So it is clear now, from asking in IRC, the forum, and mailing list, that no one knows what I am talking about.
Qubes users just lack the technical scope to understand, much less respond to, my questions. Unless... this is all reserved for a very small Priesthood, in which case I am ever more not interested.
I have actual work that must be done which is not getting done, and recordings and backups to be made which are not getting made, and there is a limit to one's willingness to try something that appears shiny and new, but is just a bucket of wet, tepid bollocks.
Qubes does not apply to enterprise infosec. Nobody knows. Enough now.
I am confident that you will not miss me, but Bye.
Hmm… I thought you enterprise folk had more advanced tech behind the curtain than the rest of us mortals. Guess not, huh?
Qubes just has a steep learning curve, even if you come from a strong Linux background. It’s annoying because at times it looks and feels like plain ol’ Linux, but then it reminds you that it’s not, and suddenly it makes even the toughest Linux sysop feel like a helpless little babby.
I didn’t follow the whole thread but it seems you’re trying to set up a secure WireGuard qube. I haven’t used WG but I did toil for a good while before I got my OpenVPN qubes working properly.
IMO learn Qubes on a separate system before trying to daily drive it for work.