07-10,
end-to-end egg->mission achieved): SendToRxAdapters on the pod NIC, host
must not hold the game IP, NIC checksum offload silently kills co-located
console->pod IP (ARP works, TCP silent -- disable offload+LSO), and bt/rp
require sound + a packaged renderer (closes the renderer OPEN item: ship one).

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

emulator/deploy/configure.ps1

@@ -3,9 +3,13 @@
 # DOSBox game IP = bayIP + 100, binds DOSBox's pcap to the NIC, renders the
 # net_*.conf templates, and stamps the WATTCP.CFG my_ip. Air-gapped, static,
 # <=32 pods. See ../DEPLOYMENT-PLAN.md.
-param([Parameter(Mandatory = $true)][string]$Root)
+param([Parameter(Mandatory = $true)][string]$Root,
+      [string]$BayIp,      # explicit bay IP; bypasses the physical-adapter filter
+      [string]$ConsoleIp)  # TeslaConsole's IP (default: bay IP, i.e. co-located)
 $ErrorActionPreference = 'Stop'
 function Log($m) { Write-Host "[configure] $m" }
+if (-not (Test-Path -LiteralPath $Root -PathType Container)) { throw "-Root '$Root' is not a directory (typo?)" }
+$Root = (Resolve-Path -LiteralPath $Root).Path
 
 # --- prefix length -> dotted netmask -------------------------------------
 function PrefixToMask([int]$p) {
@@ -15,14 +19,31 @@ function PrefixToMask([int]$p) {
 }
 
 # --- 1. the pod's NIC + bay IP (the one real static IPv4) ----------------
-$ip = Get-NetIPAddress -AddressFamily IPv4 |
+# A bay has exactly ONE physical NIC up with ONE static IPv4. Virtual adapters
+# (Network Bridge multiplexor, TAPs -- dev leftovers) are excluded; if several
+# candidates still survive, fail loudly instead of coin-tossing (a multi-homed
+# host once got lucky here). -BayIp forces the choice -- and skips the
+# physical filter, so a dev rig can deliberately bind a bridge.
+$cands = @(Get-NetIPAddress -AddressFamily IPv4 |
     Where-Object { $_.IPAddress -notlike '127.*' -and $_.IPAddress -notlike '169.254.*' } |
-    Sort-Object -Property SkipAsSource, InterfaceMetric |
-    Select-Object -First 1
-if (-not $ip) { throw "no usable static IPv4 found on any adapter" }
+    ForEach-Object {
+        $ad = Get-NetAdapter -InterfaceIndex $_.InterfaceIndex -ErrorAction SilentlyContinue
+        if ($ad) { [pscustomobject]@{ Ip = $_; Adapter = $ad } }
+    })
+if ($BayIp) {
+    $cands = @($cands | Where-Object { $_.Ip.IPAddress -eq $BayIp })
+    if ($cands.Count -eq 0) { throw "-BayIp $BayIp is not configured on any adapter" }
+} else {
+    $cands = @($cands | Where-Object { -not $_.Adapter.Virtual -and $_.Adapter.Status -eq 'Up' })
+    if ($cands.Count -eq 0) { throw "no IPv4 on an Up physical adapter; rerun with -BayIp x.x.x.x" }
+}
+if ($cands.Count -gt 1) {
+    $list = ($cands | ForEach-Object { "$($_.Ip.IPAddress) on '$($_.Adapter.Name)'" }) -join ', '
+    throw "ambiguous bay IP -- $($cands.Count) candidates ($list); rerun with -BayIp x.x.x.x"
+}
+$ip      = $cands[0].Ip
 $bayIp   = $ip.IPAddress
-$ifIndex = $ip.InterfaceIndex
-$adapter = Get-NetAdapter -InterfaceIndex $ifIndex
+$adapter = $cands[0].Adapter
 $guid    = $adapter.InterfaceGuid.Trim('{', '}')
 $mask    = PrefixToMask $ip.PrefixLength
 Log "bay IP $bayIp/$($ip.PrefixLength) on '$($adapter.Name)' guid $guid"
@@ -50,13 +71,15 @@ Log "game IP = $gameIp  (bay + 100)"
 $mac = "02:00:{0:X2}:{1:X2}:{2:X2}:{3:X2}" -f [int]$o[0], [int]$o[1], [int]$o[2], $last
 Log "macaddr = $mac"
 
-# --- 5. gateway/nameserver: the host's real gateway if set, else the host
-#        itself (always up + on-subnet -> WATTCP's boot ARP resolves; never
-#        actually routed, the mesh is same-subnet L2) -----------------------
-$gw = $null
-try { $gw = (Get-NetIPConfiguration -InterfaceIndex $ifIndex).IPv4DefaultGateway.NextHop } catch { }
+# --- 5. gateway/nameserver: needs only to be a LIVE on-subnet host (WATTCP
+#        boot-ARPs it; nothing is ever routed -- the mesh is same-subnet L2,
+#        and the CONSOLE dials the pod, not vice versa). The console PC's IP
+#        is the natural pick: always up whenever a mission can start. Default
+#        = this machine's bay IP (co-located console / smoke test); real
+#        deployments pass -ConsoleIp <the console PC's static IP>. ---------
+$gw = $ConsoleIp
 if (-not $gw) { $gw = $bayIp }
-Log "gateway/nameserver = $gw"
+Log "gateway/nameserver (console PC) = $gw"
 
 # --- 6. render the conf templates (@@ROOT@@/@@REALNIC@@/@@MACADDR@@) ------
 $tokens = @{ '@@ROOT@@' = $Root; '@@REALNIC@@' = $realnic; '@@MACADDR@@' = $mac }