diff --git a/runtime/history/CLUSTER-REFERENCE-RUNNER-MODE-AUDIT-188.json b/runtime/history/CLUSTER-REFERENCE-RUNNER-MODE-AUDIT-188.json
new file mode 100644
index 0000000..6d5dfc9
--- /dev/null
+++ b/runtime/history/CLUSTER-REFERENCE-RUNNER-MODE-AUDIT-188.json
@@ -0,0 +1,30 @@
+{
+  "schema_version": 1,
+  "channel": "homelab-runtime",
+  "command_id": "CLUSTER-REFERENCE-RUNNER-MODE-AUDIT-188",
+  "status": "OK",
+  "rc": 0,
+  "host": "pve01",
+  "mode": "read-only",
+  "component": "cluster-audit",
+  "started_at_utc": "2026-07-22T12:16:19Z",
+  "finished_at_utc": "2026-07-22T12:16:19Z",
+  "reference_register_checked": true,
+  "reference_sha256": "5763f2f8edc75fcf6f3951f8c95896d1cc112ceccb6cf5b64a383f540a4deb8e",
+  "error_register_checked": true,
+  "error_register_sha256": "08b3a769b8e38eaa1acec915352fb328180d70caa7ff6cd9d1ec0da426262752",
+  "command_sha256": "5ee3d4e76e00e3d023a65b812c00392ac9e70bbba0ffd4299925f3b2aace277f",
+  "duplicate_failed_command_blocked": false,
+  "block_reason": null,
+  "execution_started": true,
+  "changes_made": false,
+  "sanitized": true,
+  "secrets_included": false,
+  "private_addresses_included": false,
+  "raw_evidence_retained_locally": true,
+  "raw_evidence_sha256": "d09a83646293897e2832d29b6f272c4b221b700093a549d096f775f4e58a24f5",
+  "sanitized_output_sha256": "d09a83646293897e2832d29b6f272c4b221b700093a549d096f775f4e58a24f5",
+  "output_truncated_in_json": false,
+  "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
+  "output": "validation=PASS\nPREVIOUS_ERROR=INVALID_MODE\nPREVIOUS_PAYLOAD_EXECUTED=NO\nIMMUTABLE_187=ABSENT_PRE_EXECUTION_REJECTION\n=== RUNNER_USAGE ===\n6:    cat >&2 <<'USAGE'\n7:Usage:\n19:USAGE\n55:        echo 'REASON=INVALID_MODE'\n=== ALLOWED_MODE_VALIDATION ===\ngrep: Invalid back reference\n=== ALLOWED_SCOPE_VALIDATION ===\ngrep: Invalid back reference\nREFERENCE_CHECK=OK\nERROR_REGISTER_CHECK=OK\nINVALID_MODE_ERROR_REGISTERED=YES\nRUNNER_MODE_AUDIT=COMPLETE\n"
+}
diff --git a/runtime/history/CLUSTER-REFERENCE-RUNNER-MODE-AUDIT-188.txt b/runtime/history/CLUSTER-REFERENCE-RUNNER-MODE-AUDIT-188.txt
new file mode 100644
index 0000000..8a3192e
--- /dev/null
+++ b/runtime/history/CLUSTER-REFERENCE-RUNNER-MODE-AUDIT-188.txt
@@ -0,0 +1,41 @@
+CHAT_OUTPUT_BEGIN
+COMMAND_ID=CLUSTER-REFERENCE-RUNNER-MODE-AUDIT-188
+STATUS=OK
+RC=0
+HOST=pve01
+MODE=read-only
+COMPONENT=cluster-audit
+REFERENCE_REGISTER_CHECK=OK
+REFERENCE_SHA256=5763f2f8edc75fcf6f3951f8c95896d1cc112ceccb6cf5b64a383f540a4deb8e
+ERROR_REGISTER_CHECK=OK
+ERROR_REGISTER_SHA256=08b3a769b8e38eaa1acec915352fb328180d70caa7ff6cd9d1ec0da426262752
+COMMAND_SHA256=5ee3d4e76e00e3d023a65b812c00392ac9e70bbba0ffd4299925f3b2aace277f
+DUPLICATE_FAILED_COMMAND_BLOCKED=false
+EXECUTION_STARTED=true
+CHANGES_MADE=false
+SANITIZED=yes
+SECRETS_INCLUDED=no
+PRIVATE_ADDRESSES_INCLUDED=no
+RAW_EVIDENCE_SHA256=d09a83646293897e2832d29b6f272c4b221b700093a549d096f775f4e58a24f5
+SANITIZED_OUTPUT_SHA256=d09a83646293897e2832d29b6f272c4b221b700093a549d096f775f4e58a24f5
+OUTPUT_BEGIN
+validation=PASS
+PREVIOUS_ERROR=INVALID_MODE
+PREVIOUS_PAYLOAD_EXECUTED=NO
+IMMUTABLE_187=ABSENT_PRE_EXECUTION_REJECTION
+=== RUNNER_USAGE ===
+6:    cat >&2 <<'USAGE'
+7:Usage:
+19:USAGE
+55:        echo 'REASON=INVALID_MODE'
+=== ALLOWED_MODE_VALIDATION ===
+grep: Invalid back reference
+=== ALLOWED_SCOPE_VALIDATION ===
+grep: Invalid back reference
+REFERENCE_CHECK=OK
+ERROR_REGISTER_CHECK=OK
+INVALID_MODE_ERROR_REGISTERED=YES
+RUNNER_MODE_AUDIT=COMPLETE
+
+OUTPUT_END
+CHAT_OUTPUT_END
diff --git a/runtime/latest.json b/runtime/latest.json
index 2728e15..6d5dfc9 100644
--- a/runtime/latest.json
+++ b/runtime/latest.json
@@ -1,19 +1,19 @@
 {
   "schema_version": 1,
   "channel": "homelab-runtime",
-  "command_id": "CLUSTER-REFERENCE-PUBLISHER-CANDIDATE-RECOVERY-186",
+  "command_id": "CLUSTER-REFERENCE-RUNNER-MODE-AUDIT-188",
   "status": "OK",
   "rc": 0,
   "host": "pve01",
   "mode": "read-only",
   "component": "cluster-audit",
-  "started_at_utc": "2026-07-22T12:05:37Z",
-  "finished_at_utc": "2026-07-22T12:05:38Z",
+  "started_at_utc": "2026-07-22T12:16:19Z",
+  "finished_at_utc": "2026-07-22T12:16:19Z",
   "reference_register_checked": true,
   "reference_sha256": "5763f2f8edc75fcf6f3951f8c95896d1cc112ceccb6cf5b64a383f540a4deb8e",
   "error_register_checked": true,
   "error_register_sha256": "08b3a769b8e38eaa1acec915352fb328180d70caa7ff6cd9d1ec0da426262752",
-  "command_sha256": "87aae1eed99c36bc961975bc32910ade85d2543cedbeec7f87014e4f856646b4",
+  "command_sha256": "5ee3d4e76e00e3d023a65b812c00392ac9e70bbba0ffd4299925f3b2aace277f",
   "duplicate_failed_command_blocked": false,
   "block_reason": null,
   "execution_started": true,
@@ -22,9 +22,9 @@
   "secrets_included": false,
   "private_addresses_included": false,
   "raw_evidence_retained_locally": true,
-  "raw_evidence_sha256": "6da41692213952f6fb444b589eac7ee6d3d914b281903489051a898295572535",
-  "sanitized_output_sha256": "6da41692213952f6fb444b589eac7ee6d3d914b281903489051a898295572535",
+  "raw_evidence_sha256": "d09a83646293897e2832d29b6f272c4b221b700093a549d096f775f4e58a24f5",
+  "sanitized_output_sha256": "d09a83646293897e2832d29b6f272c4b221b700093a549d096f775f4e58a24f5",
   "output_truncated_in_json": false,
   "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
-  "output": "validation=PASS\nBOOTSTRAP_CHECK=OK\nREFERENCE_CHECK=OK\nERROR_REGISTER_CHECK=OK\nSTALE_BOOTSTRAP_HASH_ENFORCEMENT=DISABLED\nPREVIOUS_RESULT=CLUSTER-REFERENCE-PUBLISHER-PAYLOAD-EXTRACT-185:OK\n=== RESULT_185_CLASSIFICATION ===\nPAYLOAD_BYTES=9220\nPAYLOAD_SHA256=d85159264bd30183e033d86ba54bdc96854804251749ff4f2262b934c78abad9\nPAYLOAD_SHELL_SYNTAX=OK\nTARGET_PATH_COUNT=1\nPASS_MARKER_COUNT=1\nBASE64_DECODE_COUNT=0\nPRINTF_COUNT=1\nTEE_COUNT=0\nCAT_COUNT=1\nINSTALL_COUNT=0\nCHMOD_COUNT=1\nMKTEMP_COUNT=0\nSHEBANG_COUNT=1\nPAYLOAD_ASSIGNMENT_COUNT=0\nPUBLISHER_PAYLOAD_EXTRACTION=COMPLETE\nPAYLOAD_INTEGRITY=OK\nBASE64_TOKEN_COUNT=0\nVALID_PUBLISHER_CANDIDATE_COUNT=0\nCANDIDATE_READY=NO\nPAYLOAD_EXECUTED=NO\nSYSTEM_FILES_CHANGED=NO\nFAILED_COMMAND_REPEATED=NO\nSECRET_PRINTED=NO\nPRIVATE_ADDRESS_PRINTED=NO\nPUBLISHER_CANDIDATE_RECOVERY=COMPLETE\n"
+  "output": "validation=PASS\nPREVIOUS_ERROR=INVALID_MODE\nPREVIOUS_PAYLOAD_EXECUTED=NO\nIMMUTABLE_187=ABSENT_PRE_EXECUTION_REJECTION\n=== RUNNER_USAGE ===\n6:    cat >&2 <<'USAGE'\n7:Usage:\n19:USAGE\n55:        echo 'REASON=INVALID_MODE'\n=== ALLOWED_MODE_VALIDATION ===\ngrep: Invalid back reference\n=== ALLOWED_SCOPE_VALIDATION ===\ngrep: Invalid back reference\nREFERENCE_CHECK=OK\nERROR_REGISTER_CHECK=OK\nINVALID_MODE_ERROR_REGISTERED=YES\nRUNNER_MODE_AUDIT=COMPLETE\n"
 }
diff --git a/runtime/latest.txt b/runtime/latest.txt
index fa349de..8a3192e 100644
--- a/runtime/latest.txt
+++ b/runtime/latest.txt
@@ -1,5 +1,5 @@
 CHAT_OUTPUT_BEGIN
-COMMAND_ID=CLUSTER-REFERENCE-PUBLISHER-CANDIDATE-RECOVERY-186
+COMMAND_ID=CLUSTER-REFERENCE-RUNNER-MODE-AUDIT-188
 STATUS=OK
 RC=0
 HOST=pve01
@@ -9,48 +9,33 @@ REFERENCE_REGISTER_CHECK=OK
 REFERENCE_SHA256=5763f2f8edc75fcf6f3951f8c95896d1cc112ceccb6cf5b64a383f540a4deb8e
 ERROR_REGISTER_CHECK=OK
 ERROR_REGISTER_SHA256=08b3a769b8e38eaa1acec915352fb328180d70caa7ff6cd9d1ec0da426262752
-COMMAND_SHA256=87aae1eed99c36bc961975bc32910ade85d2543cedbeec7f87014e4f856646b4
+COMMAND_SHA256=5ee3d4e76e00e3d023a65b812c00392ac9e70bbba0ffd4299925f3b2aace277f
 DUPLICATE_FAILED_COMMAND_BLOCKED=false
 EXECUTION_STARTED=true
 CHANGES_MADE=false
 SANITIZED=yes
 SECRETS_INCLUDED=no
 PRIVATE_ADDRESSES_INCLUDED=no
-RAW_EVIDENCE_SHA256=6da41692213952f6fb444b589eac7ee6d3d914b281903489051a898295572535
-SANITIZED_OUTPUT_SHA256=6da41692213952f6fb444b589eac7ee6d3d914b281903489051a898295572535
+RAW_EVIDENCE_SHA256=d09a83646293897e2832d29b6f272c4b221b700093a549d096f775f4e58a24f5
+SANITIZED_OUTPUT_SHA256=d09a83646293897e2832d29b6f272c4b221b700093a549d096f775f4e58a24f5
 OUTPUT_BEGIN
 validation=PASS
-BOOTSTRAP_CHECK=OK
+PREVIOUS_ERROR=INVALID_MODE
+PREVIOUS_PAYLOAD_EXECUTED=NO
+IMMUTABLE_187=ABSENT_PRE_EXECUTION_REJECTION
+=== RUNNER_USAGE ===
+6:    cat >&2 <<'USAGE'
+7:Usage:
+19:USAGE
+55:        echo 'REASON=INVALID_MODE'
+=== ALLOWED_MODE_VALIDATION ===
+grep: Invalid back reference
+=== ALLOWED_SCOPE_VALIDATION ===
+grep: Invalid back reference
 REFERENCE_CHECK=OK
 ERROR_REGISTER_CHECK=OK
-STALE_BOOTSTRAP_HASH_ENFORCEMENT=DISABLED
-PREVIOUS_RESULT=CLUSTER-REFERENCE-PUBLISHER-PAYLOAD-EXTRACT-185:OK
-=== RESULT_185_CLASSIFICATION ===
-PAYLOAD_BYTES=9220
-PAYLOAD_SHA256=d85159264bd30183e033d86ba54bdc96854804251749ff4f2262b934c78abad9
-PAYLOAD_SHELL_SYNTAX=OK
-TARGET_PATH_COUNT=1
-PASS_MARKER_COUNT=1
-BASE64_DECODE_COUNT=0
-PRINTF_COUNT=1
-TEE_COUNT=0
-CAT_COUNT=1
-INSTALL_COUNT=0
-CHMOD_COUNT=1
-MKTEMP_COUNT=0
-SHEBANG_COUNT=1
-PAYLOAD_ASSIGNMENT_COUNT=0
-PUBLISHER_PAYLOAD_EXTRACTION=COMPLETE
-PAYLOAD_INTEGRITY=OK
-BASE64_TOKEN_COUNT=0
-VALID_PUBLISHER_CANDIDATE_COUNT=0
-CANDIDATE_READY=NO
-PAYLOAD_EXECUTED=NO
-SYSTEM_FILES_CHANGED=NO
-FAILED_COMMAND_REPEATED=NO
-SECRET_PRINTED=NO
-PRIVATE_ADDRESS_PRINTED=NO
-PUBLISHER_CANDIDATE_RECOVERY=COMPLETE
+INVALID_MODE_ERROR_REGISTERED=YES
+RUNNER_MODE_AUDIT=COMPLETE
 
 OUTPUT_END
 CHAT_OUTPUT_END