CHAT_OUTPUT_BEGIN
COMMAND_ID=HOMELAB-GITEA-ALLOWED-PUSH-PATH-DIAGNOSTIC-READ-ONLY-R9-20260806T010500Z
STATUS=FAIL
RC=2
HOST=pve01
MODE=verify
COMPONENT=cluster-knowledge-base-error-system
REFERENCE_REGISTER_CHECK=OK
REFERENCE_SHA256=5763f2f8edc75fcf6f3951f8c95896d1cc112ceccb6cf5b64a383f540a4deb8e
ERROR_REGISTER_CHECK=OK
ERROR_REGISTER_SHA256=24934a2c7fa5c26f6e828583c4aefac7f143b40c0171736ed7571e617d55ab83
COMMAND_SHA256=56a3b2c797bee2026156d56a1faa2ba4e1aaeb1b1bf9524ba4f5ae81c5918106
DUPLICATE_FAILED_COMMAND_BLOCKED=false
EXECUTION_STARTED=true
CHANGE_DECLARED=false
RESULT_CONTRACT_VALID=true
RESULT_CONTRACT_STATUS=NOT_APPLICABLE
RESULT_CONTRACT_ERROR=NONE
COMMAND_RC=2
CHANGES_MADE=false
ROLLBACK_STARTED=false
ROLLBACK_RESTORED=null
MUTATION_OUTCOME=NO_MUTATION
SANITIZED=yes
SECRETS_INCLUDED=no
PRIVATE_ADDRESSES_INCLUDED=no
RAW_EVIDENCE_SHA256=8f2549fd6ab655d5f17581e81e4e536c63c3a154363dcb26d25f6de2df03905e
SANITIZED_OUTPUT_SHA256=8f2549fd6ab655d5f17581e81e4e536c63c3a154363dcb26d25f6de2df03905e
OUTPUT_BEGIN
HOMELAB_RESULT_CONTRACT={"changes_made":false,"command_id":"HOMELAB-GITEA-ALLOWED-PUSH-PATH-DIAGNOSTIC-READ-ONLY-R9-20260806T010500Z","command_rc":2,"control_plane_error":null,"mutation_outcome":"NO_MUTATION","output_truncated_in_json":false,"rc":2,"rollback_restored":null,"rollback_started":false,"status":"ERROR","version":1}
{"changes_made":false,"command_id":"HOMELAB-GITEA-ALLOWED-PUSH-PATH-DIAGNOSTIC-READ-ONLY-R9-20260806T010500Z","command_rc":2,"control_plane_error":null,"error_system_v2_future_record":{"classification":"GITEA_BRANCH_PROTECTION_REJECTS_DIRECT_PUSHER","fingerprint":"40795f946c36fcaaf8413b2b46b1900a5df4771d93aeb24f2a596287df0a8023","id":"GITEA_PROTECTED_MAIN_DIRECT_PUSH_DRY_RUN_FALSE_POSITIVE","negative_control":"dry-run may return rc=0 without exercising the server-side protected-branch mutation decision","normalized_signature":"gitea protected main rejects direct push while git push --dry-run succeeds; dry-run does not prove that the server-side protected-branch pre-receive path will accept a real update","positive_control":"protected main has direct push disabled and the previous real push was rejected","prevention_rule":"A successful git push --dry-run must never be treated as proof that a real update to a protected branch is allowed; the configured branch-protection write path must be proven separately by read-only evidence.","regression_test_required":true,"space":"runtime"},"exact_error":{"code":"GITEA_API_READ_FAILED","evidence":{"path_sha256":"80730d87f43707f670d9fd6aa13ead2145119a7618077edab82583506b71cd77","status":405},"message":"Gitea API read failed"},"identity_confirmed":true,"mode":"READ_ONLY","mutation_outcome":"NO_MUTATION","next_step":"Prepare no mutation command until this read-only proof failure is resolved by exact evidence.","output_truncated_in_json":false,"previous_exact_result":{"capsule_sha256":"40b0a483eaa5034980607b36aa5ea927d906a063dff1f4dcb2b83b6d9d557d7f","command_id":"HOMELAB-GITEA-ALLOWED-PUSH-PATH-R8-EXACT-RESULT-STATE-BIND-READ-ONLY-20260806T010000Z","identity_confirmed":true,"output_complete":true,"output_sha256":"ae0ed3eefb47cd8bbe0968f320c365a913f4f0f1cc70b8b0eba891b6ab997195","published_resources_checked":3,"runner_document_rc":0,"runner_json_sha256":"b69136768b52aa51798ef0a34f4d54ac6cf312acc21395f75c3d69419499a0d4","runner_rc":0,"runner_text_sha256":"f49c93d36fe0329ad07efc7cabda7696c04b8bfd0ac414bb316755ba08061897","runner_wrapper_matches_document":true,"semantic_fields_verified":["changes_made","command_id","command_rc","control_plane_error","found","mutation_outcome","output_complete","output_truncated_in_json","output_truncated_in_runner_json","private_addresses_included","rc","rollback_restored","rollback_started","runner_document_rc","runner_rc","runner_status","runner_wrapper_matches_document","sanitized","secrets_included","status"],"slot_directory_count":12,"slot_lane":"0"},"rc":2,"rollback_restored":null,"rollback_started":false,"schema":"homelab.read-only-diagnostic.v6","status":"ERROR"}

OUTPUT_END
CHAT_OUTPUT_END
