diff --git a/runtime/history/GITEA-V4-MACHINE-IDENTITY-MIGRATION-V5-20260730T193350Z.json b/runtime/history/GITEA-V4-MACHINE-IDENTITY-MIGRATION-V5-20260730T193350Z.json
new file mode 100644
index 0000000..fb433b5
--- /dev/null
+++ b/runtime/history/GITEA-V4-MACHINE-IDENTITY-MIGRATION-V5-20260730T193350Z.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": 1,
+  "channel": "homelab-runtime",
+  "command_id": "GITEA-V4-MACHINE-IDENTITY-MIGRATION-V5-20260730T193350Z",
+  "status": "FAIL",
+  "rc": 1,
+  "host": "pve01",
+  "mode": "change",
+  "component": "gitea-machine-identity",
+  "started_at_utc": "2026-07-30T19:34:24Z",
+  "finished_at_utc": "2026-07-30T19:34:46Z",
+  "reference_register_checked": true,
+  "reference_sha256": "5763f2f8edc75fcf6f3951f8c95896d1cc112ceccb6cf5b64a383f540a4deb8e",
+  "error_register_checked": true,
+  "error_register_sha256": "24934a2c7fa5c26f6e828583c4aefac7f143b40c0171736ed7571e617d55ab83",
+  "command_sha256": "5e635622291f11e949d0dcdd51755c61db105a889c01dbdef3fa2fe0958f52c0",
+  "duplicate_failed_command_blocked": false,
+  "block_reason": null,
+  "execution_started": true,
+  "change_declared": true,
+  "result_contract_valid": true,
+  "result_contract_status": "FAIL",
+  "result_contract_error": null,
+  "command_rc": 1,
+  "changes_made": true,
+  "rollback_started": true,
+  "rollback_restored": true,
+  "mutation_outcome": "ROLLED_BACK",
+  "sanitized": true,
+  "secrets_included": false,
+  "private_addresses_included": false,
+  "raw_evidence_retained_locally": true,
+  "raw_evidence_sha256": "e0bd3d90d4927d580255b86e089469ce3c4658cd16d3b9d63deb4f16bd4d9827",
+  "sanitized_output_sha256": "e0bd3d90d4927d580255b86e089469ce3c4658cd16d3b9d63deb4f16bd4d9827",
+  "output_truncated_in_json": false,
+  "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
+  "output": "HOMELAB_RESULT_CONTRACT={\"changes_made\":true,\"command_id\":\"GITEA-V4-MACHINE-IDENTITY-MIGRATION-V5-20260730T193350Z\",\"rollback_restored\":true,\"rollback_started\":true,\"status\":\"FAIL\",\"version\":1}\n{\"changes_made\":true,\"command_id\":\"GITEA-V4-MACHINE-IDENTITY-MIGRATION-V5-20260730T193350Z\",\"credential_partition\":{\"original_sha256\":\"fc18813a7f008130cbc291df849b8c72359985ef697717460fbc39d2056be2b1\",\"residual_bytes\":68,\"residual_sha256\":\"10d1a19537be0dd0dd1ab37cd4a1e5e239c1970a4d16d65aaa7ae7edf2739ec0\",\"target_bytes\":69,\"target_sha256\":\"b52c89cef273de1aa4afc607ee5d4323ef88553ed4b94da24df049b2251f03d8\"},\"error\":\"RuntimeError: phase failed: dry-run retry rc=142\",\"failed_phase\":\"dry-run\",\"mutation_outcome\":\"ROLLED_BACK\",\"package\":{\"admin_sha256\":\"5398600c15b63f3872116e6d1ae6f65e2d7a5d1752349c9de0de07d801967bd1\",\"phase_hashes\":{\"apply\":\"c2cee33db773dd58b0eadb0405c33933773a559b150ad478aa9c0018dac762e3\",\"dry-run\":\"c5edfe7553ffb7f44a80dd530b805fb732ee0e09097f5b3a6ca77d1f9bc27329\",\"preflight\":\"2ca95ea8d0871351133f946d481665c059b4533c2ec80ea35d81424d7b1d5f7a\",\"prepare\":\"d7cc381878e06f0896219616354c70b042c227ab6254d6a9a36061cc24c13f8c\",\"rollback\":\"2b801fcea7096cdefe2cd294175d1d48ac3dfb394776dbda52299ded470fee0e\",\"seal\":\"c88cb5e9f63aac3888e3822a5eab9e2456b04f5eda16756f626a664eb558c0bc\",\"verify\":\"e57af844675486bb897dd05cfd529bc618c6f32fec9a9257eeeaca1748cbb7cc\"},\"sha256_check_stdout_sha256\":\"edc33fce6cfbf4052ebe804dee6cb9f86d114eb0953f2dba3b5fa9148af70fb3\",\"sha256s_sha256\":\"0aa34f98ccb74f2a8c00460781f56f7b29805e21a284e59a8052936f8dcdc511\",\"task_sha256\":\"10fa2a21164397e2d28f6a44c452c431e64e3cafadd2b4e8098a060c30fab5d9\",\"v3_block_rc\":64,\"validation_stdout_sha256\":\"cce2200e849fd3b7418a9dc011e5566097c620f46da0e2520ea380f2c883e3de\"},\"phases\":[{\"duration_seconds\":0.425,\"phase\":\"preflight\",\"rc\":0,\"safe_stderr\":[],\"safe_stdout\":[\"LINT_STATUS=OK\",\"TASK_ID=gitea-machine-identity-controlled-migration-v4\",\"POLICY_ID=homelab-admin-guardrails-v1.2\",\"RULES_CHECKED=14\",\"SOURCE_FILES_CHECKED=11\",\"GITEA_MACHINE_IDENTITY_MIGRATION_V3_TESTS=OK\",\"REG_157_PREFLIGHT_GITEA_CLI=BLOCKED\",\"REG_158_AGGREGATE_SSH_TIMEOUT_UNCLASSIFIED=BLOCKED\",\"REG_159_BOOTSTRAP_ADMINISTRATOR=BLOCKED\",\"REG_162_LEGACY_REPO_ADMIN_REQUIRED=BLOCKED\",\"REG_163_REPOSITORY_ONLY_SCOPE_REQUIRED=BLOCKED\",\"REG_164_USER_SCOPE_ACCESS=BLOCKED\",\"REG_165_TASK_OWNED_REMOTE_CLEANUP=BLOCKED\",\"REG_166_REPOSITORY_SPECIFIC_HELPER_REQUIRED=BLOCKED\",\"REG_167_PROTECTED_WORKTREE_PUSH_DISABLED=BLOCKED\",\"REG_168_PHASE_RUN_DIR_ISOLATION=BLOCKED\",\"REG_014_GITEA_VERSION_AUTHENTICATION=BLOCKED\",\"REG_015_GITEA_OWNER_PERMISSION=BLOCKED\",\"PREFLIGHT_STATUS=OK\",\"ROOT_CAUSE_COUNT=0\",\"LEGACY_IDENTITY_API=OK\",\"LEGACY_REPOSITORY_PERMISSION=admin\",\"MACHINE_USER_STATE=ABSENT\",\"PREFLIGHT_GITEA_CLI_CALLS=0\",\"FAILED_UNIT_COUNT=2\",\"FAILED_UNIT_POLICY=EXACT_KNOWN_UNRELATED_ALLOWLIST\",\"PACKAGE_TESTS=OK\",\"PRODUCTION_CHANGED=NO\",\"RUN_DIR=/var/lib/homelab-admin/runs/gitea-machine-identity-controlled-migration-v4/20260730T193425Z-2497470-preflight\",\"RUN_RC=0\"],\"stderr_bytes\":0,\"stderr_sha256\":\"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\",\"stdout_bytes\":1188,\"stdout_sha256\":\"19de4ada678b1e607f244da9587ab0c899d3bf3543cc18ede79e6c83bd7f6341\"},{\"duration_seconds\":0.203,\"phase\":\"prepare\",\"rc\":0,\"safe_stderr\":[],\"safe_stdout\":[\"LINT_STATUS=OK\",\"TASK_ID=gitea-machine-identity-controlled-migration-v4\",\"POLICY_ID=homelab-admin-guardrails-v1.2\",\"RULES_CHECKED=14\",\"SOURCE_FILES_CHECKED=11\",\"PREPARE_STATUS=OK\",\"ROOT_CAUSE_COUNT=0\",\"VM170_PINNED_HOST_KEY_READY=YES\",\"LEGACY_GIT_CONFIG_BACKED_UP=YES\",\"MIGRATION_PLAN_READY=YES\",\"ROLLBACK_PLAN_READY=YES\",\"PRODUCTION_CHANGED=NO\",\"RUN_DIR=/var/lib/homelab-admin/runs/gitea-machine-identity-controlled-migration-v4/20260730T193425Z-2497585-prepare\",\"RUN_RC=0\"],\"stderr_bytes\":0,\"stderr_sha256\":\"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\",\"stdout_bytes\":485,\"stdout_sha256\":\"b552687b70b07a0107ec67fa4330bc05a2a1b02f334011951e5a382e3397f32a\"},{\"duration_seconds\":10.526,\"phase\":\"dry-run-initial\",\"rc\":142,\"safe_stderr\":[],\"safe_stdout\":[\"LINT_STATUS=OK\",\"TASK_ID=gitea-machine-identity-controlled-migration-v4\",\"POLICY_ID=homelab-admin-guardrails-v1.2\",\"RULES_CHECKED=14\",\"SOURCE_FILES_CHECKED=11\",\"GITEA_MACHINE_IDENTITY_MIGRATION_V3_TESTS=OK\",\"REG_157_PREFLIGHT_GITEA_CLI=BLOCKED\",\"REG_158_AGGREGATE_SSH_TIMEOUT_UNCLASSIFIED=BLOCKED\",\"REG_159_BOOTSTRAP_ADMINISTRATOR=BLOCKED\",\"REG_162_LEGACY_REPO_ADMIN_REQUIRED=BLOCKED\",\"REG_163_REPOSITORY_ONLY_SCOPE_REQUIRED=BLOCKED\",\"REG_164_USER_SCOPE_ACCESS=BLOCKED\",\"REG_165_TASK_OWNED_REMOTE_CLEANUP=BLOCKED\",\"REG_166_REPOSITORY_SPECIFIC_HELPER_REQUIRED=BLOCKED\",\"REG_167_PROTECTED_WORKTREE_PUSH_DISABLED=BLOCKED\",\"REG_168_PHASE_RUN_DIR_ISOLATION=BLOCKED\",\"REG_014_GITEA_VERSION_AUTHENTICATION=BLOCKED\",\"REG_015_GITEA_OWNER_PERMISSION=BLOCKED\",\"ROOT_CAUSE=UNEXPECTED_PHASE_ERROR\",\"ROOT_CAUSE_COUNT=1\",\"DETAIL=line:43 rc:142\",\"RUN_DIR=/var/lib/homelab-admin/runs/gitea-machine-identity-controlled-migration-v4/20260730T193425Z-2497675-dry-run\",\"RUN_RC=142\"],\"stderr_bytes\":0,\"stderr_sha256\":\"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\",\"stdout_bytes\":1002,\"stdout_sha256\":\"5abdd5abc86a3b54da0974d81881880831cc3a1b90a8a4baf487689cc056e136\"},{\"duration_seconds\":10.376,\"phase\":\"dry-run-retry-60s\",\"rc\":142,\"safe_stderr\":[],\"safe_stdout\":[\"LINT_STATUS=OK\",\"TASK_ID=gitea-machine-identity-controlled-migration-v4\",\"POLICY_ID=homelab-admin-guardrails-v1.2\",\"RULES_CHECKED=14\",\"SOURCE_FILES_CHECKED=11\",\"GITEA_MACHINE_IDENTITY_MIGRATION_V3_TESTS=OK\",\"REG_157_PREFLIGHT_GITEA_CLI=BLOCKED\",\"REG_158_AGGREGATE_SSH_TIMEOUT_UNCLASSIFIED=BLOCKED\",\"REG_159_BOOTSTRAP_ADMINISTRATOR=BLOCKED\",\"REG_162_LEGACY_REPO_ADMIN_REQUIRED=BLOCKED\",\"REG_163_REPOSITORY_ONLY_SCOPE_REQUIRED=BLOCKED\",\"REG_164_USER_SCOPE_ACCESS=BLOCKED\",\"REG_165_TASK_OWNED_REMOTE_CLEANUP=BLOCKED\",\"REG_166_REPOSITORY_SPECIFIC_HELPER_REQUIRED=BLOCKED\",\"REG_167_PROTECTED_WORKTREE_PUSH_DISABLED=BLOCKED\",\"REG_168_PHASE_RUN_DIR_ISOLATION=BLOCKED\",\"REG_014_GITEA_VERSION_AUTHENTICATION=BLOCKED\",\"REG_015_GITEA_OWNER_PERMISSION=BLOCKED\",\"ROOT_CAUSE=UNEXPECTED_PHASE_ERROR\",\"ROOT_CAUSE_COUNT=1\",\"DETAIL=line:43 rc:142\",\"RUN_DIR=/var/lib/homelab-admin/runs/gitea-machine-identity-controlled-migration-v4/20260730T193436Z-2497880-dry-run\",\"RUN_RC=142\"],\"stderr_bytes\":0,\"stderr_sha256\":\"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\",\"stdout_bytes\":1002,\"stdout_sha256\":\"20511a6ce19e3f8359c9722c78115ed98ee1687329ef3c772409933f1148dbe3\"}],\"rc\":1,\"rollback_restored\":true,\"rollback_started\":true,\"schema\":1,\"seal_started\":false,\"secrets_included\":false,\"status\":\"FAIL\",\"wrapper_recovery_state_retained\":false}\n"
+}
diff --git a/runtime/history/GITEA-V4-MACHINE-IDENTITY-MIGRATION-V5-20260730T193350Z.txt b/runtime/history/GITEA-V4-MACHINE-IDENTITY-MIGRATION-V5-20260730T193350Z.txt
new file mode 100644
index 0000000..810f76a
--- /dev/null
+++ b/runtime/history/GITEA-V4-MACHINE-IDENTITY-MIGRATION-V5-20260730T193350Z.txt
@@ -0,0 +1,34 @@
+CHAT_OUTPUT_BEGIN
+COMMAND_ID=GITEA-V4-MACHINE-IDENTITY-MIGRATION-V5-20260730T193350Z
+STATUS=FAIL
+RC=1
+HOST=pve01
+MODE=change
+COMPONENT=gitea-machine-identity
+REFERENCE_REGISTER_CHECK=OK
+REFERENCE_SHA256=5763f2f8edc75fcf6f3951f8c95896d1cc112ceccb6cf5b64a383f540a4deb8e
+ERROR_REGISTER_CHECK=OK
+ERROR_REGISTER_SHA256=24934a2c7fa5c26f6e828583c4aefac7f143b40c0171736ed7571e617d55ab83
+COMMAND_SHA256=5e635622291f11e949d0dcdd51755c61db105a889c01dbdef3fa2fe0958f52c0
+DUPLICATE_FAILED_COMMAND_BLOCKED=false
+EXECUTION_STARTED=true
+CHANGE_DECLARED=true
+RESULT_CONTRACT_VALID=true
+RESULT_CONTRACT_STATUS=FAIL
+RESULT_CONTRACT_ERROR=NONE
+COMMAND_RC=1
+CHANGES_MADE=true
+ROLLBACK_STARTED=true
+ROLLBACK_RESTORED=true
+MUTATION_OUTCOME=ROLLED_BACK
+SANITIZED=yes
+SECRETS_INCLUDED=no
+PRIVATE_ADDRESSES_INCLUDED=no
+RAW_EVIDENCE_SHA256=e0bd3d90d4927d580255b86e089469ce3c4658cd16d3b9d63deb4f16bd4d9827
+SANITIZED_OUTPUT_SHA256=e0bd3d90d4927d580255b86e089469ce3c4658cd16d3b9d63deb4f16bd4d9827
+OUTPUT_BEGIN
+HOMELAB_RESULT_CONTRACT={"changes_made":true,"command_id":"GITEA-V4-MACHINE-IDENTITY-MIGRATION-V5-20260730T193350Z","rollback_restored":true,"rollback_started":true,"status":"FAIL","version":1}
+{"changes_made":true,"command_id":"GITEA-V4-MACHINE-IDENTITY-MIGRATION-V5-20260730T193350Z","credential_partition":{"original_sha256":"fc18813a7f008130cbc291df849b8c72359985ef697717460fbc39d2056be2b1","residual_bytes":68,"residual_sha256":"10d1a19537be0dd0dd1ab37cd4a1e5e239c1970a4d16d65aaa7ae7edf2739ec0","target_bytes":69,"target_sha256":"b52c89cef273de1aa4afc607ee5d4323ef88553ed4b94da24df049b2251f03d8"},"error":"RuntimeError: phase failed: dry-run retry rc=142","failed_phase":"dry-run","mutation_outcome":"ROLLED_BACK","package":{"admin_sha256":"5398600c15b63f3872116e6d1ae6f65e2d7a5d1752349c9de0de07d801967bd1","phase_hashes":{"apply":"c2cee33db773dd58b0eadb0405c33933773a559b150ad478aa9c0018dac762e3","dry-run":"c5edfe7553ffb7f44a80dd530b805fb732ee0e09097f5b3a6ca77d1f9bc27329","preflight":"2ca95ea8d0871351133f946d481665c059b4533c2ec80ea35d81424d7b1d5f7a","prepare":"d7cc381878e06f0896219616354c70b042c227ab6254d6a9a36061cc24c13f8c","rollback":"2b801fcea7096cdefe2cd294175d1d48ac3dfb394776dbda52299ded470fee0e","seal":"c88cb5e9f63aac3888e3822a5eab9e2456b04f5eda16756f626a664eb558c0bc","verify":"e57af844675486bb897dd05cfd529bc618c6f32fec9a9257eeeaca1748cbb7cc"},"sha256_check_stdout_sha256":"edc33fce6cfbf4052ebe804dee6cb9f86d114eb0953f2dba3b5fa9148af70fb3","sha256s_sha256":"0aa34f98ccb74f2a8c00460781f56f7b29805e21a284e59a8052936f8dcdc511","task_sha256":"10fa2a21164397e2d28f6a44c452c431e64e3cafadd2b4e8098a060c30fab5d9","v3_block_rc":64,"validation_stdout_sha256":"cce2200e849fd3b7418a9dc011e5566097c620f46da0e2520ea380f2c883e3de"},"phases":[{"duration_seconds":0.425,"phase":"preflight","rc":0,"safe_stderr":[],"safe_stdout":["LINT_STATUS=OK","TASK_ID=gitea-machine-identity-controlled-migration-v4","POLICY_ID=homelab-admin-guardrails-v1.2","RULES_CHECKED=14","SOURCE_FILES_CHECKED=11","GITEA_MACHINE_IDENTITY_MIGRATION_V3_TESTS=OK","REG_157_PREFLIGHT_GITEA_CLI=BLOCKED","REG_158_AGGREGATE_SSH_TIMEOUT_UNCLASSIFIED=BLOCKED","REG_159_BOOTSTRAP_ADMINISTRATOR=BLOCKED","REG_162_LEGACY_REPO_ADMIN_REQUIRED=BLOCKED","REG_163_REPOSITORY_ONLY_SCOPE_REQUIRED=BLOCKED","REG_164_USER_SCOPE_ACCESS=BLOCKED","REG_165_TASK_OWNED_REMOTE_CLEANUP=BLOCKED","REG_166_REPOSITORY_SPECIFIC_HELPER_REQUIRED=BLOCKED","REG_167_PROTECTED_WORKTREE_PUSH_DISABLED=BLOCKED","REG_168_PHASE_RUN_DIR_ISOLATION=BLOCKED","REG_014_GITEA_VERSION_AUTHENTICATION=BLOCKED","REG_015_GITEA_OWNER_PERMISSION=BLOCKED","PREFLIGHT_STATUS=OK","ROOT_CAUSE_COUNT=0","LEGACY_IDENTITY_API=OK","LEGACY_REPOSITORY_PERMISSION=admin","MACHINE_USER_STATE=ABSENT","PREFLIGHT_GITEA_CLI_CALLS=0","FAILED_UNIT_COUNT=2","FAILED_UNIT_POLICY=EXACT_KNOWN_UNRELATED_ALLOWLIST","PACKAGE_TESTS=OK","PRODUCTION_CHANGED=NO","RUN_DIR=/var/lib/homelab-admin/runs/gitea-machine-identity-controlled-migration-v4/20260730T193425Z-2497470-preflight","RUN_RC=0"],"stderr_bytes":0,"stderr_sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","stdout_bytes":1188,"stdout_sha256":"19de4ada678b1e607f244da9587ab0c899d3bf3543cc18ede79e6c83bd7f6341"},{"duration_seconds":0.203,"phase":"prepare","rc":0,"safe_stderr":[],"safe_stdout":["LINT_STATUS=OK","TASK_ID=gitea-machine-identity-controlled-migration-v4","POLICY_ID=homelab-admin-guardrails-v1.2","RULES_CHECKED=14","SOURCE_FILES_CHECKED=11","PREPARE_STATUS=OK","ROOT_CAUSE_COUNT=0","VM170_PINNED_HOST_KEY_READY=YES","LEGACY_GIT_CONFIG_BACKED_UP=YES","MIGRATION_PLAN_READY=YES","ROLLBACK_PLAN_READY=YES","PRODUCTION_CHANGED=NO","RUN_DIR=/var/lib/homelab-admin/runs/gitea-machine-identity-controlled-migration-v4/20260730T193425Z-2497585-prepare","RUN_RC=0"],"stderr_bytes":0,"stderr_sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","stdout_bytes":485,"stdout_sha256":"b552687b70b07a0107ec67fa4330bc05a2a1b02f334011951e5a382e3397f32a"},{"duration_seconds":10.526,"phase":"dry-run-initial","rc":142,"safe_stderr":[],"safe_stdout":["LINT_STATUS=OK","TASK_ID=gitea-machine-identity-controlled-migration-v4","POLICY_ID=homelab-admin-guardrails-v1.2","RULES_CHECKED=14","SOURCE_FILES_CHECKED=11","GITEA_MACHINE_IDENTITY_MIGRATION_V3_TESTS=OK","REG_157_PREFLIGHT_GITEA_CLI=BLOCKED","REG_158_AGGREGATE_SSH_TIMEOUT_UNCLASSIFIED=BLOCKED","REG_159_BOOTSTRAP_ADMINISTRATOR=BLOCKED","REG_162_LEGACY_REPO_ADMIN_REQUIRED=BLOCKED","REG_163_REPOSITORY_ONLY_SCOPE_REQUIRED=BLOCKED","REG_164_USER_SCOPE_ACCESS=BLOCKED","REG_165_TASK_OWNED_REMOTE_CLEANUP=BLOCKED","REG_166_REPOSITORY_SPECIFIC_HELPER_REQUIRED=BLOCKED","REG_167_PROTECTED_WORKTREE_PUSH_DISABLED=BLOCKED","REG_168_PHASE_RUN_DIR_ISOLATION=BLOCKED","REG_014_GITEA_VERSION_AUTHENTICATION=BLOCKED","REG_015_GITEA_OWNER_PERMISSION=BLOCKED","ROOT_CAUSE=UNEXPECTED_PHASE_ERROR","ROOT_CAUSE_COUNT=1","DETAIL=line:43 rc:142","RUN_DIR=/var/lib/homelab-admin/runs/gitea-machine-identity-controlled-migration-v4/20260730T193425Z-2497675-dry-run","RUN_RC=142"],"stderr_bytes":0,"stderr_sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","stdout_bytes":1002,"stdout_sha256":"5abdd5abc86a3b54da0974d81881880831cc3a1b90a8a4baf487689cc056e136"},{"duration_seconds":10.376,"phase":"dry-run-retry-60s","rc":142,"safe_stderr":[],"safe_stdout":["LINT_STATUS=OK","TASK_ID=gitea-machine-identity-controlled-migration-v4","POLICY_ID=homelab-admin-guardrails-v1.2","RULES_CHECKED=14","SOURCE_FILES_CHECKED=11","GITEA_MACHINE_IDENTITY_MIGRATION_V3_TESTS=OK","REG_157_PREFLIGHT_GITEA_CLI=BLOCKED","REG_158_AGGREGATE_SSH_TIMEOUT_UNCLASSIFIED=BLOCKED","REG_159_BOOTSTRAP_ADMINISTRATOR=BLOCKED","REG_162_LEGACY_REPO_ADMIN_REQUIRED=BLOCKED","REG_163_REPOSITORY_ONLY_SCOPE_REQUIRED=BLOCKED","REG_164_USER_SCOPE_ACCESS=BLOCKED","REG_165_TASK_OWNED_REMOTE_CLEANUP=BLOCKED","REG_166_REPOSITORY_SPECIFIC_HELPER_REQUIRED=BLOCKED","REG_167_PROTECTED_WORKTREE_PUSH_DISABLED=BLOCKED","REG_168_PHASE_RUN_DIR_ISOLATION=BLOCKED","REG_014_GITEA_VERSION_AUTHENTICATION=BLOCKED","REG_015_GITEA_OWNER_PERMISSION=BLOCKED","ROOT_CAUSE=UNEXPECTED_PHASE_ERROR","ROOT_CAUSE_COUNT=1","DETAIL=line:43 rc:142","RUN_DIR=/var/lib/homelab-admin/runs/gitea-machine-identity-controlled-migration-v4/20260730T193436Z-2497880-dry-run","RUN_RC=142"],"stderr_bytes":0,"stderr_sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","stdout_bytes":1002,"stdout_sha256":"20511a6ce19e3f8359c9722c78115ed98ee1687329ef3c772409933f1148dbe3"}],"rc":1,"rollback_restored":true,"rollback_started":true,"schema":1,"seal_started":false,"secrets_included":false,"status":"FAIL","wrapper_recovery_state_retained":false}
+
+OUTPUT_END
+CHAT_OUTPUT_END
diff --git a/runtime/latest.json b/runtime/latest.json
index b109d30..fb433b5 100644
--- a/runtime/latest.json
+++ b/runtime/latest.json
@@ -1,19 +1,19 @@
 {
   "schema_version": 1,
   "channel": "homelab-runtime",
-  "command_id": "GITEA-V4-MACHINE-IDENTITY-MIGRATION-V4-20260730T192614Z",
+  "command_id": "GITEA-V4-MACHINE-IDENTITY-MIGRATION-V5-20260730T193350Z",
   "status": "FAIL",
   "rc": 1,
   "host": "pve01",
   "mode": "change",
   "component": "gitea-machine-identity",
-  "started_at_utc": "2026-07-30T19:27:03Z",
-  "finished_at_utc": "2026-07-30T19:27:14Z",
+  "started_at_utc": "2026-07-30T19:34:24Z",
+  "finished_at_utc": "2026-07-30T19:34:46Z",
   "reference_register_checked": true,
   "reference_sha256": "5763f2f8edc75fcf6f3951f8c95896d1cc112ceccb6cf5b64a383f540a4deb8e",
   "error_register_checked": true,
   "error_register_sha256": "24934a2c7fa5c26f6e828583c4aefac7f143b40c0171736ed7571e617d55ab83",
-  "command_sha256": "9250284b5c04f4edfa4bddfd3154b6d7796cfe7eedd99f3b73e0e509d2f315f9",
+  "command_sha256": "5e635622291f11e949d0dcdd51755c61db105a889c01dbdef3fa2fe0958f52c0",
   "duplicate_failed_command_blocked": false,
   "block_reason": null,
   "execution_started": true,
@@ -30,9 +30,9 @@
   "secrets_included": false,
   "private_addresses_included": false,
   "raw_evidence_retained_locally": true,
-  "raw_evidence_sha256": "b0797f14a57d3990f75def2041e2d55d361d6a4ff9f74a69041dadc128bbfaad",
-  "sanitized_output_sha256": "b0797f14a57d3990f75def2041e2d55d361d6a4ff9f74a69041dadc128bbfaad",
+  "raw_evidence_sha256": "e0bd3d90d4927d580255b86e089469ce3c4658cd16d3b9d63deb4f16bd4d9827",
+  "sanitized_output_sha256": "e0bd3d90d4927d580255b86e089469ce3c4658cd16d3b9d63deb4f16bd4d9827",
   "output_truncated_in_json": false,
   "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
-  "output": "HOMELAB_RESULT_CONTRACT={\"changes_made\":true,\"command_id\":\"GITEA-V4-MACHINE-IDENTITY-MIGRATION-V4-20260730T192614Z\",\"rollback_restored\":true,\"rollback_started\":true,\"status\":\"FAIL\",\"version\":1}\n{\"changes_made\":true,\"command_id\":\"GITEA-V4-MACHINE-IDENTITY-MIGRATION-V4-20260730T192614Z\",\"credential_partition\":{\"original_sha256\":\"fc18813a7f008130cbc291df849b8c72359985ef697717460fbc39d2056be2b1\",\"residual_bytes\":68,\"residual_sha256\":\"10d1a19537be0dd0dd1ab37cd4a1e5e239c1970a4d16d65aaa7ae7edf2739ec0\",\"target_bytes\":69,\"target_sha256\":\"b52c89cef273de1aa4afc607ee5d4323ef88553ed4b94da24df049b2251f03d8\"},\"error\":\"RuntimeError: phase failed: dry-run rc=142\",\"failed_phase\":\"dry-run\",\"mutation_outcome\":\"ROLLED_BACK\",\"package\":{\"admin_sha256\":\"5398600c15b63f3872116e6d1ae6f65e2d7a5d1752349c9de0de07d801967bd1\",\"phase_hashes\":{\"apply\":\"c2cee33db773dd58b0eadb0405c33933773a559b150ad478aa9c0018dac762e3\",\"dry-run\":\"c5edfe7553ffb7f44a80dd530b805fb732ee0e09097f5b3a6ca77d1f9bc27329\",\"preflight\":\"2ca95ea8d0871351133f946d481665c059b4533c2ec80ea35d81424d7b1d5f7a\",\"prepare\":\"d7cc381878e06f0896219616354c70b042c227ab6254d6a9a36061cc24c13f8c\",\"rollback\":\"2b801fcea7096cdefe2cd294175d1d48ac3dfb394776dbda52299ded470fee0e\",\"seal\":\"c88cb5e9f63aac3888e3822a5eab9e2456b04f5eda16756f626a664eb558c0bc\",\"verify\":\"e57af844675486bb897dd05cfd529bc618c6f32fec9a9257eeeaca1748cbb7cc\"},\"sha256_check_stdout_sha256\":\"edc33fce6cfbf4052ebe804dee6cb9f86d114eb0953f2dba3b5fa9148af70fb3\",\"sha256s_sha256\":\"0aa34f98ccb74f2a8c00460781f56f7b29805e21a284e59a8052936f8dcdc511\",\"task_sha256\":\"10fa2a21164397e2d28f6a44c452c431e64e3cafadd2b4e8098a060c30fab5d9\",\"v3_block_rc\":64,\"validation_stdout_sha256\":\"cce2200e849fd3b7418a9dc011e5566097c620f46da0e2520ea380f2c883e3de\"},\"phases\":[{\"duration_seconds\":0.418,\"phase\":\"preflight\",\"rc\":0,\"safe_stderr\":[],\"safe_stdout\":[\"LINT_STATUS=OK\",\"TASK_ID=gitea-machine-identity-controlled-migration-v4\",\"POLICY_ID=homelab-admin-guardrails-v1.2\",\"RULES_CHECKED=14\",\"SOURCE_FILES_CHECKED=11\",\"GITEA_MACHINE_IDENTITY_MIGRATION_V3_TESTS=OK\",\"REG_157_PREFLIGHT_GITEA_CLI=BLOCKED\",\"REG_158_AGGREGATE_SSH_TIMEOUT_UNCLASSIFIED=BLOCKED\",\"REG_159_BOOTSTRAP_ADMINISTRATOR=BLOCKED\",\"REG_162_LEGACY_REPO_ADMIN_REQUIRED=BLOCKED\",\"REG_163_REPOSITORY_ONLY_SCOPE_REQUIRED=BLOCKED\",\"REG_164_USER_SCOPE_ACCESS=BLOCKED\",\"REG_165_TASK_OWNED_REMOTE_CLEANUP=BLOCKED\",\"REG_166_REPOSITORY_SPECIFIC_HELPER_REQUIRED=BLOCKED\",\"REG_167_PROTECTED_WORKTREE_PUSH_DISABLED=BLOCKED\",\"REG_168_PHASE_RUN_DIR_ISOLATION=BLOCKED\",\"REG_014_GITEA_VERSION_AUTHENTICATION=BLOCKED\",\"REG_015_GITEA_OWNER_PERMISSION=BLOCKED\",\"PREFLIGHT_STATUS=OK\",\"ROOT_CAUSE_COUNT=0\",\"LEGACY_IDENTITY_API=OK\",\"LEGACY_REPOSITORY_PERMISSION=admin\",\"MACHINE_USER_STATE=ABSENT\",\"PREFLIGHT_GITEA_CLI_CALLS=0\",\"FAILED_UNIT_COUNT=2\",\"FAILED_UNIT_POLICY=EXACT_KNOWN_UNRELATED_ALLOWLIST\",\"PACKAGE_TESTS=OK\",\"PRODUCTION_CHANGED=NO\",\"RUN_DIR=/var/lib/homelab-admin/runs/gitea-machine-identity-controlled-migration-v4/20260730T192703Z-2460760-preflight\",\"RUN_RC=0\"],\"stderr_bytes\":0,\"stderr_sha256\":\"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\",\"stdout_bytes\":1188,\"stdout_sha256\":\"ed3cf3133e703494822073192ac5aedd60ffb912283ad78e7eb2779efca8979c\"},{\"duration_seconds\":0.203,\"phase\":\"prepare\",\"rc\":0,\"safe_stderr\":[],\"safe_stdout\":[\"LINT_STATUS=OK\",\"TASK_ID=gitea-machine-identity-controlled-migration-v4\",\"POLICY_ID=homelab-admin-guardrails-v1.2\",\"RULES_CHECKED=14\",\"SOURCE_FILES_CHECKED=11\",\"PREPARE_STATUS=OK\",\"ROOT_CAUSE_COUNT=0\",\"VM170_PINNED_HOST_KEY_READY=YES\",\"LEGACY_GIT_CONFIG_BACKED_UP=YES\",\"MIGRATION_PLAN_READY=YES\",\"ROLLBACK_PLAN_READY=YES\",\"PRODUCTION_CHANGED=NO\",\"RUN_DIR=/var/lib/homelab-admin/runs/gitea-machine-identity-controlled-migration-v4/20260730T192704Z-2460869-prepare\",\"RUN_RC=0\"],\"stderr_bytes\":0,\"stderr_sha256\":\"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\",\"stdout_bytes\":485,\"stdout_sha256\":\"706ae07b2fff38067be2118959c7b4d1f5e762ef937984142d680e4a385ec4a6\"},{\"duration_seconds\":10.527,\"phase\":\"dry-run\",\"rc\":142,\"safe_stderr\":[],\"safe_stdout\":[\"LINT_STATUS=OK\",\"TASK_ID=gitea-machine-identity-controlled-migration-v4\",\"POLICY_ID=homelab-admin-guardrails-v1.2\",\"RULES_CHECKED=14\",\"SOURCE_FILES_CHECKED=11\",\"GITEA_MACHINE_IDENTITY_MIGRATION_V3_TESTS=OK\",\"REG_157_PREFLIGHT_GITEA_CLI=BLOCKED\",\"REG_158_AGGREGATE_SSH_TIMEOUT_UNCLASSIFIED=BLOCKED\",\"REG_159_BOOTSTRAP_ADMINISTRATOR=BLOCKED\",\"REG_162_LEGACY_REPO_ADMIN_REQUIRED=BLOCKED\",\"REG_163_REPOSITORY_ONLY_SCOPE_REQUIRED=BLOCKED\",\"REG_164_USER_SCOPE_ACCESS=BLOCKED\",\"REG_165_TASK_OWNED_REMOTE_CLEANUP=BLOCKED\",\"REG_166_REPOSITORY_SPECIFIC_HELPER_REQUIRED=BLOCKED\",\"REG_167_PROTECTED_WORKTREE_PUSH_DISABLED=BLOCKED\",\"REG_168_PHASE_RUN_DIR_ISOLATION=BLOCKED\",\"REG_014_GITEA_VERSION_AUTHENTICATION=BLOCKED\",\"REG_015_GITEA_OWNER_PERMISSION=BLOCKED\",\"ROOT_CAUSE=UNEXPECTED_PHASE_ERROR\",\"ROOT_CAUSE_COUNT=1\",\"DETAIL=line:43 rc:142\",\"RUN_DIR=/var/lib/homelab-admin/runs/gitea-machine-identity-controlled-migration-v4/20260730T192704Z-2460952-dry-run\",\"RUN_RC=142\"],\"stderr_bytes\":0,\"stderr_sha256\":\"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\",\"stdout_bytes\":1002,\"stdout_sha256\":\"a809ee82bcbbda284be0ccf455118b08434f18c9e5e70659cb1bcd18f9840ec6\"}],\"rc\":1,\"rollback_restored\":true,\"rollback_started\":true,\"schema\":1,\"seal_started\":false,\"secrets_included\":false,\"status\":\"FAIL\",\"wrapper_recovery_state_retained\":false}\n"
+  "output": "HOMELAB_RESULT_CONTRACT={\"changes_made\":true,\"command_id\":\"GITEA-V4-MACHINE-IDENTITY-MIGRATION-V5-20260730T193350Z\",\"rollback_restored\":true,\"rollback_started\":true,\"status\":\"FAIL\",\"version\":1}\n{\"changes_made\":true,\"command_id\":\"GITEA-V4-MACHINE-IDENTITY-MIGRATION-V5-20260730T193350Z\",\"credential_partition\":{\"original_sha256\":\"fc18813a7f008130cbc291df849b8c72359985ef697717460fbc39d2056be2b1\",\"residual_bytes\":68,\"residual_sha256\":\"10d1a19537be0dd0dd1ab37cd4a1e5e239c1970a4d16d65aaa7ae7edf2739ec0\",\"target_bytes\":69,\"target_sha256\":\"b52c89cef273de1aa4afc607ee5d4323ef88553ed4b94da24df049b2251f03d8\"},\"error\":\"RuntimeError: phase failed: dry-run retry rc=142\",\"failed_phase\":\"dry-run\",\"mutation_outcome\":\"ROLLED_BACK\",\"package\":{\"admin_sha256\":\"5398600c15b63f3872116e6d1ae6f65e2d7a5d1752349c9de0de07d801967bd1\",\"phase_hashes\":{\"apply\":\"c2cee33db773dd58b0eadb0405c33933773a559b150ad478aa9c0018dac762e3\",\"dry-run\":\"c5edfe7553ffb7f44a80dd530b805fb732ee0e09097f5b3a6ca77d1f9bc27329\",\"preflight\":\"2ca95ea8d0871351133f946d481665c059b4533c2ec80ea35d81424d7b1d5f7a\",\"prepare\":\"d7cc381878e06f0896219616354c70b042c227ab6254d6a9a36061cc24c13f8c\",\"rollback\":\"2b801fcea7096cdefe2cd294175d1d48ac3dfb394776dbda52299ded470fee0e\",\"seal\":\"c88cb5e9f63aac3888e3822a5eab9e2456b04f5eda16756f626a664eb558c0bc\",\"verify\":\"e57af844675486bb897dd05cfd529bc618c6f32fec9a9257eeeaca1748cbb7cc\"},\"sha256_check_stdout_sha256\":\"edc33fce6cfbf4052ebe804dee6cb9f86d114eb0953f2dba3b5fa9148af70fb3\",\"sha256s_sha256\":\"0aa34f98ccb74f2a8c00460781f56f7b29805e21a284e59a8052936f8dcdc511\",\"task_sha256\":\"10fa2a21164397e2d28f6a44c452c431e64e3cafadd2b4e8098a060c30fab5d9\",\"v3_block_rc\":64,\"validation_stdout_sha256\":\"cce2200e849fd3b7418a9dc011e5566097c620f46da0e2520ea380f2c883e3de\"},\"phases\":[{\"duration_seconds\":0.425,\"phase\":\"preflight\",\"rc\":0,\"safe_stderr\":[],\"safe_stdout\":[\"LINT_STATUS=OK\",\"TASK_ID=gitea-machine-identity-controlled-migration-v4\",\"POLICY_ID=homelab-admin-guardrails-v1.2\",\"RULES_CHECKED=14\",\"SOURCE_FILES_CHECKED=11\",\"GITEA_MACHINE_IDENTITY_MIGRATION_V3_TESTS=OK\",\"REG_157_PREFLIGHT_GITEA_CLI=BLOCKED\",\"REG_158_AGGREGATE_SSH_TIMEOUT_UNCLASSIFIED=BLOCKED\",\"REG_159_BOOTSTRAP_ADMINISTRATOR=BLOCKED\",\"REG_162_LEGACY_REPO_ADMIN_REQUIRED=BLOCKED\",\"REG_163_REPOSITORY_ONLY_SCOPE_REQUIRED=BLOCKED\",\"REG_164_USER_SCOPE_ACCESS=BLOCKED\",\"REG_165_TASK_OWNED_REMOTE_CLEANUP=BLOCKED\",\"REG_166_REPOSITORY_SPECIFIC_HELPER_REQUIRED=BLOCKED\",\"REG_167_PROTECTED_WORKTREE_PUSH_DISABLED=BLOCKED\",\"REG_168_PHASE_RUN_DIR_ISOLATION=BLOCKED\",\"REG_014_GITEA_VERSION_AUTHENTICATION=BLOCKED\",\"REG_015_GITEA_OWNER_PERMISSION=BLOCKED\",\"PREFLIGHT_STATUS=OK\",\"ROOT_CAUSE_COUNT=0\",\"LEGACY_IDENTITY_API=OK\",\"LEGACY_REPOSITORY_PERMISSION=admin\",\"MACHINE_USER_STATE=ABSENT\",\"PREFLIGHT_GITEA_CLI_CALLS=0\",\"FAILED_UNIT_COUNT=2\",\"FAILED_UNIT_POLICY=EXACT_KNOWN_UNRELATED_ALLOWLIST\",\"PACKAGE_TESTS=OK\",\"PRODUCTION_CHANGED=NO\",\"RUN_DIR=/var/lib/homelab-admin/runs/gitea-machine-identity-controlled-migration-v4/20260730T193425Z-2497470-preflight\",\"RUN_RC=0\"],\"stderr_bytes\":0,\"stderr_sha256\":\"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\",\"stdout_bytes\":1188,\"stdout_sha256\":\"19de4ada678b1e607f244da9587ab0c899d3bf3543cc18ede79e6c83bd7f6341\"},{\"duration_seconds\":0.203,\"phase\":\"prepare\",\"rc\":0,\"safe_stderr\":[],\"safe_stdout\":[\"LINT_STATUS=OK\",\"TASK_ID=gitea-machine-identity-controlled-migration-v4\",\"POLICY_ID=homelab-admin-guardrails-v1.2\",\"RULES_CHECKED=14\",\"SOURCE_FILES_CHECKED=11\",\"PREPARE_STATUS=OK\",\"ROOT_CAUSE_COUNT=0\",\"VM170_PINNED_HOST_KEY_READY=YES\",\"LEGACY_GIT_CONFIG_BACKED_UP=YES\",\"MIGRATION_PLAN_READY=YES\",\"ROLLBACK_PLAN_READY=YES\",\"PRODUCTION_CHANGED=NO\",\"RUN_DIR=/var/lib/homelab-admin/runs/gitea-machine-identity-controlled-migration-v4/20260730T193425Z-2497585-prepare\",\"RUN_RC=0\"],\"stderr_bytes\":0,\"stderr_sha256\":\"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\",\"stdout_bytes\":485,\"stdout_sha256\":\"b552687b70b07a0107ec67fa4330bc05a2a1b02f334011951e5a382e3397f32a\"},{\"duration_seconds\":10.526,\"phase\":\"dry-run-initial\",\"rc\":142,\"safe_stderr\":[],\"safe_stdout\":[\"LINT_STATUS=OK\",\"TASK_ID=gitea-machine-identity-controlled-migration-v4\",\"POLICY_ID=homelab-admin-guardrails-v1.2\",\"RULES_CHECKED=14\",\"SOURCE_FILES_CHECKED=11\",\"GITEA_MACHINE_IDENTITY_MIGRATION_V3_TESTS=OK\",\"REG_157_PREFLIGHT_GITEA_CLI=BLOCKED\",\"REG_158_AGGREGATE_SSH_TIMEOUT_UNCLASSIFIED=BLOCKED\",\"REG_159_BOOTSTRAP_ADMINISTRATOR=BLOCKED\",\"REG_162_LEGACY_REPO_ADMIN_REQUIRED=BLOCKED\",\"REG_163_REPOSITORY_ONLY_SCOPE_REQUIRED=BLOCKED\",\"REG_164_USER_SCOPE_ACCESS=BLOCKED\",\"REG_165_TASK_OWNED_REMOTE_CLEANUP=BLOCKED\",\"REG_166_REPOSITORY_SPECIFIC_HELPER_REQUIRED=BLOCKED\",\"REG_167_PROTECTED_WORKTREE_PUSH_DISABLED=BLOCKED\",\"REG_168_PHASE_RUN_DIR_ISOLATION=BLOCKED\",\"REG_014_GITEA_VERSION_AUTHENTICATION=BLOCKED\",\"REG_015_GITEA_OWNER_PERMISSION=BLOCKED\",\"ROOT_CAUSE=UNEXPECTED_PHASE_ERROR\",\"ROOT_CAUSE_COUNT=1\",\"DETAIL=line:43 rc:142\",\"RUN_DIR=/var/lib/homelab-admin/runs/gitea-machine-identity-controlled-migration-v4/20260730T193425Z-2497675-dry-run\",\"RUN_RC=142\"],\"stderr_bytes\":0,\"stderr_sha256\":\"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\",\"stdout_bytes\":1002,\"stdout_sha256\":\"5abdd5abc86a3b54da0974d81881880831cc3a1b90a8a4baf487689cc056e136\"},{\"duration_seconds\":10.376,\"phase\":\"dry-run-retry-60s\",\"rc\":142,\"safe_stderr\":[],\"safe_stdout\":[\"LINT_STATUS=OK\",\"TASK_ID=gitea-machine-identity-controlled-migration-v4\",\"POLICY_ID=homelab-admin-guardrails-v1.2\",\"RULES_CHECKED=14\",\"SOURCE_FILES_CHECKED=11\",\"GITEA_MACHINE_IDENTITY_MIGRATION_V3_TESTS=OK\",\"REG_157_PREFLIGHT_GITEA_CLI=BLOCKED\",\"REG_158_AGGREGATE_SSH_TIMEOUT_UNCLASSIFIED=BLOCKED\",\"REG_159_BOOTSTRAP_ADMINISTRATOR=BLOCKED\",\"REG_162_LEGACY_REPO_ADMIN_REQUIRED=BLOCKED\",\"REG_163_REPOSITORY_ONLY_SCOPE_REQUIRED=BLOCKED\",\"REG_164_USER_SCOPE_ACCESS=BLOCKED\",\"REG_165_TASK_OWNED_REMOTE_CLEANUP=BLOCKED\",\"REG_166_REPOSITORY_SPECIFIC_HELPER_REQUIRED=BLOCKED\",\"REG_167_PROTECTED_WORKTREE_PUSH_DISABLED=BLOCKED\",\"REG_168_PHASE_RUN_DIR_ISOLATION=BLOCKED\",\"REG_014_GITEA_VERSION_AUTHENTICATION=BLOCKED\",\"REG_015_GITEA_OWNER_PERMISSION=BLOCKED\",\"ROOT_CAUSE=UNEXPECTED_PHASE_ERROR\",\"ROOT_CAUSE_COUNT=1\",\"DETAIL=line:43 rc:142\",\"RUN_DIR=/var/lib/homelab-admin/runs/gitea-machine-identity-controlled-migration-v4/20260730T193436Z-2497880-dry-run\",\"RUN_RC=142\"],\"stderr_bytes\":0,\"stderr_sha256\":\"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\",\"stdout_bytes\":1002,\"stdout_sha256\":\"20511a6ce19e3f8359c9722c78115ed98ee1687329ef3c772409933f1148dbe3\"}],\"rc\":1,\"rollback_restored\":true,\"rollback_started\":true,\"schema\":1,\"seal_started\":false,\"secrets_included\":false,\"status\":\"FAIL\",\"wrapper_recovery_state_retained\":false}\n"
 }
diff --git a/runtime/latest.txt b/runtime/latest.txt
index c020777..810f76a 100644
--- a/runtime/latest.txt
+++ b/runtime/latest.txt
@@ -1,5 +1,5 @@
 CHAT_OUTPUT_BEGIN
-COMMAND_ID=GITEA-V4-MACHINE-IDENTITY-MIGRATION-V4-20260730T192614Z
+COMMAND_ID=GITEA-V4-MACHINE-IDENTITY-MIGRATION-V5-20260730T193350Z
 STATUS=FAIL
 RC=1
 HOST=pve01
@@ -9,7 +9,7 @@ REFERENCE_REGISTER_CHECK=OK
 REFERENCE_SHA256=5763f2f8edc75fcf6f3951f8c95896d1cc112ceccb6cf5b64a383f540a4deb8e
 ERROR_REGISTER_CHECK=OK
 ERROR_REGISTER_SHA256=24934a2c7fa5c26f6e828583c4aefac7f143b40c0171736ed7571e617d55ab83
-COMMAND_SHA256=9250284b5c04f4edfa4bddfd3154b6d7796cfe7eedd99f3b73e0e509d2f315f9
+COMMAND_SHA256=5e635622291f11e949d0dcdd51755c61db105a889c01dbdef3fa2fe0958f52c0
 DUPLICATE_FAILED_COMMAND_BLOCKED=false
 EXECUTION_STARTED=true
 CHANGE_DECLARED=true
@@ -24,11 +24,11 @@ MUTATION_OUTCOME=ROLLED_BACK
 SANITIZED=yes
 SECRETS_INCLUDED=no
 PRIVATE_ADDRESSES_INCLUDED=no
-RAW_EVIDENCE_SHA256=b0797f14a57d3990f75def2041e2d55d361d6a4ff9f74a69041dadc128bbfaad
-SANITIZED_OUTPUT_SHA256=b0797f14a57d3990f75def2041e2d55d361d6a4ff9f74a69041dadc128bbfaad
+RAW_EVIDENCE_SHA256=e0bd3d90d4927d580255b86e089469ce3c4658cd16d3b9d63deb4f16bd4d9827
+SANITIZED_OUTPUT_SHA256=e0bd3d90d4927d580255b86e089469ce3c4658cd16d3b9d63deb4f16bd4d9827
 OUTPUT_BEGIN
-HOMELAB_RESULT_CONTRACT={"changes_made":true,"command_id":"GITEA-V4-MACHINE-IDENTITY-MIGRATION-V4-20260730T192614Z","rollback_restored":true,"rollback_started":true,"status":"FAIL","version":1}
-{"changes_made":true,"command_id":"GITEA-V4-MACHINE-IDENTITY-MIGRATION-V4-20260730T192614Z","credential_partition":{"original_sha256":"fc18813a7f008130cbc291df849b8c72359985ef697717460fbc39d2056be2b1","residual_bytes":68,"residual_sha256":"10d1a19537be0dd0dd1ab37cd4a1e5e239c1970a4d16d65aaa7ae7edf2739ec0","target_bytes":69,"target_sha256":"b52c89cef273de1aa4afc607ee5d4323ef88553ed4b94da24df049b2251f03d8"},"error":"RuntimeError: phase failed: dry-run rc=142","failed_phase":"dry-run","mutation_outcome":"ROLLED_BACK","package":{"admin_sha256":"5398600c15b63f3872116e6d1ae6f65e2d7a5d1752349c9de0de07d801967bd1","phase_hashes":{"apply":"c2cee33db773dd58b0eadb0405c33933773a559b150ad478aa9c0018dac762e3","dry-run":"c5edfe7553ffb7f44a80dd530b805fb732ee0e09097f5b3a6ca77d1f9bc27329","preflight":"2ca95ea8d0871351133f946d481665c059b4533c2ec80ea35d81424d7b1d5f7a","prepare":"d7cc381878e06f0896219616354c70b042c227ab6254d6a9a36061cc24c13f8c","rollback":"2b801fcea7096cdefe2cd294175d1d48ac3dfb394776dbda52299ded470fee0e","seal":"c88cb5e9f63aac3888e3822a5eab9e2456b04f5eda16756f626a664eb558c0bc","verify":"e57af844675486bb897dd05cfd529bc618c6f32fec9a9257eeeaca1748cbb7cc"},"sha256_check_stdout_sha256":"edc33fce6cfbf4052ebe804dee6cb9f86d114eb0953f2dba3b5fa9148af70fb3","sha256s_sha256":"0aa34f98ccb74f2a8c00460781f56f7b29805e21a284e59a8052936f8dcdc511","task_sha256":"10fa2a21164397e2d28f6a44c452c431e64e3cafadd2b4e8098a060c30fab5d9","v3_block_rc":64,"validation_stdout_sha256":"cce2200e849fd3b7418a9dc011e5566097c620f46da0e2520ea380f2c883e3de"},"phases":[{"duration_seconds":0.418,"phase":"preflight","rc":0,"safe_stderr":[],"safe_stdout":["LINT_STATUS=OK","TASK_ID=gitea-machine-identity-controlled-migration-v4","POLICY_ID=homelab-admin-guardrails-v1.2","RULES_CHECKED=14","SOURCE_FILES_CHECKED=11","GITEA_MACHINE_IDENTITY_MIGRATION_V3_TESTS=OK","REG_157_PREFLIGHT_GITEA_CLI=BLOCKED","REG_158_AGGREGATE_SSH_TIMEOUT_UNCLASSIFIED=BLOCKED","REG_159_BOOTSTRAP_ADMINISTRATOR=BLOCKED","REG_162_LEGACY_REPO_ADMIN_REQUIRED=BLOCKED","REG_163_REPOSITORY_ONLY_SCOPE_REQUIRED=BLOCKED","REG_164_USER_SCOPE_ACCESS=BLOCKED","REG_165_TASK_OWNED_REMOTE_CLEANUP=BLOCKED","REG_166_REPOSITORY_SPECIFIC_HELPER_REQUIRED=BLOCKED","REG_167_PROTECTED_WORKTREE_PUSH_DISABLED=BLOCKED","REG_168_PHASE_RUN_DIR_ISOLATION=BLOCKED","REG_014_GITEA_VERSION_AUTHENTICATION=BLOCKED","REG_015_GITEA_OWNER_PERMISSION=BLOCKED","PREFLIGHT_STATUS=OK","ROOT_CAUSE_COUNT=0","LEGACY_IDENTITY_API=OK","LEGACY_REPOSITORY_PERMISSION=admin","MACHINE_USER_STATE=ABSENT","PREFLIGHT_GITEA_CLI_CALLS=0","FAILED_UNIT_COUNT=2","FAILED_UNIT_POLICY=EXACT_KNOWN_UNRELATED_ALLOWLIST","PACKAGE_TESTS=OK","PRODUCTION_CHANGED=NO","RUN_DIR=/var/lib/homelab-admin/runs/gitea-machine-identity-controlled-migration-v4/20260730T192703Z-2460760-preflight","RUN_RC=0"],"stderr_bytes":0,"stderr_sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","stdout_bytes":1188,"stdout_sha256":"ed3cf3133e703494822073192ac5aedd60ffb912283ad78e7eb2779efca8979c"},{"duration_seconds":0.203,"phase":"prepare","rc":0,"safe_stderr":[],"safe_stdout":["LINT_STATUS=OK","TASK_ID=gitea-machine-identity-controlled-migration-v4","POLICY_ID=homelab-admin-guardrails-v1.2","RULES_CHECKED=14","SOURCE_FILES_CHECKED=11","PREPARE_STATUS=OK","ROOT_CAUSE_COUNT=0","VM170_PINNED_HOST_KEY_READY=YES","LEGACY_GIT_CONFIG_BACKED_UP=YES","MIGRATION_PLAN_READY=YES","ROLLBACK_PLAN_READY=YES","PRODUCTION_CHANGED=NO","RUN_DIR=/var/lib/homelab-admin/runs/gitea-machine-identity-controlled-migration-v4/20260730T192704Z-2460869-prepare","RUN_RC=0"],"stderr_bytes":0,"stderr_sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","stdout_bytes":485,"stdout_sha256":"706ae07b2fff38067be2118959c7b4d1f5e762ef937984142d680e4a385ec4a6"},{"duration_seconds":10.527,"phase":"dry-run","rc":142,"safe_stderr":[],"safe_stdout":["LINT_STATUS=OK","TASK_ID=gitea-machine-identity-controlled-migration-v4","POLICY_ID=homelab-admin-guardrails-v1.2","RULES_CHECKED=14","SOURCE_FILES_CHECKED=11","GITEA_MACHINE_IDENTITY_MIGRATION_V3_TESTS=OK","REG_157_PREFLIGHT_GITEA_CLI=BLOCKED","REG_158_AGGREGATE_SSH_TIMEOUT_UNCLASSIFIED=BLOCKED","REG_159_BOOTSTRAP_ADMINISTRATOR=BLOCKED","REG_162_LEGACY_REPO_ADMIN_REQUIRED=BLOCKED","REG_163_REPOSITORY_ONLY_SCOPE_REQUIRED=BLOCKED","REG_164_USER_SCOPE_ACCESS=BLOCKED","REG_165_TASK_OWNED_REMOTE_CLEANUP=BLOCKED","REG_166_REPOSITORY_SPECIFIC_HELPER_REQUIRED=BLOCKED","REG_167_PROTECTED_WORKTREE_PUSH_DISABLED=BLOCKED","REG_168_PHASE_RUN_DIR_ISOLATION=BLOCKED","REG_014_GITEA_VERSION_AUTHENTICATION=BLOCKED","REG_015_GITEA_OWNER_PERMISSION=BLOCKED","ROOT_CAUSE=UNEXPECTED_PHASE_ERROR","ROOT_CAUSE_COUNT=1","DETAIL=line:43 rc:142","RUN_DIR=/var/lib/homelab-admin/runs/gitea-machine-identity-controlled-migration-v4/20260730T192704Z-2460952-dry-run","RUN_RC=142"],"stderr_bytes":0,"stderr_sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","stdout_bytes":1002,"stdout_sha256":"a809ee82bcbbda284be0ccf455118b08434f18c9e5e70659cb1bcd18f9840ec6"}],"rc":1,"rollback_restored":true,"rollback_started":true,"schema":1,"seal_started":false,"secrets_included":false,"status":"FAIL","wrapper_recovery_state_retained":false}
+HOMELAB_RESULT_CONTRACT={"changes_made":true,"command_id":"GITEA-V4-MACHINE-IDENTITY-MIGRATION-V5-20260730T193350Z","rollback_restored":true,"rollback_started":true,"status":"FAIL","version":1}
+{"changes_made":true,"command_id":"GITEA-V4-MACHINE-IDENTITY-MIGRATION-V5-20260730T193350Z","credential_partition":{"original_sha256":"fc18813a7f008130cbc291df849b8c72359985ef697717460fbc39d2056be2b1","residual_bytes":68,"residual_sha256":"10d1a19537be0dd0dd1ab37cd4a1e5e239c1970a4d16d65aaa7ae7edf2739ec0","target_bytes":69,"target_sha256":"b52c89cef273de1aa4afc607ee5d4323ef88553ed4b94da24df049b2251f03d8"},"error":"RuntimeError: phase failed: dry-run retry rc=142","failed_phase":"dry-run","mutation_outcome":"ROLLED_BACK","package":{"admin_sha256":"5398600c15b63f3872116e6d1ae6f65e2d7a5d1752349c9de0de07d801967bd1","phase_hashes":{"apply":"c2cee33db773dd58b0eadb0405c33933773a559b150ad478aa9c0018dac762e3","dry-run":"c5edfe7553ffb7f44a80dd530b805fb732ee0e09097f5b3a6ca77d1f9bc27329","preflight":"2ca95ea8d0871351133f946d481665c059b4533c2ec80ea35d81424d7b1d5f7a","prepare":"d7cc381878e06f0896219616354c70b042c227ab6254d6a9a36061cc24c13f8c","rollback":"2b801fcea7096cdefe2cd294175d1d48ac3dfb394776dbda52299ded470fee0e","seal":"c88cb5e9f63aac3888e3822a5eab9e2456b04f5eda16756f626a664eb558c0bc","verify":"e57af844675486bb897dd05cfd529bc618c6f32fec9a9257eeeaca1748cbb7cc"},"sha256_check_stdout_sha256":"edc33fce6cfbf4052ebe804dee6cb9f86d114eb0953f2dba3b5fa9148af70fb3","sha256s_sha256":"0aa34f98ccb74f2a8c00460781f56f7b29805e21a284e59a8052936f8dcdc511","task_sha256":"10fa2a21164397e2d28f6a44c452c431e64e3cafadd2b4e8098a060c30fab5d9","v3_block_rc":64,"validation_stdout_sha256":"cce2200e849fd3b7418a9dc011e5566097c620f46da0e2520ea380f2c883e3de"},"phases":[{"duration_seconds":0.425,"phase":"preflight","rc":0,"safe_stderr":[],"safe_stdout":["LINT_STATUS=OK","TASK_ID=gitea-machine-identity-controlled-migration-v4","POLICY_ID=homelab-admin-guardrails-v1.2","RULES_CHECKED=14","SOURCE_FILES_CHECKED=11","GITEA_MACHINE_IDENTITY_MIGRATION_V3_TESTS=OK","REG_157_PREFLIGHT_GITEA_CLI=BLOCKED","REG_158_AGGREGATE_SSH_TIMEOUT_UNCLASSIFIED=BLOCKED","REG_159_BOOTSTRAP_ADMINISTRATOR=BLOCKED","REG_162_LEGACY_REPO_ADMIN_REQUIRED=BLOCKED","REG_163_REPOSITORY_ONLY_SCOPE_REQUIRED=BLOCKED","REG_164_USER_SCOPE_ACCESS=BLOCKED","REG_165_TASK_OWNED_REMOTE_CLEANUP=BLOCKED","REG_166_REPOSITORY_SPECIFIC_HELPER_REQUIRED=BLOCKED","REG_167_PROTECTED_WORKTREE_PUSH_DISABLED=BLOCKED","REG_168_PHASE_RUN_DIR_ISOLATION=BLOCKED","REG_014_GITEA_VERSION_AUTHENTICATION=BLOCKED","REG_015_GITEA_OWNER_PERMISSION=BLOCKED","PREFLIGHT_STATUS=OK","ROOT_CAUSE_COUNT=0","LEGACY_IDENTITY_API=OK","LEGACY_REPOSITORY_PERMISSION=admin","MACHINE_USER_STATE=ABSENT","PREFLIGHT_GITEA_CLI_CALLS=0","FAILED_UNIT_COUNT=2","FAILED_UNIT_POLICY=EXACT_KNOWN_UNRELATED_ALLOWLIST","PACKAGE_TESTS=OK","PRODUCTION_CHANGED=NO","RUN_DIR=/var/lib/homelab-admin/runs/gitea-machine-identity-controlled-migration-v4/20260730T193425Z-2497470-preflight","RUN_RC=0"],"stderr_bytes":0,"stderr_sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","stdout_bytes":1188,"stdout_sha256":"19de4ada678b1e607f244da9587ab0c899d3bf3543cc18ede79e6c83bd7f6341"},{"duration_seconds":0.203,"phase":"prepare","rc":0,"safe_stderr":[],"safe_stdout":["LINT_STATUS=OK","TASK_ID=gitea-machine-identity-controlled-migration-v4","POLICY_ID=homelab-admin-guardrails-v1.2","RULES_CHECKED=14","SOURCE_FILES_CHECKED=11","PREPARE_STATUS=OK","ROOT_CAUSE_COUNT=0","VM170_PINNED_HOST_KEY_READY=YES","LEGACY_GIT_CONFIG_BACKED_UP=YES","MIGRATION_PLAN_READY=YES","ROLLBACK_PLAN_READY=YES","PRODUCTION_CHANGED=NO","RUN_DIR=/var/lib/homelab-admin/runs/gitea-machine-identity-controlled-migration-v4/20260730T193425Z-2497585-prepare","RUN_RC=0"],"stderr_bytes":0,"stderr_sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","stdout_bytes":485,"stdout_sha256":"b552687b70b07a0107ec67fa4330bc05a2a1b02f334011951e5a382e3397f32a"},{"duration_seconds":10.526,"phase":"dry-run-initial","rc":142,"safe_stderr":[],"safe_stdout":["LINT_STATUS=OK","TASK_ID=gitea-machine-identity-controlled-migration-v4","POLICY_ID=homelab-admin-guardrails-v1.2","RULES_CHECKED=14","SOURCE_FILES_CHECKED=11","GITEA_MACHINE_IDENTITY_MIGRATION_V3_TESTS=OK","REG_157_PREFLIGHT_GITEA_CLI=BLOCKED","REG_158_AGGREGATE_SSH_TIMEOUT_UNCLASSIFIED=BLOCKED","REG_159_BOOTSTRAP_ADMINISTRATOR=BLOCKED","REG_162_LEGACY_REPO_ADMIN_REQUIRED=BLOCKED","REG_163_REPOSITORY_ONLY_SCOPE_REQUIRED=BLOCKED","REG_164_USER_SCOPE_ACCESS=BLOCKED","REG_165_TASK_OWNED_REMOTE_CLEANUP=BLOCKED","REG_166_REPOSITORY_SPECIFIC_HELPER_REQUIRED=BLOCKED","REG_167_PROTECTED_WORKTREE_PUSH_DISABLED=BLOCKED","REG_168_PHASE_RUN_DIR_ISOLATION=BLOCKED","REG_014_GITEA_VERSION_AUTHENTICATION=BLOCKED","REG_015_GITEA_OWNER_PERMISSION=BLOCKED","ROOT_CAUSE=UNEXPECTED_PHASE_ERROR","ROOT_CAUSE_COUNT=1","DETAIL=line:43 rc:142","RUN_DIR=/var/lib/homelab-admin/runs/gitea-machine-identity-controlled-migration-v4/20260730T193425Z-2497675-dry-run","RUN_RC=142"],"stderr_bytes":0,"stderr_sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","stdout_bytes":1002,"stdout_sha256":"5abdd5abc86a3b54da0974d81881880831cc3a1b90a8a4baf487689cc056e136"},{"duration_seconds":10.376,"phase":"dry-run-retry-60s","rc":142,"safe_stderr":[],"safe_stdout":["LINT_STATUS=OK","TASK_ID=gitea-machine-identity-controlled-migration-v4","POLICY_ID=homelab-admin-guardrails-v1.2","RULES_CHECKED=14","SOURCE_FILES_CHECKED=11","GITEA_MACHINE_IDENTITY_MIGRATION_V3_TESTS=OK","REG_157_PREFLIGHT_GITEA_CLI=BLOCKED","REG_158_AGGREGATE_SSH_TIMEOUT_UNCLASSIFIED=BLOCKED","REG_159_BOOTSTRAP_ADMINISTRATOR=BLOCKED","REG_162_LEGACY_REPO_ADMIN_REQUIRED=BLOCKED","REG_163_REPOSITORY_ONLY_SCOPE_REQUIRED=BLOCKED","REG_164_USER_SCOPE_ACCESS=BLOCKED","REG_165_TASK_OWNED_REMOTE_CLEANUP=BLOCKED","REG_166_REPOSITORY_SPECIFIC_HELPER_REQUIRED=BLOCKED","REG_167_PROTECTED_WORKTREE_PUSH_DISABLED=BLOCKED","REG_168_PHASE_RUN_DIR_ISOLATION=BLOCKED","REG_014_GITEA_VERSION_AUTHENTICATION=BLOCKED","REG_015_GITEA_OWNER_PERMISSION=BLOCKED","ROOT_CAUSE=UNEXPECTED_PHASE_ERROR","ROOT_CAUSE_COUNT=1","DETAIL=line:43 rc:142","RUN_DIR=/var/lib/homelab-admin/runs/gitea-machine-identity-controlled-migration-v4/20260730T193436Z-2497880-dry-run","RUN_RC=142"],"stderr_bytes":0,"stderr_sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","stdout_bytes":1002,"stdout_sha256":"20511a6ce19e3f8359c9722c78115ed98ee1687329ef3c772409933f1148dbe3"}],"rc":1,"rollback_restored":true,"rollback_started":true,"schema":1,"seal_started":false,"secrets_included":false,"status":"FAIL","wrapper_recovery_state_retained":false}
 
 OUTPUT_END
 CHAT_OUTPUT_END