A service provider runs SR-MPLS across its core. The design team wants BGP VPNv4 service routes learned from a particular customer to automatically be steered over an SR-TE policy that provides a low-latency path, without manually pre-provisioning a tunnel for every egress PE. The egress PE tags the VPNv4 routes with a color extended community, and the ingress PE should dynamically instantiate an SR-TE policy toward the BGP next hop when it receives routes carrying that color. Which SR-TE mechanism achieves this behavior?