diff --git a/runtime/history/HOMEPAGE-NEWFILYA-PUBLIC-TLS-READ-ONLY-PLAN-FIX2-V11-20260804T094000Z.json b/runtime/history/HOMEPAGE-NEWFILYA-PUBLIC-TLS-READ-ONLY-PLAN-FIX2-V11-20260804T094000Z.json
new file mode 100644
index 0000000..0b7ae63
--- /dev/null
+++ b/runtime/history/HOMEPAGE-NEWFILYA-PUBLIC-TLS-READ-ONLY-PLAN-FIX2-V11-20260804T094000Z.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": 1,
+  "channel": "homelab-runtime",
+  "command_id": "HOMEPAGE-NEWFILYA-PUBLIC-TLS-READ-ONLY-PLAN-FIX2-V11-20260804T094000Z",
+  "status": "FAIL",
+  "rc": 1,
+  "host": "pve01",
+  "mode": "verify",
+  "component": "homepage-newfilya-public-tls-read-only-plan-fix2-v11",
+  "started_at_utc": "2026-08-04T09:34:11Z",
+  "finished_at_utc": "2026-08-04T09:34:15Z",
+  "reference_register_checked": true,
+  "reference_sha256": "5763f2f8edc75fcf6f3951f8c95896d1cc112ceccb6cf5b64a383f540a4deb8e",
+  "error_register_checked": true,
+  "error_register_sha256": "24934a2c7fa5c26f6e828583c4aefac7f143b40c0171736ed7571e617d55ab83",
+  "command_sha256": "b181fddb8f08dc98c269c3cbdd9dac57d6391f4587cb02bc2e3c8d7c076515c5",
+  "duplicate_failed_command_blocked": false,
+  "block_reason": null,
+  "execution_started": true,
+  "change_declared": false,
+  "result_contract_valid": true,
+  "result_contract_status": null,
+  "result_contract_error": null,
+  "command_rc": 1,
+  "changes_made": false,
+  "rollback_started": false,
+  "rollback_restored": null,
+  "mutation_outcome": "NO_MUTATION",
+  "sanitized": true,
+  "secrets_included": false,
+  "private_addresses_included": false,
+  "raw_evidence_retained_locally": true,
+  "raw_evidence_sha256": "6d690c1f670fa38abfb8bdef4127cf386c4bf602812e9013ff56875139bdca71",
+  "sanitized_output_sha256": "6d690c1f670fa38abfb8bdef4127cf386c4bf602812e9013ff56875139bdca71",
+  "output_truncated_in_json": false,
+  "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
+  "output": "HOMELAB_RESULT_CONTRACT={\"changes_made\":false,\"command_id\":\"HOMEPAGE-NEWFILYA-PUBLIC-TLS-READ-ONLY-PLAN-FIX2-V11-20260804T094000Z\",\"mutation_outcome\":\"NO_MUTATION\",\"rollback_restored\":null,\"rollback_started\":false,\"status\":\"FAIL\",\"version\":1}\n{\"PLAN_SHA256\":null,\"action\":null,\"blockers\":[\"CERTBOT_ACCOUNT_MISSING\",\"CERTBOT_METADATA_NOT_READY\",\"CERTBOT_NOT_READY\",\"CERTBOT_PERSISTENT_WEBROOT_NOT_SELECTED\",\"CURRENT_SELF_SIGNED_CERTIFICATE_NOT_VALID_NOW\",\"EDGE_EFFECTIVE_ACME_ROUTE_NOT_PROVEN\",\"EDGE_PREFLIGHT_FAILURE_OUTSIDE_ALLOWLIST\",\"EDGE_PRIVATE_KEY_PRIVACY_INVALID\",\"EDGE_ROUTE_PRIVACY_CONTRACT_INVALID\",\"NEWFILYA_EDGE_CERTIFICATE_NOT_IDENTIFIED\",\"NEWFILYA_EDGE_PRIVATE_KEY_MISSING\",\"NEWFILYA_PROXY_ACME_ROUTE_NOT_READY\",\"NEWFILYA_PROXY_ROUTE_NOT_UNIQUE\",\"NEWFILYA_PROXY_ROUTE_RISKY_DIRECTIVES\",\"NEWFILYA_PUBLIC_RESPONSE_INVALID\",\"NEWFILYA_UPSTREAM_NOT_CONFIGURED\",\"NEWFILYA_UPSTREAM_SHAPE_INVALID\",\"NPMPLUS_CONFIG_NOT_READY\",\"NPMPLUS_NOT_HEALTHY\",\"PUBLIC_EDGE_CERTIFICATE_MISMATCH\"],\"body_returned\":false,\"certificate_changed\":false,\"certificate_contents_returned\":false,\"changes_made\":false,\"command_id\":\"HOMEPAGE-NEWFILYA-PUBLIC-TLS-READ-ONLY-PLAN-FIX2-V11-20260804T094000Z\",\"container_restarted\":false,\"control_plane_error\":null,\"desired_state_changed\":false,\"diagnosis\":\"NEWFILYA_PUBLIC_TLS_PLAN_BLOCKED\",\"dns_changed\":false,\"duration_ms\":3164,\"edge\":{\"certbot_account_count\":null,\"certbot_account_path_set_sha256\":null,\"certbot_available\":null,\"certbot_config_metadata_exact\":null,\"certbot_config_stat_sha256\":null,\"certbot_root_kind\":null,\"certbot_selected_webroot\":null,\"certbot_selected_webroot_sha256\":null,\"certbot_strategy\":null,\"certbot_webroot_metadata_exact\":null,\"certificate_config_path_sha256\":null,\"certificate_configured\":null,\"certificate_covers_domain\":null,\"certificate_path_sha256\":null,\"certificate_private_key_read\":null,\"certificate_remaining_seconds_bucket\":null,\"certificate_sha256\":null,\"certificate_valid_now\":null,\"command_audit_count\":14,\"command_audit_output_returned\":false,\"command_audit_stage_set_sha256\":\"fd877d1138be7b704e1309015bd27cfc6388acc0c84a13cd85cf94a1aac0b68a\",\"diagnosis\":\"EDGE_PREFLIGHT_EXCEPTION\",\"domain_match_count\":null,\"effective_nginx_bytes\":null,\"effective_nginx_sha256\":null,\"failed_checks\":[],\"failed_checks_allowlisted\":false,\"failure_evidence\":{\"errno\":null,\"message_bytes\":55,\"message_sha256\":\"e1113f6f16265ce603b8123c8d38d4bb5d395acf458ff0531003ce72605916b5\",\"type\":\"AttributeError\"},\"key_content_read\":null,\"key_exists\":null,\"key_path_sha256\":null,\"nginx_test_rc\":null,\"npmplus_container_id_sha256\":null,\"npmplus_data_mount_exact\":null,\"npmplus_health\":null,\"npmplus_image_sha256\":null,\"npmplus_running\":null,\"npmplus_started_at_sha256\":null,\"ok\":false,\"persistent_acme_http_route_count\":null,\"persistent_acme_http_route_present\":null,\"primary_certificate_path_states\":{},\"primary_certificate_paths_absent\":null,\"private_addresses_included\":false,\"proxy_file_count\":null,\"proxy_tree_sha256\":null,\"route_bytes\":null,\"route_content_returned\":null,\"route_domain_exact\":null,\"route_filename\":null,\"route_persistent_acme_root_count\":null,\"route_private_addresses_returned\":null,\"route_risky_directives\":null,\"route_safe_acme_allow\":null,\"route_sha256\":null,\"secret_files_read\":false,\"secrets_included\":false,\"status\":\"FAIL\",\"upstream_host_configured\":null,\"upstream_host_sha256\":null,\"upstream_port\":null,\"upstream_proxy_pass_present\":null,\"upstream_scheme\":null,\"upstream_style\":null},\"gate\":\"BLOCKED\",\"gitea_changed\":false,\"homepage\":{\"backup_bytes\":12005,\"backup_mode\":\"0o600\",\"backup_sha256\":\"6468974ef09b3d9899bae5df4d8a7fa711d6cf16edda00b116747192277dcb2c\",\"card_count\":65,\"contains_private_dispatch_material\":false,\"failed_checks\":[],\"group_count\":7,\"hbarhub_card_exact\":true,\"homepage_api_sha256\":\"a1ece968406ec5ce5ba02197d5270d1e3ce34da451a69cc3cc5f38b6081ada0d\",\"homepage_api_target_href_counts\":{\"hbarhub.ru\":1,\"newfilya.ru\":1},\"homepage_image_id_sha256\":\"242e6332e372aaffcf7c821cff66dcbc12c42b2cd4ae282db9533b640892ac79\",\"homepage_image_reference_sha256\":\"b0c046cffbc1a48af0e6b240575c63b6f405debba0b2c50fa190616b5ea62808\",\"homepage_mount_exact\":true,\"homepage_restart_count\":0,\"newfilya_card_exact\":true,\"newfilya_monitor_enabled\":false,\"ok\":true,\"secret_file_read\":false,\"secrets_included\":false,\"services_bytes\":12308,\"services_sha256\":\"0b7360dc34b9bd3e25073eae449f3c0c5a6609f7eb9f4bb2feca72b6e04fc928\",\"services_structure_sha256\":\"eff9a7e610218ffdd092d704d2fcfad357db5d3b75ee0cc584c606ae4ee61f82\",\"source_contents_returned\":false,\"status\":\"OK\",\"target_href_counts\":{\"hbarhub.ru\":1,\"newfilya.ru\":1}},\"homepage_changed\":false,\"mutation_outcome\":\"NO_MUTATION\",\"next_stage\":\"NEWFILYA_PUBLIC_TLS_PLAN_FIX\",\"npmplus_reloaded\":false,\"parent_v10_failure_evidence\":{\"capsule_bytes\":91586,\"capsule_sha256\":\"e459b6b04c842ec43e23d44935163c488460d529ee456a14906e4bfb8a5f79c2\",\"changes_made\":false,\"command_id\":\"HOMEPAGE-NEWFILYA-PUBLIC-TLS-READ-ONLY-PLAN-FIX1-V10-20260804T092000Z\",\"command_sha256\":\"eb8cae611596457796446a6f7e06c46315bdbaf5b72d87a9b3371ae67da603b5\",\"diagnosis\":\"NEWFILYA_PUBLIC_TLS_PLAN_BLOCKED\",\"edge_remote_rc\":1,\"edge_remote_stdout_bytes\":4825,\"edge_remote_stdout_sha256\":\"a46985e99ba1160268e81e1f6c920fb294d68491f014d29a084ef9674daae8aa\",\"gate\":\"BLOCKED\",\"mutation_outcome\":\"NO_MUTATION\",\"output_sha256\":\"f03ab62f3c66920f27ac5aa0b8ad278bac481236138ff8167c3ea0bd4c3f410e\",\"public_leaf_certificate_sha256\":\"c14d6f3eda27dcd7e8c8a44c18844f8009b4f23a74ab82d49475f138ddef0b93\",\"rc\":1,\"rollback_restored\":null,\"rollback_started\":false,\"services_sha256\":\"0b7360dc34b9bd3e25073eae449f3c0c5a6609f7eb9f4bb2feca72b6e04fc928\",\"status\":\"FAIL\",\"tls_state\":\"SELF_SIGNED\"},\"parent_v8_evidence\":{\"capsule_bytes\":119374,\"capsule_sha256\":\"e5689bf4a8cfd99f2b0b7427936018d7c4f82ef535ca3b2046f87311fd829418\",\"card_count\":65,\"changes_made\":true,\"command_id\":\"HOMEPAGE-ADD-NEWFILYA-HBARHUB-ATOMIC-LIVE-APPLY-INDENT-FIX1-V8-20260804T083000Z\",\"gate\":\"APPLIED_AND_VERIFIED\",\"group_count\":7,\"hbarhub_monitor_enabled\":true,\"mutation_outcome\":\"MUTATED\",\"newfilya_monitor_enabled\":false,\"output_sha256\":\"0b8fccd5235c8a460a5c477a1747b03299c0f908310f029e728afe9cd6c2e706\",\"rc\":0,\"rollback_restored\":null,\"rollback_started\":false,\"runner_command_sha256\":\"a253ded2c86ff0445c7317080bc94c7138dc71ad20bd7bf9452e161aff8efbb1\",\"services_bytes\":12308,\"services_sha256\":\"0b7360dc34b9bd3e25073eae449f3c0c5a6609f7eb9f4bb2feca72b6e04fc928\",\"services_structure_sha256\":\"eff9a7e610218ffdd092d704d2fcfad357db5d3b75ee0cc584c606ae4ee61f82\",\"status\":\"OK\",\"target_href_counts\":{\"hbarhub.ru\":1,\"newfilya.ru\":1}},\"parent_v9_failure_evidence\":{\"capsule_bytes\":90705,\"capsule_sha256\":\"8e3918d06c8dda6e27c54836d71f1bcfed9b51bb5b006ae8525815cd287841e7\",\"changes_made\":false,\"command_id\":\"HOMEPAGE-NEWFILYA-PUBLIC-TLS-READ-ONLY-PLAN-V9-20260804T090000Z\",\"command_sha256\":\"214195c7f7e365f8d2d20e31115a8d17b8fded41ef72c9c8a5d6e1f478d98059\",\"diagnosis\":\"CONTROL_PLANE_EXCEPTION\",\"failure_type\":\"TypeError\",\"mutation_outcome\":\"NO_MUTATION\",\"output_sha256\":\"8e9abfc55dc183e11da09fa973e9b1cd121b991eab0294aa10471911bf7c6a16\",\"rc\":1,\"rollback_restored\":null,\"rollback_started\":false,\"status\":\"FAIL\"},\"plan\":{\"action\":null,\"apply_scope\":{\"certificate_domain_count\":1,\"certificate_strategy\":\"PRIMARY_NAME_IF_ABSENT_ELSE_NEW_ISOLATED_LINEAGE\",\"desired_state_changes\":false,\"dns_changes\":false,\"edge_vm_restart_forbidden\":true,\"first_mutation\":\"HOMEPAGE_MONITOR_ONLY\",\"gitea_changes\":false,\"homepage_restart_forbidden\":true,\"homepage_site_monitor_lines_added_eventually\":1,\"nginx_config_test_required\":true,\"nginx_reload_allowed\":false,\"npmplus_restart_forbidden\":true,\"other_homepage_cards_changed\":0,\"private_addresses_in_output\":false,\"private_keys_read\":false,\"proxy_directives_allowed\":[\"ssl_certificate\",\"ssl_certificate_key\"],\"selected_proxy_file_count\":1},\"domain\":\"newfilya.ru\",\"edge_lock\":{\"certbot_account_count\":null,\"certbot_account_path_set_sha256\":null,\"certbot_available\":null,\"certbot_config_metadata_exact\":null,\"certbot_config_stat_sha256\":null,\"certbot_root_kind\":null,\"certbot_selected_webroot\":null,\"certbot_selected_webroot_sha256\":null,\"certbot_strategy\":null,\"certbot_webroot_metadata_exact\":null,\"certificate_config_path_sha256\":null,\"certificate_configured\":null,\"certificate_covers_domain\":null,\"certificate_path_sha256\":null,\"certificate_private_key_read\":null,\"certificate_remaining_seconds_bucket\":null,\"certificate_sha256\":null,\"certificate_valid_now\":null,\"command_audit_count\":14,\"command_audit_output_returned\":false,\"command_audit_stage_set_sha256\":\"fd877d1138be7b704e1309015bd27cfc6388acc0c84a13cd85cf94a1aac0b68a\",\"diagnosis\":\"EDGE_PREFLIGHT_EXCEPTION\",\"domain_match_count\":null,\"effective_nginx_bytes\":null,\"effective_nginx_sha256\":null,\"failed_checks\":[],\"failed_checks_allowlisted\":false,\"failure_evidence\":{\"errno\":null,\"message_bytes\":55,\"message_sha256\":\"e1113f6f16265ce603b8123c8d38d4bb5d395acf458ff0531003ce72605916b5\",\"type\":\"AttributeError\"},\"key_content_read\":null,\"key_exists\":null,\"key_path_sha256\":null,\"nginx_test_rc\":null,\"npmplus_container_id_sha256\":null,\"npmplus_data_mount_exact\":null,\"npmplus_health\":null,\"npmplus_image_sha256\":null,\"npmplus_running\":null,\"npmplus_started_at_sha256\":null,\"ok\":false,\"persistent_acme_http_route_count\":null,\"persistent_acme_http_route_present\":null,\"primary_certificate_path_states\":{},\"primary_certificate_paths_absent\":null,\"private_addresses_included\":false,\"proxy_file_count\":null,\"proxy_tree_sha256\":null,\"route_bytes\":null,\"route_content_returned\":null,\"route_domain_exact\":null,\"route_filename\":null,\"route_persistent_acme_root_count\":null,\"route_private_addresses_returned\":null,\"route_risky_directives\":null,\"route_safe_acme_allow\":null,\"route_sha256\":null,\"secret_files_read\":false,\"secrets_included\":false,\"status\":\"FAIL\",\"upstream_host_configured\":null,\"upstream_host_sha256\":null,\"upstream_port\":null,\"upstream_proxy_pass_present\":null,\"upstream_scheme\":null,\"upstream_style\":null},\"homepage_lock\":{\"backup_bytes\":12005,\"backup_mode\":\"0o600\",\"backup_sha256\":\"6468974ef09b3d9899bae5df4d8a7fa711d6cf16edda00b116747192277dcb2c\",\"card_count\":65,\"contains_private_dispatch_material\":false,\"failed_checks\":[],\"group_count\":7,\"hbarhub_card_exact\":true,\"homepage_api_sha256\":\"a1ece968406ec5ce5ba02197d5270d1e3ce34da451a69cc3cc5f38b6081ada0d\",\"homepage_api_target_href_counts\":{\"hbarhub.ru\":1,\"newfilya.ru\":1},\"homepage_image_id_sha256\":\"242e6332e372aaffcf7c821cff66dcbc12c42b2cd4ae282db9533b640892ac79\",\"homepage_image_reference_sha256\":\"b0c046cffbc1a48af0e6b240575c63b6f405debba0b2c50fa190616b5ea62808\",\"homepage_mount_exact\":true,\"homepage_restart_count\":0,\"newfilya_card_exact\":true,\"newfilya_monitor_enabled\":false,\"ok\":true,\"secret_file_read\":false,\"secrets_included\":false,\"services_bytes\":12308,\"services_sha256\":\"0b7360dc34b9bd3e25073eae449f3c0c5a6609f7eb9f4bb2feca72b6e04fc928\",\"services_structure_sha256\":\"eff9a7e610218ffdd092d704d2fcfad357db5d3b75ee0cc584c606ae4ee61f82\",\"source_contents_returned\":false,\"status\":\"OK\",\"target_href_counts\":{\"hbarhub.ru\":1,\"newfilya.ru\":1}},\"next_stage\":\"NEWFILYA_PUBLIC_TLS_PLAN_FIX\",\"operation\":\"NEWFILYA_PUBLIC_TLS_THEN_HOMEPAGE_MONITOR\",\"parent_v8_evidence\":{\"capsule_bytes\":119374,\"capsule_sha256\":\"e5689bf4a8cfd99f2b0b7427936018d7c4f82ef535ca3b2046f87311fd829418\",\"card_count\":65,\"changes_made\":true,\"command_id\":\"HOMEPAGE-ADD-NEWFILYA-HBARHUB-ATOMIC-LIVE-APPLY-INDENT-FIX1-V8-20260804T083000Z\",\"gate\":\"APPLIED_AND_VERIFIED\",\"group_count\":7,\"hbarhub_monitor_enabled\":true,\"mutation_outcome\":\"MUTATED\",\"newfilya_monitor_enabled\":false,\"output_sha256\":\"0b8fccd5235c8a460a5c477a1747b03299c0f908310f029e728afe9cd6c2e706\",\"rc\":0,\"rollback_restored\":null,\"rollback_started\":false,\"runner_command_sha256\":\"a253ded2c86ff0445c7317080bc94c7138dc71ad20bd7bf9452e161aff8efbb1\",\"services_bytes\":12308,\"services_sha256\":\"0b7360dc34b9bd3e25073eae449f3c0c5a6609f7eb9f4bb2feca72b6e04fc928\",\"services_structure_sha256\":\"eff9a7e610218ffdd092d704d2fcfad357db5d3b75ee0cc584c606ae4ee61f82\",\"status\":\"OK\",\"target_href_counts\":{\"hbarhub.ru\":1,\"newfilya.ru\":1}},\"predecessor_v10_failure_evidence\":{\"capsule_bytes\":91586,\"capsule_sha256\":\"e459b6b04c842ec43e23d44935163c488460d529ee456a14906e4bfb8a5f79c2\",\"changes_made\":false,\"command_id\":\"HOMEPAGE-NEWFILYA-PUBLIC-TLS-READ-ONLY-PLAN-FIX1-V10-20260804T092000Z\",\"command_sha256\":\"eb8cae611596457796446a6f7e06c46315bdbaf5b72d87a9b3371ae67da603b5\",\"diagnosis\":\"NEWFILYA_PUBLIC_TLS_PLAN_BLOCKED\",\"edge_remote_rc\":1,\"edge_remote_stdout_bytes\":4825,\"edge_remote_stdout_sha256\":\"a46985e99ba1160268e81e1f6c920fb294d68491f014d29a084ef9674daae8aa\",\"gate\":\"BLOCKED\",\"mutation_outcome\":\"NO_MUTATION\",\"output_sha256\":\"f03ab62f3c66920f27ac5aa0b8ad278bac481236138ff8167c3ea0bd4c3f410e\",\"public_leaf_certificate_sha256\":\"c14d6f3eda27dcd7e8c8a44c18844f8009b4f23a74ab82d49475f138ddef0b93\",\"rc\":1,\"rollback_restored\":null,\"rollback_started\":false,\"services_sha256\":\"0b7360dc34b9bd3e25073eae449f3c0c5a6609f7eb9f4bb2feca72b6e04fc928\",\"status\":\"FAIL\",\"tls_state\":\"SELF_SIGNED\"},\"predecessor_v9_failure_evidence\":{\"capsule_bytes\":90705,\"capsule_sha256\":\"8e3918d06c8dda6e27c54836d71f1bcfed9b51bb5b006ae8525815cd287841e7\",\"changes_made\":false,\"command_id\":\"HOMEPAGE-NEWFILYA-PUBLIC-TLS-READ-ONLY-PLAN-V9-20260804T090000Z\",\"command_sha256\":\"214195c7f7e365f8d2d20e31115a8d17b8fded41ef72c9c8a5d6e1f478d98059\",\"diagnosis\":\"CONTROL_PLANE_EXCEPTION\",\"failure_type\":\"TypeError\",\"mutation_outcome\":\"NO_MUTATION\",\"output_sha256\":\"8e9abfc55dc183e11da09fa973e9b1cd121b991eab0294aa10471911bf7c6a16\",\"rc\":1,\"rollback_restored\":null,\"rollback_started\":false,\"status\":\"FAIL\"},\"public_lock\":{\"acme_http\":{\"completed\":true,\"final_hop\":{\"body_bytes\":124,\"body_sha256\":\"8cdc5c9588e8cc315d89a7c73f1bea4d41f8d68ae165756df0ec4a7db6a49892\",\"certificate_validation_disabled\":true,\"completed\":true,\"header_values_returned\":false,\"location_present\":false,\"status\":404},\"first_hop\":{\"body_bytes\":140,\"body_sha256\":\"367cbd2bd4bb3ccdbff9b81ad94e4c1d9c66ee80e9df3ffcd7080f2000cbac6a\",\"completed\":true,\"header_values_returned\":false,\"location_matches_expected_https\":true,\"location_present\":true,\"status\":301},\"header_values_returned\":false,\"path_sha256\":\"ebb00f520143e8a70afa9836f017f0f2739e4b125abe4dac843212401e36a6b8\",\"redirect_count\":1,\"route_model\":\"HTTP_TO_HTTPS_404\",\"route_proven\":true},\"addresses_returned\":false,\"anchor_dns\":{\"address_set_sha256\":\"c76b6b888b15b83623f3fc36fe6617dc24550f6b09b0d8f73c92ea22016e3a13\",\"addresses_returned\":false,\"public_target_count\":1,\"record_count\":1,\"resolved\":true},\"body_returned\":false,\"certificate_contents_returned\":false,\"dns\":{\"address_set_sha256\":\"c76b6b888b15b83623f3fc36fe6617dc24550f6b09b0d8f73c92ea22016e3a13\",\"addresses_returned\":false,\"families\":[\"IPv4\"],\"public_target_count\":1,\"record_count\":1,\"rejected_non_public_count\":0,\"resolved\":true},\"dns_matches_hbarhub_anchor\":true,\"http\":{\"bad_gateway\":false,\"body_bytes\":140,\"body_sha256\":\"367cbd2bd4bb3ccdbff9b81ad94e4c1d9c66ee80e9df3ffcd7080f2000cbac6a\",\"completed\":true,\"connection_mode\":\"PINNED_GLOBAL_TARGET\",\"header_values_returned\":false,\"npmplus_default\":false,\"redirects_to_expected_https\":true,\"status\":301},\"https_unverified\":{\"bad_gateway\":false,\"body_bytes\":2056,\"body_returned\":false,\"body_sha256\":\"808dfeea0cf787d85e03645e62ab18b97ab8138924420966413edcfe22ef4879\",\"certificate_validation_disabled\":true,\"completed\":true,\"connection_mode\":\"PINNED_GLOBAL_TARGET_WITH_SNI\",\"leaf_certificate_sha256\":\"c14d6f3eda27dcd7e8c8a44c18844f8009b4f23a74ab82d49475f138ddef0b93\",\"npmplus_default\":true,\"status\":200},\"tcp_443\":{\"addresses_returned\":false,\"attempt_count\":1,\"error_types\":{},\"reachable\":true,\"success_count\":1},\"tls_443\":{\"addresses_returned\":false,\"attempt_count\":1,\"certificate_contents_returned\":false,\"unverified\":{\"certificate_contents_returned\":false,\"certificate_validation_disabled\":true,\"completed\":true,\"error_types\":{},\"leaf_certificate_count\":1,\"leaf_certificate_sha256\":\"c14d6f3eda27dcd7e8c8a44c18844f8009b4f23a74ab82d49475f138ddef0b93\",\"leaf_set_sha256\":\"620f5c3147455134d92b987f4f0c17c97663931b52966c15d089b43e1e452c1b\",\"protocols\":[\"TLSv1.3\"],\"success_count\":1},\"verified\":false,\"verified_leaf_certificate_sha256\":null,\"verified_protocol\":null,\"verified_success_count\":0,\"verify_codes\":{\"18\":1}}},\"rollback_requirements\":[\"backup selected proxy config before TLS path swap\",\"remove only newly created certbot lineage when apply fails\",\"restore proxy config byte-for-byte and validate nginx before reload\",\"enable Homepage monitoring only after trusted public TLS is verified\"],\"schema\":1},\"private_addresses_included\":false,\"private_keys_read\":false,\"production_site_changed\":false,\"public\":{\"acme_http\":{\"completed\":true,\"final_hop\":{\"body_bytes\":124,\"body_sha256\":\"8cdc5c9588e8cc315d89a7c73f1bea4d41f8d68ae165756df0ec4a7db6a49892\",\"certificate_validation_disabled\":true,\"completed\":true,\"header_values_returned\":false,\"location_present\":false,\"status\":404},\"first_hop\":{\"body_bytes\":140,\"body_sha256\":\"367cbd2bd4bb3ccdbff9b81ad94e4c1d9c66ee80e9df3ffcd7080f2000cbac6a\",\"completed\":true,\"header_values_returned\":false,\"location_matches_expected_https\":true,\"location_present\":true,\"status\":301},\"header_values_returned\":false,\"path_sha256\":\"ebb00f520143e8a70afa9836f017f0f2739e4b125abe4dac843212401e36a6b8\",\"redirect_count\":1,\"route_model\":\"HTTP_TO_HTTPS_404\",\"route_proven\":true},\"addresses_returned\":false,\"anchor_dns\":{\"address_set_sha256\":\"c76b6b888b15b83623f3fc36fe6617dc24550f6b09b0d8f73c92ea22016e3a13\",\"addresses_returned\":false,\"public_target_count\":1,\"record_count\":1,\"resolved\":true},\"body_returned\":false,\"certificate_contents_returned\":false,\"dns\":{\"address_set_sha256\":\"c76b6b888b15b83623f3fc36fe6617dc24550f6b09b0d8f73c92ea22016e3a13\",\"addresses_returned\":false,\"families\":[\"IPv4\"],\"public_target_count\":1,\"record_count\":1,\"rejected_non_public_count\":0,\"resolved\":true},\"dns_matches_hbarhub_anchor\":true,\"http\":{\"bad_gateway\":false,\"body_bytes\":140,\"body_sha256\":\"367cbd2bd4bb3ccdbff9b81ad94e4c1d9c66ee80e9df3ffcd7080f2000cbac6a\",\"completed\":true,\"connection_mode\":\"PINNED_GLOBAL_TARGET\",\"header_values_returned\":false,\"npmplus_default\":false,\"redirects_to_expected_https\":true,\"status\":301},\"https_unverified\":{\"bad_gateway\":false,\"body_bytes\":2056,\"body_returned\":false,\"body_sha256\":\"808dfeea0cf787d85e03645e62ab18b97ab8138924420966413edcfe22ef4879\",\"certificate_validation_disabled\":true,\"completed\":true,\"connection_mode\":\"PINNED_GLOBAL_TARGET_WITH_SNI\",\"leaf_certificate_sha256\":\"c14d6f3eda27dcd7e8c8a44c18844f8009b4f23a74ab82d49475f138ddef0b93\",\"npmplus_default\":true,\"status\":200},\"tcp_443\":{\"addresses_returned\":false,\"attempt_count\":1,\"error_types\":{},\"reachable\":true,\"success_count\":1},\"tls_443\":{\"addresses_returned\":false,\"attempt_count\":1,\"certificate_contents_returned\":false,\"unverified\":{\"certificate_contents_returned\":false,\"certificate_validation_disabled\":true,\"completed\":true,\"error_types\":{},\"leaf_certificate_count\":1,\"leaf_certificate_sha256\":\"c14d6f3eda27dcd7e8c8a44c18844f8009b4f23a74ab82d49475f138ddef0b93\",\"leaf_set_sha256\":\"620f5c3147455134d92b987f4f0c17c97663931b52966c15d089b43e1e452c1b\",\"protocols\":[\"TLSv1.3\"],\"success_count\":1},\"verified\":false,\"verified_leaf_certificate_sha256\":null,\"verified_protocol\":null,\"verified_success_count\":0,\"verify_codes\":{\"18\":1}}},\"public_proxy_changed\":false,\"rc\":1,\"read_only\":true,\"ready_for_apply\":false,\"rollback_restored\":null,\"rollback_started\":false,\"sanitized\":true,\"schema\":1,\"secret_files_read\":false,\"secrets_included\":false,\"source_contents_returned\":false,\"status\":\"FAIL\",\"tls_state\":\"SELF_SIGNED\",\"transport\":{\"core\":{\"config_view\":\"service-view\",\"mode\":\"DIRECT_QGA\",\"private_addresses_returned\":false,\"qga_step_count\":6,\"qga_step_set_sha256\":\"2b45c8caf92db65327124be11f433d366a3a1aeb2a519cc98812a6d73bfe0d58\",\"remote_rc\":0,\"remote_stdout_bytes\":2806,\"remote_stdout_sha256\":\"3f9ebf7e463b2268c06a5f467fc6307d749817f737f1918934748c54983f0bf9\",\"socket_view\":\"service-view\",\"vm_name\":\"core-apps\",\"vmid\":170},\"edge\":{\"config_view\":\"service-view\",\"mode\":\"STRICT_SSH_TO_OWNING_NODE_THEN_DIRECT_QGA\",\"node\":\"pve03\",\"private_addresses_returned\":false,\"qga_step_count\":10,\"qga_step_set_sha256\":\"a45bdf0fa92e1fcd90726974350deb0e9a26c4b65e3ae7719c8615919e0bbde6\",\"remote_rc\":1,\"remote_stdout_bytes\":4825,\"remote_stdout_sha256\":\"0f25798ade036d428a9eb8fe98687d511de833d44eee7198b0f972b02daf385b\",\"socket_view\":\"service-view\",\"ssh_rc\":0,\"vm_name\":\"edge-vm\",\"vmid\":130}}}\n"
+}
diff --git a/runtime/history/HOMEPAGE-NEWFILYA-PUBLIC-TLS-READ-ONLY-PLAN-FIX2-V11-20260804T094000Z.txt b/runtime/history/HOMEPAGE-NEWFILYA-PUBLIC-TLS-READ-ONLY-PLAN-FIX2-V11-20260804T094000Z.txt
new file mode 100644
index 0000000..70413b8
--- /dev/null
+++ b/runtime/history/HOMEPAGE-NEWFILYA-PUBLIC-TLS-READ-ONLY-PLAN-FIX2-V11-20260804T094000Z.txt
@@ -0,0 +1,34 @@
+CHAT_OUTPUT_BEGIN
+COMMAND_ID=HOMEPAGE-NEWFILYA-PUBLIC-TLS-READ-ONLY-PLAN-FIX2-V11-20260804T094000Z
+STATUS=FAIL
+RC=1
+HOST=pve01
+MODE=verify
+COMPONENT=homepage-newfilya-public-tls-read-only-plan-fix2-v11
+REFERENCE_REGISTER_CHECK=OK
+REFERENCE_SHA256=5763f2f8edc75fcf6f3951f8c95896d1cc112ceccb6cf5b64a383f540a4deb8e
+ERROR_REGISTER_CHECK=OK
+ERROR_REGISTER_SHA256=24934a2c7fa5c26f6e828583c4aefac7f143b40c0171736ed7571e617d55ab83
+COMMAND_SHA256=b181fddb8f08dc98c269c3cbdd9dac57d6391f4587cb02bc2e3c8d7c076515c5
+DUPLICATE_FAILED_COMMAND_BLOCKED=false
+EXECUTION_STARTED=true
+CHANGE_DECLARED=false
+RESULT_CONTRACT_VALID=true
+RESULT_CONTRACT_STATUS=NOT_APPLICABLE
+RESULT_CONTRACT_ERROR=NONE
+COMMAND_RC=1
+CHANGES_MADE=false
+ROLLBACK_STARTED=false
+ROLLBACK_RESTORED=null
+MUTATION_OUTCOME=NO_MUTATION
+SANITIZED=yes
+SECRETS_INCLUDED=no
+PRIVATE_ADDRESSES_INCLUDED=no
+RAW_EVIDENCE_SHA256=6d690c1f670fa38abfb8bdef4127cf386c4bf602812e9013ff56875139bdca71
+SANITIZED_OUTPUT_SHA256=6d690c1f670fa38abfb8bdef4127cf386c4bf602812e9013ff56875139bdca71
+OUTPUT_BEGIN
+HOMELAB_RESULT_CONTRACT={"changes_made":false,"command_id":"HOMEPAGE-NEWFILYA-PUBLIC-TLS-READ-ONLY-PLAN-FIX2-V11-20260804T094000Z","mutation_outcome":"NO_MUTATION","rollback_restored":null,"rollback_started":false,"status":"FAIL","version":1}
+{"PLAN_SHA256":null,"action":null,"blockers":["CERTBOT_ACCOUNT_MISSING","CERTBOT_METADATA_NOT_READY","CERTBOT_NOT_READY","CERTBOT_PERSISTENT_WEBROOT_NOT_SELECTED","CURRENT_SELF_SIGNED_CERTIFICATE_NOT_VALID_NOW","EDGE_EFFECTIVE_ACME_ROUTE_NOT_PROVEN","EDGE_PREFLIGHT_FAILURE_OUTSIDE_ALLOWLIST","EDGE_PRIVATE_KEY_PRIVACY_INVALID","EDGE_ROUTE_PRIVACY_CONTRACT_INVALID","NEWFILYA_EDGE_CERTIFICATE_NOT_IDENTIFIED","NEWFILYA_EDGE_PRIVATE_KEY_MISSING","NEWFILYA_PROXY_ACME_ROUTE_NOT_READY","NEWFILYA_PROXY_ROUTE_NOT_UNIQUE","NEWFILYA_PROXY_ROUTE_RISKY_DIRECTIVES","NEWFILYA_PUBLIC_RESPONSE_INVALID","NEWFILYA_UPSTREAM_NOT_CONFIGURED","NEWFILYA_UPSTREAM_SHAPE_INVALID","NPMPLUS_CONFIG_NOT_READY","NPMPLUS_NOT_HEALTHY","PUBLIC_EDGE_CERTIFICATE_MISMATCH"],"body_returned":false,"certificate_changed":false,"certificate_contents_returned":false,"changes_made":false,"command_id":"HOMEPAGE-NEWFILYA-PUBLIC-TLS-READ-ONLY-PLAN-FIX2-V11-20260804T094000Z","container_restarted":false,"control_plane_error":null,"desired_state_changed":false,"diagnosis":"NEWFILYA_PUBLIC_TLS_PLAN_BLOCKED","dns_changed":false,"duration_ms":3164,"edge":{"certbot_account_count":null,"certbot_account_path_set_sha256":null,"certbot_available":null,"certbot_config_metadata_exact":null,"certbot_config_stat_sha256":null,"certbot_root_kind":null,"certbot_selected_webroot":null,"certbot_selected_webroot_sha256":null,"certbot_strategy":null,"certbot_webroot_metadata_exact":null,"certificate_config_path_sha256":null,"certificate_configured":null,"certificate_covers_domain":null,"certificate_path_sha256":null,"certificate_private_key_read":null,"certificate_remaining_seconds_bucket":null,"certificate_sha256":null,"certificate_valid_now":null,"command_audit_count":14,"command_audit_output_returned":false,"command_audit_stage_set_sha256":"fd877d1138be7b704e1309015bd27cfc6388acc0c84a13cd85cf94a1aac0b68a","diagnosis":"EDGE_PREFLIGHT_EXCEPTION","domain_match_count":null,"effective_nginx_bytes":null,"effective_nginx_sha256":null,"failed_checks":[],"failed_checks_allowlisted":false,"failure_evidence":{"errno":null,"message_bytes":55,"message_sha256":"e1113f6f16265ce603b8123c8d38d4bb5d395acf458ff0531003ce72605916b5","type":"AttributeError"},"key_content_read":null,"key_exists":null,"key_path_sha256":null,"nginx_test_rc":null,"npmplus_container_id_sha256":null,"npmplus_data_mount_exact":null,"npmplus_health":null,"npmplus_image_sha256":null,"npmplus_running":null,"npmplus_started_at_sha256":null,"ok":false,"persistent_acme_http_route_count":null,"persistent_acme_http_route_present":null,"primary_certificate_path_states":{},"primary_certificate_paths_absent":null,"private_addresses_included":false,"proxy_file_count":null,"proxy_tree_sha256":null,"route_bytes":null,"route_content_returned":null,"route_domain_exact":null,"route_filename":null,"route_persistent_acme_root_count":null,"route_private_addresses_returned":null,"route_risky_directives":null,"route_safe_acme_allow":null,"route_sha256":null,"secret_files_read":false,"secrets_included":false,"status":"FAIL","upstream_host_configured":null,"upstream_host_sha256":null,"upstream_port":null,"upstream_proxy_pass_present":null,"upstream_scheme":null,"upstream_style":null},"gate":"BLOCKED","gitea_changed":false,"homepage":{"backup_bytes":12005,"backup_mode":"0o600","backup_sha256":"6468974ef09b3d9899bae5df4d8a7fa711d6cf16edda00b116747192277dcb2c","card_count":65,"contains_private_dispatch_material":false,"failed_checks":[],"group_count":7,"hbarhub_card_exact":true,"homepage_api_sha256":"a1ece968406ec5ce5ba02197d5270d1e3ce34da451a69cc3cc5f38b6081ada0d","homepage_api_target_href_counts":{"hbarhub.ru":1,"newfilya.ru":1},"homepage_image_id_sha256":"242e6332e372aaffcf7c821cff66dcbc12c42b2cd4ae282db9533b640892ac79","homepage_image_reference_sha256":"b0c046cffbc1a48af0e6b240575c63b6f405debba0b2c50fa190616b5ea62808","homepage_mount_exact":true,"homepage_restart_count":0,"newfilya_card_exact":true,"newfilya_monitor_enabled":false,"ok":true,"secret_file_read":false,"secrets_included":false,"services_bytes":12308,"services_sha256":"0b7360dc34b9bd3e25073eae449f3c0c5a6609f7eb9f4bb2feca72b6e04fc928","services_structure_sha256":"eff9a7e610218ffdd092d704d2fcfad357db5d3b75ee0cc584c606ae4ee61f82","source_contents_returned":false,"status":"OK","target_href_counts":{"hbarhub.ru":1,"newfilya.ru":1}},"homepage_changed":false,"mutation_outcome":"NO_MUTATION","next_stage":"NEWFILYA_PUBLIC_TLS_PLAN_FIX","npmplus_reloaded":false,"parent_v10_failure_evidence":{"capsule_bytes":91586,"capsule_sha256":"e459b6b04c842ec43e23d44935163c488460d529ee456a14906e4bfb8a5f79c2","changes_made":false,"command_id":"HOMEPAGE-NEWFILYA-PUBLIC-TLS-READ-ONLY-PLAN-FIX1-V10-20260804T092000Z","command_sha256":"eb8cae611596457796446a6f7e06c46315bdbaf5b72d87a9b3371ae67da603b5","diagnosis":"NEWFILYA_PUBLIC_TLS_PLAN_BLOCKED","edge_remote_rc":1,"edge_remote_stdout_bytes":4825,"edge_remote_stdout_sha256":"a46985e99ba1160268e81e1f6c920fb294d68491f014d29a084ef9674daae8aa","gate":"BLOCKED","mutation_outcome":"NO_MUTATION","output_sha256":"f03ab62f3c66920f27ac5aa0b8ad278bac481236138ff8167c3ea0bd4c3f410e","public_leaf_certificate_sha256":"c14d6f3eda27dcd7e8c8a44c18844f8009b4f23a74ab82d49475f138ddef0b93","rc":1,"rollback_restored":null,"rollback_started":false,"services_sha256":"0b7360dc34b9bd3e25073eae449f3c0c5a6609f7eb9f4bb2feca72b6e04fc928","status":"FAIL","tls_state":"SELF_SIGNED"},"parent_v8_evidence":{"capsule_bytes":119374,"capsule_sha256":"e5689bf4a8cfd99f2b0b7427936018d7c4f82ef535ca3b2046f87311fd829418","card_count":65,"changes_made":true,"command_id":"HOMEPAGE-ADD-NEWFILYA-HBARHUB-ATOMIC-LIVE-APPLY-INDENT-FIX1-V8-20260804T083000Z","gate":"APPLIED_AND_VERIFIED","group_count":7,"hbarhub_monitor_enabled":true,"mutation_outcome":"MUTATED","newfilya_monitor_enabled":false,"output_sha256":"0b8fccd5235c8a460a5c477a1747b03299c0f908310f029e728afe9cd6c2e706","rc":0,"rollback_restored":null,"rollback_started":false,"runner_command_sha256":"a253ded2c86ff0445c7317080bc94c7138dc71ad20bd7bf9452e161aff8efbb1","services_bytes":12308,"services_sha256":"0b7360dc34b9bd3e25073eae449f3c0c5a6609f7eb9f4bb2feca72b6e04fc928","services_structure_sha256":"eff9a7e610218ffdd092d704d2fcfad357db5d3b75ee0cc584c606ae4ee61f82","status":"OK","target_href_counts":{"hbarhub.ru":1,"newfilya.ru":1}},"parent_v9_failure_evidence":{"capsule_bytes":90705,"capsule_sha256":"8e3918d06c8dda6e27c54836d71f1bcfed9b51bb5b006ae8525815cd287841e7","changes_made":false,"command_id":"HOMEPAGE-NEWFILYA-PUBLIC-TLS-READ-ONLY-PLAN-V9-20260804T090000Z","command_sha256":"214195c7f7e365f8d2d20e31115a8d17b8fded41ef72c9c8a5d6e1f478d98059","diagnosis":"CONTROL_PLANE_EXCEPTION","failure_type":"TypeError","mutation_outcome":"NO_MUTATION","output_sha256":"8e9abfc55dc183e11da09fa973e9b1cd121b991eab0294aa10471911bf7c6a16","rc":1,"rollback_restored":null,"rollback_started":false,"status":"FAIL"},"plan":{"action":null,"apply_scope":{"certificate_domain_count":1,"certificate_strategy":"PRIMARY_NAME_IF_ABSENT_ELSE_NEW_ISOLATED_LINEAGE","desired_state_changes":false,"dns_changes":false,"edge_vm_restart_forbidden":true,"first_mutation":"HOMEPAGE_MONITOR_ONLY","gitea_changes":false,"homepage_restart_forbidden":true,"homepage_site_monitor_lines_added_eventually":1,"nginx_config_test_required":true,"nginx_reload_allowed":false,"npmplus_restart_forbidden":true,"other_homepage_cards_changed":0,"private_addresses_in_output":false,"private_keys_read":false,"proxy_directives_allowed":["ssl_certificate","ssl_certificate_key"],"selected_proxy_file_count":1},"domain":"newfilya.ru","edge_lock":{"certbot_account_count":null,"certbot_account_path_set_sha256":null,"certbot_available":null,"certbot_config_metadata_exact":null,"certbot_config_stat_sha256":null,"certbot_root_kind":null,"certbot_selected_webroot":null,"certbot_selected_webroot_sha256":null,"certbot_strategy":null,"certbot_webroot_metadata_exact":null,"certificate_config_path_sha256":null,"certificate_configured":null,"certificate_covers_domain":null,"certificate_path_sha256":null,"certificate_private_key_read":null,"certificate_remaining_seconds_bucket":null,"certificate_sha256":null,"certificate_valid_now":null,"command_audit_count":14,"command_audit_output_returned":false,"command_audit_stage_set_sha256":"fd877d1138be7b704e1309015bd27cfc6388acc0c84a13cd85cf94a1aac0b68a","diagnosis":"EDGE_PREFLIGHT_EXCEPTION","domain_match_count":null,"effective_nginx_bytes":null,"effective_nginx_sha256":null,"failed_checks":[],"failed_checks_allowlisted":false,"failure_evidence":{"errno":null,"message_bytes":55,"message_sha256":"e1113f6f16265ce603b8123c8d38d4bb5d395acf458ff0531003ce72605916b5","type":"AttributeError"},"key_content_read":null,"key_exists":null,"key_path_sha256":null,"nginx_test_rc":null,"npmplus_container_id_sha256":null,"npmplus_data_mount_exact":null,"npmplus_health":null,"npmplus_image_sha256":null,"npmplus_running":null,"npmplus_started_at_sha256":null,"ok":false,"persistent_acme_http_route_count":null,"persistent_acme_http_route_present":null,"primary_certificate_path_states":{},"primary_certificate_paths_absent":null,"private_addresses_included":false,"proxy_file_count":null,"proxy_tree_sha256":null,"route_bytes":null,"route_content_returned":null,"route_domain_exact":null,"route_filename":null,"route_persistent_acme_root_count":null,"route_private_addresses_returned":null,"route_risky_directives":null,"route_safe_acme_allow":null,"route_sha256":null,"secret_files_read":false,"secrets_included":false,"status":"FAIL","upstream_host_configured":null,"upstream_host_sha256":null,"upstream_port":null,"upstream_proxy_pass_present":null,"upstream_scheme":null,"upstream_style":null},"homepage_lock":{"backup_bytes":12005,"backup_mode":"0o600","backup_sha256":"6468974ef09b3d9899bae5df4d8a7fa711d6cf16edda00b116747192277dcb2c","card_count":65,"contains_private_dispatch_material":false,"failed_checks":[],"group_count":7,"hbarhub_card_exact":true,"homepage_api_sha256":"a1ece968406ec5ce5ba02197d5270d1e3ce34da451a69cc3cc5f38b6081ada0d","homepage_api_target_href_counts":{"hbarhub.ru":1,"newfilya.ru":1},"homepage_image_id_sha256":"242e6332e372aaffcf7c821cff66dcbc12c42b2cd4ae282db9533b640892ac79","homepage_image_reference_sha256":"b0c046cffbc1a48af0e6b240575c63b6f405debba0b2c50fa190616b5ea62808","homepage_mount_exact":true,"homepage_restart_count":0,"newfilya_card_exact":true,"newfilya_monitor_enabled":false,"ok":true,"secret_file_read":false,"secrets_included":false,"services_bytes":12308,"services_sha256":"0b7360dc34b9bd3e25073eae449f3c0c5a6609f7eb9f4bb2feca72b6e04fc928","services_structure_sha256":"eff9a7e610218ffdd092d704d2fcfad357db5d3b75ee0cc584c606ae4ee61f82","source_contents_returned":false,"status":"OK","target_href_counts":{"hbarhub.ru":1,"newfilya.ru":1}},"next_stage":"NEWFILYA_PUBLIC_TLS_PLAN_FIX","operation":"NEWFILYA_PUBLIC_TLS_THEN_HOMEPAGE_MONITOR","parent_v8_evidence":{"capsule_bytes":119374,"capsule_sha256":"e5689bf4a8cfd99f2b0b7427936018d7c4f82ef535ca3b2046f87311fd829418","card_count":65,"changes_made":true,"command_id":"HOMEPAGE-ADD-NEWFILYA-HBARHUB-ATOMIC-LIVE-APPLY-INDENT-FIX1-V8-20260804T083000Z","gate":"APPLIED_AND_VERIFIED","group_count":7,"hbarhub_monitor_enabled":true,"mutation_outcome":"MUTATED","newfilya_monitor_enabled":false,"output_sha256":"0b8fccd5235c8a460a5c477a1747b03299c0f908310f029e728afe9cd6c2e706","rc":0,"rollback_restored":null,"rollback_started":false,"runner_command_sha256":"a253ded2c86ff0445c7317080bc94c7138dc71ad20bd7bf9452e161aff8efbb1","services_bytes":12308,"services_sha256":"0b7360dc34b9bd3e25073eae449f3c0c5a6609f7eb9f4bb2feca72b6e04fc928","services_structure_sha256":"eff9a7e610218ffdd092d704d2fcfad357db5d3b75ee0cc584c606ae4ee61f82","status":"OK","target_href_counts":{"hbarhub.ru":1,"newfilya.ru":1}},"predecessor_v10_failure_evidence":{"capsule_bytes":91586,"capsule_sha256":"e459b6b04c842ec43e23d44935163c488460d529ee456a14906e4bfb8a5f79c2","changes_made":false,"command_id":"HOMEPAGE-NEWFILYA-PUBLIC-TLS-READ-ONLY-PLAN-FIX1-V10-20260804T092000Z","command_sha256":"eb8cae611596457796446a6f7e06c46315bdbaf5b72d87a9b3371ae67da603b5","diagnosis":"NEWFILYA_PUBLIC_TLS_PLAN_BLOCKED","edge_remote_rc":1,"edge_remote_stdout_bytes":4825,"edge_remote_stdout_sha256":"a46985e99ba1160268e81e1f6c920fb294d68491f014d29a084ef9674daae8aa","gate":"BLOCKED","mutation_outcome":"NO_MUTATION","output_sha256":"f03ab62f3c66920f27ac5aa0b8ad278bac481236138ff8167c3ea0bd4c3f410e","public_leaf_certificate_sha256":"c14d6f3eda27dcd7e8c8a44c18844f8009b4f23a74ab82d49475f138ddef0b93","rc":1,"rollback_restored":null,"rollback_started":false,"services_sha256":"0b7360dc34b9bd3e25073eae449f3c0c5a6609f7eb9f4bb2feca72b6e04fc928","status":"FAIL","tls_state":"SELF_SIGNED"},"predecessor_v9_failure_evidence":{"capsule_bytes":90705,"capsule_sha256":"8e3918d06c8dda6e27c54836d71f1bcfed9b51bb5b006ae8525815cd287841e7","changes_made":false,"command_id":"HOMEPAGE-NEWFILYA-PUBLIC-TLS-READ-ONLY-PLAN-V9-20260804T090000Z","command_sha256":"214195c7f7e365f8d2d20e31115a8d17b8fded41ef72c9c8a5d6e1f478d98059","diagnosis":"CONTROL_PLANE_EXCEPTION","failure_type":"TypeError","mutation_outcome":"NO_MUTATION","output_sha256":"8e9abfc55dc183e11da09fa973e9b1cd121b991eab0294aa10471911bf7c6a16","rc":1,"rollback_restored":null,"rollback_started":false,"status":"FAIL"},"public_lock":{"acme_http":{"completed":true,"final_hop":{"body_bytes":124,"body_sha256":"8cdc5c9588e8cc315d89a7c73f1bea4d41f8d68ae165756df0ec4a7db6a49892","certificate_validation_disabled":true,"completed":true,"header_values_returned":false,"location_present":false,"status":404},"first_hop":{"body_bytes":140,"body_sha256":"367cbd2bd4bb3ccdbff9b81ad94e4c1d9c66ee80e9df3ffcd7080f2000cbac6a","completed":true,"header_values_returned":false,"location_matches_expected_https":true,"location_present":true,"status":301},"header_values_returned":false,"path_sha256":"ebb00f520143e8a70afa9836f017f0f2739e4b125abe4dac843212401e36a6b8","redirect_count":1,"route_model":"HTTP_TO_HTTPS_404","route_proven":true},"addresses_returned":false,"anchor_dns":{"address_set_sha256":"c76b6b888b15b83623f3fc36fe6617dc24550f6b09b0d8f73c92ea22016e3a13","addresses_returned":false,"public_target_count":1,"record_count":1,"resolved":true},"body_returned":false,"certificate_contents_returned":false,"dns":{"address_set_sha256":"c76b6b888b15b83623f3fc36fe6617dc24550f6b09b0d8f73c92ea22016e3a13","addresses_returned":false,"families":["IPv4"],"public_target_count":1,"record_count":1,"rejected_non_public_count":0,"resolved":true},"dns_matches_hbarhub_anchor":true,"http":{"bad_gateway":false,"body_bytes":140,"body_sha256":"367cbd2bd4bb3ccdbff9b81ad94e4c1d9c66ee80e9df3ffcd7080f2000cbac6a","completed":true,"connection_mode":"PINNED_GLOBAL_TARGET","header_values_returned":false,"npmplus_default":false,"redirects_to_expected_https":true,"status":301},"https_unverified":{"bad_gateway":false,"body_bytes":2056,"body_returned":false,"body_sha256":"808dfeea0cf787d85e03645e62ab18b97ab8138924420966413edcfe22ef4879","certificate_validation_disabled":true,"completed":true,"connection_mode":"PINNED_GLOBAL_TARGET_WITH_SNI","leaf_certificate_sha256":"c14d6f3eda27dcd7e8c8a44c18844f8009b4f23a74ab82d49475f138ddef0b93","npmplus_default":true,"status":200},"tcp_443":{"addresses_returned":false,"attempt_count":1,"error_types":{},"reachable":true,"success_count":1},"tls_443":{"addresses_returned":false,"attempt_count":1,"certificate_contents_returned":false,"unverified":{"certificate_contents_returned":false,"certificate_validation_disabled":true,"completed":true,"error_types":{},"leaf_certificate_count":1,"leaf_certificate_sha256":"c14d6f3eda27dcd7e8c8a44c18844f8009b4f23a74ab82d49475f138ddef0b93","leaf_set_sha256":"620f5c3147455134d92b987f4f0c17c97663931b52966c15d089b43e1e452c1b","protocols":["TLSv1.3"],"success_count":1},"verified":false,"verified_leaf_certificate_sha256":null,"verified_protocol":null,"verified_success_count":0,"verify_codes":{"18":1}}},"rollback_requirements":["backup selected proxy config before TLS path swap","remove only newly created certbot lineage when apply fails","restore proxy config byte-for-byte and validate nginx before reload","enable Homepage monitoring only after trusted public TLS is verified"],"schema":1},"private_addresses_included":false,"private_keys_read":false,"production_site_changed":false,"public":{"acme_http":{"completed":true,"final_hop":{"body_bytes":124,"body_sha256":"8cdc5c9588e8cc315d89a7c73f1bea4d41f8d68ae165756df0ec4a7db6a49892","certificate_validation_disabled":true,"completed":true,"header_values_returned":false,"location_present":false,"status":404},"first_hop":{"body_bytes":140,"body_sha256":"367cbd2bd4bb3ccdbff9b81ad94e4c1d9c66ee80e9df3ffcd7080f2000cbac6a","completed":true,"header_values_returned":false,"location_matches_expected_https":true,"location_present":true,"status":301},"header_values_returned":false,"path_sha256":"ebb00f520143e8a70afa9836f017f0f2739e4b125abe4dac843212401e36a6b8","redirect_count":1,"route_model":"HTTP_TO_HTTPS_404","route_proven":true},"addresses_returned":false,"anchor_dns":{"address_set_sha256":"c76b6b888b15b83623f3fc36fe6617dc24550f6b09b0d8f73c92ea22016e3a13","addresses_returned":false,"public_target_count":1,"record_count":1,"resolved":true},"body_returned":false,"certificate_contents_returned":false,"dns":{"address_set_sha256":"c76b6b888b15b83623f3fc36fe6617dc24550f6b09b0d8f73c92ea22016e3a13","addresses_returned":false,"families":["IPv4"],"public_target_count":1,"record_count":1,"rejected_non_public_count":0,"resolved":true},"dns_matches_hbarhub_anchor":true,"http":{"bad_gateway":false,"body_bytes":140,"body_sha256":"367cbd2bd4bb3ccdbff9b81ad94e4c1d9c66ee80e9df3ffcd7080f2000cbac6a","completed":true,"connection_mode":"PINNED_GLOBAL_TARGET","header_values_returned":false,"npmplus_default":false,"redirects_to_expected_https":true,"status":301},"https_unverified":{"bad_gateway":false,"body_bytes":2056,"body_returned":false,"body_sha256":"808dfeea0cf787d85e03645e62ab18b97ab8138924420966413edcfe22ef4879","certificate_validation_disabled":true,"completed":true,"connection_mode":"PINNED_GLOBAL_TARGET_WITH_SNI","leaf_certificate_sha256":"c14d6f3eda27dcd7e8c8a44c18844f8009b4f23a74ab82d49475f138ddef0b93","npmplus_default":true,"status":200},"tcp_443":{"addresses_returned":false,"attempt_count":1,"error_types":{},"reachable":true,"success_count":1},"tls_443":{"addresses_returned":false,"attempt_count":1,"certificate_contents_returned":false,"unverified":{"certificate_contents_returned":false,"certificate_validation_disabled":true,"completed":true,"error_types":{},"leaf_certificate_count":1,"leaf_certificate_sha256":"c14d6f3eda27dcd7e8c8a44c18844f8009b4f23a74ab82d49475f138ddef0b93","leaf_set_sha256":"620f5c3147455134d92b987f4f0c17c97663931b52966c15d089b43e1e452c1b","protocols":["TLSv1.3"],"success_count":1},"verified":false,"verified_leaf_certificate_sha256":null,"verified_protocol":null,"verified_success_count":0,"verify_codes":{"18":1}}},"public_proxy_changed":false,"rc":1,"read_only":true,"ready_for_apply":false,"rollback_restored":null,"rollback_started":false,"sanitized":true,"schema":1,"secret_files_read":false,"secrets_included":false,"source_contents_returned":false,"status":"FAIL","tls_state":"SELF_SIGNED","transport":{"core":{"config_view":"service-view","mode":"DIRECT_QGA","private_addresses_returned":false,"qga_step_count":6,"qga_step_set_sha256":"2b45c8caf92db65327124be11f433d366a3a1aeb2a519cc98812a6d73bfe0d58","remote_rc":0,"remote_stdout_bytes":2806,"remote_stdout_sha256":"3f9ebf7e463b2268c06a5f467fc6307d749817f737f1918934748c54983f0bf9","socket_view":"service-view","vm_name":"core-apps","vmid":170},"edge":{"config_view":"service-view","mode":"STRICT_SSH_TO_OWNING_NODE_THEN_DIRECT_QGA","node":"pve03","private_addresses_returned":false,"qga_step_count":10,"qga_step_set_sha256":"a45bdf0fa92e1fcd90726974350deb0e9a26c4b65e3ae7719c8615919e0bbde6","remote_rc":1,"remote_stdout_bytes":4825,"remote_stdout_sha256":"0f25798ade036d428a9eb8fe98687d511de833d44eee7198b0f972b02daf385b","socket_view":"service-view","ssh_rc":0,"vm_name":"edge-vm","vmid":130}}}
+
+OUTPUT_END
+CHAT_OUTPUT_END
diff --git a/runtime/latest.json b/runtime/latest.json
index 11a5de7..0b7ae63 100644
--- a/runtime/latest.json
+++ b/runtime/latest.json
@@ -1,19 +1,19 @@
 {
   "schema_version": 1,
   "channel": "homelab-runtime",
-  "command_id": "HOMEPAGE-NEWFILYA-PUBLIC-TLS-READ-ONLY-PLAN-FIX1-V10-20260804T092000Z",
+  "command_id": "HOMEPAGE-NEWFILYA-PUBLIC-TLS-READ-ONLY-PLAN-FIX2-V11-20260804T094000Z",
   "status": "FAIL",
   "rc": 1,
   "host": "pve01",
   "mode": "verify",
-  "component": "homepage-newfilya-public-tls-read-only-plan-fix1-v10",
-  "started_at_utc": "2026-08-04T09:21:52Z",
-  "finished_at_utc": "2026-08-04T09:21:55Z",
+  "component": "homepage-newfilya-public-tls-read-only-plan-fix2-v11",
+  "started_at_utc": "2026-08-04T09:34:11Z",
+  "finished_at_utc": "2026-08-04T09:34:15Z",
   "reference_register_checked": true,
   "reference_sha256": "5763f2f8edc75fcf6f3951f8c95896d1cc112ceccb6cf5b64a383f540a4deb8e",
   "error_register_checked": true,
   "error_register_sha256": "24934a2c7fa5c26f6e828583c4aefac7f143b40c0171736ed7571e617d55ab83",
-  "command_sha256": "eb8cae611596457796446a6f7e06c46315bdbaf5b72d87a9b3371ae67da603b5",
+  "command_sha256": "b181fddb8f08dc98c269c3cbdd9dac57d6391f4587cb02bc2e3c8d7c076515c5",
   "duplicate_failed_command_blocked": false,
   "block_reason": null,
   "execution_started": true,
@@ -30,9 +30,9 @@
   "secrets_included": false,
   "private_addresses_included": false,
   "raw_evidence_retained_locally": true,
-  "raw_evidence_sha256": "f03ab62f3c66920f27ac5aa0b8ad278bac481236138ff8167c3ea0bd4c3f410e",
-  "sanitized_output_sha256": "f03ab62f3c66920f27ac5aa0b8ad278bac481236138ff8167c3ea0bd4c3f410e",
+  "raw_evidence_sha256": "6d690c1f670fa38abfb8bdef4127cf386c4bf602812e9013ff56875139bdca71",
+  "sanitized_output_sha256": "6d690c1f670fa38abfb8bdef4127cf386c4bf602812e9013ff56875139bdca71",
   "output_truncated_in_json": false,
   "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
-  "output": "HOMELAB_RESULT_CONTRACT={\"changes_made\":false,\"command_id\":\"HOMEPAGE-NEWFILYA-PUBLIC-TLS-READ-ONLY-PLAN-FIX1-V10-20260804T092000Z\",\"mutation_outcome\":\"NO_MUTATION\",\"rollback_restored\":null,\"rollback_started\":false,\"status\":\"FAIL\",\"version\":1}\n{\"PLAN_SHA256\":null,\"action\":null,\"blockers\":[\"CERTBOT_ACCOUNT_MISSING\",\"CERTBOT_METADATA_NOT_READY\",\"CERTBOT_NOT_READY\",\"CERTBOT_PERSISTENT_WEBROOT_NOT_SELECTED\",\"CURRENT_SELF_SIGNED_CERTIFICATE_NOT_VALID_NOW\",\"EDGE_EFFECTIVE_ACME_ROUTE_NOT_PROVEN\",\"EDGE_PRIVATE_KEY_PRIVACY_INVALID\",\"EDGE_ROUTE_PRIVACY_CONTRACT_INVALID\",\"NEWFILYA_EDGE_CERTIFICATE_NOT_IDENTIFIED\",\"NEWFILYA_EDGE_PRIVATE_KEY_MISSING\",\"NEWFILYA_PROXY_ACME_ROUTE_NOT_READY\",\"NEWFILYA_PROXY_ROUTE_NOT_UNIQUE\",\"NEWFILYA_PROXY_ROUTE_RISKY_DIRECTIVES\",\"NEWFILYA_PUBLIC_RESPONSE_INVALID\",\"NEWFILYA_UPSTREAM_NOT_CONFIGURED\",\"NEWFILYA_UPSTREAM_SHAPE_INVALID\",\"NPMPLUS_CONFIG_NOT_READY\",\"NPMPLUS_NOT_HEALTHY\",\"PUBLIC_EDGE_CERTIFICATE_MISMATCH\",\"PUBLIC_TLS_HTTP_LEAF_MISMATCH\"],\"body_returned\":false,\"certificate_changed\":false,\"certificate_contents_returned\":false,\"changes_made\":false,\"command_id\":\"HOMEPAGE-NEWFILYA-PUBLIC-TLS-READ-ONLY-PLAN-FIX1-V10-20260804T092000Z\",\"container_restarted\":false,\"control_plane_error\":null,\"desired_state_changed\":false,\"diagnosis\":\"NEWFILYA_PUBLIC_TLS_PLAN_BLOCKED\",\"dns_changed\":false,\"duration_ms\":3028,\"edge\":{\"certbot_account_count\":null,\"certbot_account_path_set_sha256\":null,\"certbot_available\":null,\"certbot_config_metadata_exact\":null,\"certbot_config_stat_sha256\":null,\"certbot_root_kind\":null,\"certbot_selected_webroot\":null,\"certbot_selected_webroot_sha256\":null,\"certbot_strategy\":null,\"certbot_webroot_metadata_exact\":null,\"certificate_config_path_sha256\":null,\"certificate_configured\":null,\"certificate_covers_domain\":null,\"certificate_path_sha256\":null,\"certificate_private_key_read\":null,\"certificate_remaining_seconds_bucket\":null,\"certificate_sha256\":null,\"certificate_valid_now\":null,\"domain_match_count\":null,\"effective_nginx_bytes\":null,\"effective_nginx_sha256\":null,\"failed_checks\":[],\"failed_checks_allowlisted\":true,\"key_content_read\":null,\"key_exists\":null,\"key_path_sha256\":null,\"nginx_test_rc\":null,\"npmplus_container_id_sha256\":null,\"npmplus_data_mount_exact\":null,\"npmplus_health\":null,\"npmplus_image_sha256\":null,\"npmplus_running\":null,\"npmplus_started_at_sha256\":null,\"ok\":false,\"persistent_acme_http_route_count\":null,\"persistent_acme_http_route_present\":null,\"primary_certificate_path_states\":{},\"primary_certificate_paths_absent\":null,\"private_addresses_included\":false,\"proxy_file_count\":null,\"proxy_tree_sha256\":null,\"route_bytes\":null,\"route_content_returned\":null,\"route_domain_exact\":null,\"route_filename\":null,\"route_persistent_acme_root_count\":null,\"route_private_addresses_returned\":null,\"route_risky_directives\":null,\"route_safe_acme_allow\":null,\"route_sha256\":null,\"secret_files_read\":false,\"secrets_included\":false,\"status\":\"FAIL\",\"upstream_host_configured\":null,\"upstream_host_sha256\":null,\"upstream_port\":null,\"upstream_proxy_pass_present\":null,\"upstream_scheme\":null,\"upstream_style\":null},\"gate\":\"BLOCKED\",\"gitea_changed\":false,\"homepage\":{\"backup_bytes\":12005,\"backup_mode\":\"0o600\",\"backup_sha256\":\"6468974ef09b3d9899bae5df4d8a7fa711d6cf16edda00b116747192277dcb2c\",\"card_count\":65,\"contains_private_dispatch_material\":false,\"failed_checks\":[],\"group_count\":7,\"hbarhub_card_exact\":true,\"homepage_api_sha256\":\"a1ece968406ec5ce5ba02197d5270d1e3ce34da451a69cc3cc5f38b6081ada0d\",\"homepage_api_target_href_counts\":{\"hbarhub.ru\":1,\"newfilya.ru\":1},\"homepage_image_id_sha256\":\"242e6332e372aaffcf7c821cff66dcbc12c42b2cd4ae282db9533b640892ac79\",\"homepage_image_reference_sha256\":\"b0c046cffbc1a48af0e6b240575c63b6f405debba0b2c50fa190616b5ea62808\",\"homepage_mount_exact\":true,\"homepage_restart_count\":0,\"newfilya_card_exact\":true,\"newfilya_monitor_enabled\":false,\"ok\":true,\"secret_file_read\":false,\"secrets_included\":false,\"services_bytes\":12308,\"services_sha256\":\"0b7360dc34b9bd3e25073eae449f3c0c5a6609f7eb9f4bb2feca72b6e04fc928\",\"services_structure_sha256\":\"eff9a7e610218ffdd092d704d2fcfad357db5d3b75ee0cc584c606ae4ee61f82\",\"source_contents_returned\":false,\"status\":\"OK\",\"target_href_counts\":{\"hbarhub.ru\":1,\"newfilya.ru\":1}},\"homepage_changed\":false,\"mutation_outcome\":\"NO_MUTATION\",\"next_stage\":\"NEWFILYA_PUBLIC_TLS_PLAN_FIX\",\"npmplus_reloaded\":false,\"parent_v8_evidence\":{\"capsule_bytes\":119374,\"capsule_sha256\":\"e5689bf4a8cfd99f2b0b7427936018d7c4f82ef535ca3b2046f87311fd829418\",\"card_count\":65,\"changes_made\":true,\"command_id\":\"HOMEPAGE-ADD-NEWFILYA-HBARHUB-ATOMIC-LIVE-APPLY-INDENT-FIX1-V8-20260804T083000Z\",\"gate\":\"APPLIED_AND_VERIFIED\",\"group_count\":7,\"hbarhub_monitor_enabled\":true,\"mutation_outcome\":\"MUTATED\",\"newfilya_monitor_enabled\":false,\"output_sha256\":\"0b8fccd5235c8a460a5c477a1747b03299c0f908310f029e728afe9cd6c2e706\",\"rc\":0,\"rollback_restored\":null,\"rollback_started\":false,\"runner_command_sha256\":\"a253ded2c86ff0445c7317080bc94c7138dc71ad20bd7bf9452e161aff8efbb1\",\"services_bytes\":12308,\"services_sha256\":\"0b7360dc34b9bd3e25073eae449f3c0c5a6609f7eb9f4bb2feca72b6e04fc928\",\"services_structure_sha256\":\"eff9a7e610218ffdd092d704d2fcfad357db5d3b75ee0cc584c606ae4ee61f82\",\"status\":\"OK\",\"target_href_counts\":{\"hbarhub.ru\":1,\"newfilya.ru\":1}},\"parent_v9_failure_evidence\":{\"capsule_bytes\":90705,\"capsule_sha256\":\"8e3918d06c8dda6e27c54836d71f1bcfed9b51bb5b006ae8525815cd287841e7\",\"changes_made\":false,\"command_id\":\"HOMEPAGE-NEWFILYA-PUBLIC-TLS-READ-ONLY-PLAN-V9-20260804T090000Z\",\"command_sha256\":\"214195c7f7e365f8d2d20e31115a8d17b8fded41ef72c9c8a5d6e1f478d98059\",\"diagnosis\":\"CONTROL_PLANE_EXCEPTION\",\"failure_type\":\"TypeError\",\"mutation_outcome\":\"NO_MUTATION\",\"output_sha256\":\"8e9abfc55dc183e11da09fa973e9b1cd121b991eab0294aa10471911bf7c6a16\",\"rc\":1,\"rollback_restored\":null,\"rollback_started\":false,\"status\":\"FAIL\"},\"plan\":{\"action\":null,\"apply_scope\":{\"certificate_domain_count\":1,\"certificate_strategy\":\"PRIMARY_NAME_IF_ABSENT_ELSE_NEW_ISOLATED_LINEAGE\",\"desired_state_changes\":false,\"dns_changes\":false,\"edge_vm_restart_forbidden\":true,\"first_mutation\":\"HOMEPAGE_MONITOR_ONLY\",\"gitea_changes\":false,\"homepage_restart_forbidden\":true,\"homepage_site_monitor_lines_added_eventually\":1,\"nginx_config_test_required\":true,\"nginx_reload_allowed\":false,\"npmplus_restart_forbidden\":true,\"other_homepage_cards_changed\":0,\"private_addresses_in_output\":false,\"private_keys_read\":false,\"proxy_directives_allowed\":[\"ssl_certificate\",\"ssl_certificate_key\"],\"selected_proxy_file_count\":1},\"domain\":\"newfilya.ru\",\"edge_lock\":{\"certbot_account_count\":null,\"certbot_account_path_set_sha256\":null,\"certbot_available\":null,\"certbot_config_metadata_exact\":null,\"certbot_config_stat_sha256\":null,\"certbot_root_kind\":null,\"certbot_selected_webroot\":null,\"certbot_selected_webroot_sha256\":null,\"certbot_strategy\":null,\"certbot_webroot_metadata_exact\":null,\"certificate_config_path_sha256\":null,\"certificate_configured\":null,\"certificate_covers_domain\":null,\"certificate_path_sha256\":null,\"certificate_private_key_read\":null,\"certificate_remaining_seconds_bucket\":null,\"certificate_sha256\":null,\"certificate_valid_now\":null,\"domain_match_count\":null,\"effective_nginx_bytes\":null,\"effective_nginx_sha256\":null,\"failed_checks\":[],\"failed_checks_allowlisted\":true,\"key_content_read\":null,\"key_exists\":null,\"key_path_sha256\":null,\"nginx_test_rc\":null,\"npmplus_container_id_sha256\":null,\"npmplus_data_mount_exact\":null,\"npmplus_health\":null,\"npmplus_image_sha256\":null,\"npmplus_running\":null,\"npmplus_started_at_sha256\":null,\"ok\":false,\"persistent_acme_http_route_count\":null,\"persistent_acme_http_route_present\":null,\"primary_certificate_path_states\":{},\"primary_certificate_paths_absent\":null,\"private_addresses_included\":false,\"proxy_file_count\":null,\"proxy_tree_sha256\":null,\"route_bytes\":null,\"route_content_returned\":null,\"route_domain_exact\":null,\"route_filename\":null,\"route_persistent_acme_root_count\":null,\"route_private_addresses_returned\":null,\"route_risky_directives\":null,\"route_safe_acme_allow\":null,\"route_sha256\":null,\"secret_files_read\":false,\"secrets_included\":false,\"status\":\"FAIL\",\"upstream_host_configured\":null,\"upstream_host_sha256\":null,\"upstream_port\":null,\"upstream_proxy_pass_present\":null,\"upstream_scheme\":null,\"upstream_style\":null},\"homepage_lock\":{\"backup_bytes\":12005,\"backup_mode\":\"0o600\",\"backup_sha256\":\"6468974ef09b3d9899bae5df4d8a7fa711d6cf16edda00b116747192277dcb2c\",\"card_count\":65,\"contains_private_dispatch_material\":false,\"failed_checks\":[],\"group_count\":7,\"hbarhub_card_exact\":true,\"homepage_api_sha256\":\"a1ece968406ec5ce5ba02197d5270d1e3ce34da451a69cc3cc5f38b6081ada0d\",\"homepage_api_target_href_counts\":{\"hbarhub.ru\":1,\"newfilya.ru\":1},\"homepage_image_id_sha256\":\"242e6332e372aaffcf7c821cff66dcbc12c42b2cd4ae282db9533b640892ac79\",\"homepage_image_reference_sha256\":\"b0c046cffbc1a48af0e6b240575c63b6f405debba0b2c50fa190616b5ea62808\",\"homepage_mount_exact\":true,\"homepage_restart_count\":0,\"newfilya_card_exact\":true,\"newfilya_monitor_enabled\":false,\"ok\":true,\"secret_file_read\":false,\"secrets_included\":false,\"services_bytes\":12308,\"services_sha256\":\"0b7360dc34b9bd3e25073eae449f3c0c5a6609f7eb9f4bb2feca72b6e04fc928\",\"services_structure_sha256\":\"eff9a7e610218ffdd092d704d2fcfad357db5d3b75ee0cc584c606ae4ee61f82\",\"source_contents_returned\":false,\"status\":\"OK\",\"target_href_counts\":{\"hbarhub.ru\":1,\"newfilya.ru\":1}},\"next_stage\":\"NEWFILYA_PUBLIC_TLS_PLAN_FIX\",\"operation\":\"NEWFILYA_PUBLIC_TLS_THEN_HOMEPAGE_MONITOR\",\"parent_v8_evidence\":{\"capsule_bytes\":119374,\"capsule_sha256\":\"e5689bf4a8cfd99f2b0b7427936018d7c4f82ef535ca3b2046f87311fd829418\",\"card_count\":65,\"changes_made\":true,\"command_id\":\"HOMEPAGE-ADD-NEWFILYA-HBARHUB-ATOMIC-LIVE-APPLY-INDENT-FIX1-V8-20260804T083000Z\",\"gate\":\"APPLIED_AND_VERIFIED\",\"group_count\":7,\"hbarhub_monitor_enabled\":true,\"mutation_outcome\":\"MUTATED\",\"newfilya_monitor_enabled\":false,\"output_sha256\":\"0b8fccd5235c8a460a5c477a1747b03299c0f908310f029e728afe9cd6c2e706\",\"rc\":0,\"rollback_restored\":null,\"rollback_started\":false,\"runner_command_sha256\":\"a253ded2c86ff0445c7317080bc94c7138dc71ad20bd7bf9452e161aff8efbb1\",\"services_bytes\":12308,\"services_sha256\":\"0b7360dc34b9bd3e25073eae449f3c0c5a6609f7eb9f4bb2feca72b6e04fc928\",\"services_structure_sha256\":\"eff9a7e610218ffdd092d704d2fcfad357db5d3b75ee0cc584c606ae4ee61f82\",\"status\":\"OK\",\"target_href_counts\":{\"hbarhub.ru\":1,\"newfilya.ru\":1}},\"predecessor_v9_failure_evidence\":{\"capsule_bytes\":90705,\"capsule_sha256\":\"8e3918d06c8dda6e27c54836d71f1bcfed9b51bb5b006ae8525815cd287841e7\",\"changes_made\":false,\"command_id\":\"HOMEPAGE-NEWFILYA-PUBLIC-TLS-READ-ONLY-PLAN-V9-20260804T090000Z\",\"command_sha256\":\"214195c7f7e365f8d2d20e31115a8d17b8fded41ef72c9c8a5d6e1f478d98059\",\"diagnosis\":\"CONTROL_PLANE_EXCEPTION\",\"failure_type\":\"TypeError\",\"mutation_outcome\":\"NO_MUTATION\",\"output_sha256\":\"8e9abfc55dc183e11da09fa973e9b1cd121b991eab0294aa10471911bf7c6a16\",\"rc\":1,\"rollback_restored\":null,\"rollback_started\":false,\"status\":\"FAIL\"},\"public_lock\":{\"acme_http\":{\"completed\":true,\"final_hop\":{\"body_bytes\":124,\"body_sha256\":\"8cdc5c9588e8cc315d89a7c73f1bea4d41f8d68ae165756df0ec4a7db6a49892\",\"certificate_validation_disabled\":true,\"completed\":true,\"header_values_returned\":false,\"location_present\":false,\"status\":404},\"first_hop\":{\"body_bytes\":140,\"body_sha256\":\"367cbd2bd4bb3ccdbff9b81ad94e4c1d9c66ee80e9df3ffcd7080f2000cbac6a\",\"completed\":true,\"header_values_returned\":false,\"location_matches_expected_https\":true,\"location_present\":true,\"status\":301},\"header_values_returned\":false,\"path_sha256\":\"ed6e9adfc140318caddce708b4f384413cc9e7ac1c1e9dff3a0d7eecdf1edc88\",\"redirect_count\":1,\"route_model\":\"HTTP_TO_HTTPS_404\",\"route_proven\":true},\"addresses_returned\":false,\"anchor_dns\":{\"address_set_sha256\":\"c76b6b888b15b83623f3fc36fe6617dc24550f6b09b0d8f73c92ea22016e3a13\",\"addresses_returned\":false,\"public_target_count\":1,\"record_count\":1,\"resolved\":true},\"body_returned\":false,\"certificate_contents_returned\":false,\"dns\":{\"address_set_sha256\":\"c76b6b888b15b83623f3fc36fe6617dc24550f6b09b0d8f73c92ea22016e3a13\",\"addresses_returned\":false,\"families\":[\"IPv4\"],\"public_target_count\":1,\"record_count\":1,\"rejected_non_public_count\":0,\"resolved\":true},\"dns_matches_hbarhub_anchor\":true,\"http\":{\"bad_gateway\":false,\"body_bytes\":140,\"body_sha256\":\"367cbd2bd4bb3ccdbff9b81ad94e4c1d9c66ee80e9df3ffcd7080f2000cbac6a\",\"completed\":true,\"connection_mode\":\"PINNED_GLOBAL_TARGET\",\"header_values_returned\":false,\"npmplus_default\":false,\"redirects_to_expected_https\":true,\"status\":301},\"https_unverified\":{\"bad_gateway\":false,\"body_bytes\":2056,\"body_returned\":false,\"body_sha256\":\"808dfeea0cf787d85e03645e62ab18b97ab8138924420966413edcfe22ef4879\",\"certificate_validation_disabled\":true,\"completed\":true,\"connection_mode\":\"PINNED_GLOBAL_TARGET_WITH_SNI\",\"leaf_certificate_sha256\":null,\"npmplus_default\":true,\"status\":200},\"tcp_443\":{\"addresses_returned\":false,\"attempt_count\":1,\"error_types\":{},\"reachable\":true,\"success_count\":1},\"tls_443\":{\"addresses_returned\":false,\"attempt_count\":1,\"certificate_contents_returned\":false,\"unverified\":{\"certificate_contents_returned\":false,\"certificate_validation_disabled\":true,\"completed\":true,\"error_types\":{},\"leaf_certificate_count\":1,\"leaf_certificate_sha256\":\"c14d6f3eda27dcd7e8c8a44c18844f8009b4f23a74ab82d49475f138ddef0b93\",\"leaf_set_sha256\":\"620f5c3147455134d92b987f4f0c17c97663931b52966c15d089b43e1e452c1b\",\"protocols\":[\"TLSv1.3\"],\"success_count\":1},\"verified\":false,\"verified_leaf_certificate_sha256\":null,\"verified_protocol\":null,\"verified_success_count\":0,\"verify_codes\":{\"18\":1}}},\"rollback_requirements\":[\"backup selected proxy config before TLS path swap\",\"remove only newly created certbot lineage when apply fails\",\"restore proxy config byte-for-byte and validate nginx before reload\",\"enable Homepage monitoring only after trusted public TLS is verified\"],\"schema\":1},\"private_addresses_included\":false,\"private_keys_read\":false,\"production_site_changed\":false,\"public\":{\"acme_http\":{\"completed\":true,\"final_hop\":{\"body_bytes\":124,\"body_sha256\":\"8cdc5c9588e8cc315d89a7c73f1bea4d41f8d68ae165756df0ec4a7db6a49892\",\"certificate_validation_disabled\":true,\"completed\":true,\"header_values_returned\":false,\"location_present\":false,\"status\":404},\"first_hop\":{\"body_bytes\":140,\"body_sha256\":\"367cbd2bd4bb3ccdbff9b81ad94e4c1d9c66ee80e9df3ffcd7080f2000cbac6a\",\"completed\":true,\"header_values_returned\":false,\"location_matches_expected_https\":true,\"location_present\":true,\"status\":301},\"header_values_returned\":false,\"path_sha256\":\"ed6e9adfc140318caddce708b4f384413cc9e7ac1c1e9dff3a0d7eecdf1edc88\",\"redirect_count\":1,\"route_model\":\"HTTP_TO_HTTPS_404\",\"route_proven\":true},\"addresses_returned\":false,\"anchor_dns\":{\"address_set_sha256\":\"c76b6b888b15b83623f3fc36fe6617dc24550f6b09b0d8f73c92ea22016e3a13\",\"addresses_returned\":false,\"public_target_count\":1,\"record_count\":1,\"resolved\":true},\"body_returned\":false,\"certificate_contents_returned\":false,\"dns\":{\"address_set_sha256\":\"c76b6b888b15b83623f3fc36fe6617dc24550f6b09b0d8f73c92ea22016e3a13\",\"addresses_returned\":false,\"families\":[\"IPv4\"],\"public_target_count\":1,\"record_count\":1,\"rejected_non_public_count\":0,\"resolved\":true},\"dns_matches_hbarhub_anchor\":true,\"http\":{\"bad_gateway\":false,\"body_bytes\":140,\"body_sha256\":\"367cbd2bd4bb3ccdbff9b81ad94e4c1d9c66ee80e9df3ffcd7080f2000cbac6a\",\"completed\":true,\"connection_mode\":\"PINNED_GLOBAL_TARGET\",\"header_values_returned\":false,\"npmplus_default\":false,\"redirects_to_expected_https\":true,\"status\":301},\"https_unverified\":{\"bad_gateway\":false,\"body_bytes\":2056,\"body_returned\":false,\"body_sha256\":\"808dfeea0cf787d85e03645e62ab18b97ab8138924420966413edcfe22ef4879\",\"certificate_validation_disabled\":true,\"completed\":true,\"connection_mode\":\"PINNED_GLOBAL_TARGET_WITH_SNI\",\"leaf_certificate_sha256\":null,\"npmplus_default\":true,\"status\":200},\"tcp_443\":{\"addresses_returned\":false,\"attempt_count\":1,\"error_types\":{},\"reachable\":true,\"success_count\":1},\"tls_443\":{\"addresses_returned\":false,\"attempt_count\":1,\"certificate_contents_returned\":false,\"unverified\":{\"certificate_contents_returned\":false,\"certificate_validation_disabled\":true,\"completed\":true,\"error_types\":{},\"leaf_certificate_count\":1,\"leaf_certificate_sha256\":\"c14d6f3eda27dcd7e8c8a44c18844f8009b4f23a74ab82d49475f138ddef0b93\",\"leaf_set_sha256\":\"620f5c3147455134d92b987f4f0c17c97663931b52966c15d089b43e1e452c1b\",\"protocols\":[\"TLSv1.3\"],\"success_count\":1},\"verified\":false,\"verified_leaf_certificate_sha256\":null,\"verified_protocol\":null,\"verified_success_count\":0,\"verify_codes\":{\"18\":1}}},\"public_proxy_changed\":false,\"rc\":1,\"read_only\":true,\"ready_for_apply\":false,\"rollback_restored\":null,\"rollback_started\":false,\"sanitized\":true,\"schema\":1,\"secret_files_read\":false,\"secrets_included\":false,\"source_contents_returned\":false,\"status\":\"FAIL\",\"tls_state\":\"SELF_SIGNED\",\"transport\":{\"core\":{\"config_view\":\"service-view\",\"mode\":\"DIRECT_QGA\",\"private_addresses_returned\":false,\"qga_step_count\":6,\"qga_step_set_sha256\":\"a6de7376a5c2b8f65e8c36707819b76c729470e9894c1d635d759048c55e154b\",\"remote_rc\":0,\"remote_stdout_bytes\":2807,\"remote_stdout_sha256\":\"51eca8f40d23e6b44f0836dfa95e6b8ab9d0fe358729f64c053a8515484d2267\",\"socket_view\":\"service-view\",\"vm_name\":\"core-apps\",\"vmid\":170},\"edge\":{\"config_view\":\"service-view\",\"mode\":\"STRICT_SSH_TO_OWNING_NODE_THEN_DIRECT_QGA\",\"node\":\"pve03\",\"private_addresses_returned\":false,\"qga_step_count\":10,\"qga_step_set_sha256\":\"3ce254f32a54702dfffe8d7506f32d5b7fef3671afd76280c1cb5ccd1e85c96e\",\"remote_rc\":1,\"remote_stdout_bytes\":4825,\"remote_stdout_sha256\":\"a46985e99ba1160268e81e1f6c920fb294d68491f014d29a084ef9674daae8aa\",\"socket_view\":\"service-view\",\"ssh_rc\":0,\"vm_name\":\"edge-vm\",\"vmid\":130}}}\n"
+  "output": "HOMELAB_RESULT_CONTRACT={\"changes_made\":false,\"command_id\":\"HOMEPAGE-NEWFILYA-PUBLIC-TLS-READ-ONLY-PLAN-FIX2-V11-20260804T094000Z\",\"mutation_outcome\":\"NO_MUTATION\",\"rollback_restored\":null,\"rollback_started\":false,\"status\":\"FAIL\",\"version\":1}\n{\"PLAN_SHA256\":null,\"action\":null,\"blockers\":[\"CERTBOT_ACCOUNT_MISSING\",\"CERTBOT_METADATA_NOT_READY\",\"CERTBOT_NOT_READY\",\"CERTBOT_PERSISTENT_WEBROOT_NOT_SELECTED\",\"CURRENT_SELF_SIGNED_CERTIFICATE_NOT_VALID_NOW\",\"EDGE_EFFECTIVE_ACME_ROUTE_NOT_PROVEN\",\"EDGE_PREFLIGHT_FAILURE_OUTSIDE_ALLOWLIST\",\"EDGE_PRIVATE_KEY_PRIVACY_INVALID\",\"EDGE_ROUTE_PRIVACY_CONTRACT_INVALID\",\"NEWFILYA_EDGE_CERTIFICATE_NOT_IDENTIFIED\",\"NEWFILYA_EDGE_PRIVATE_KEY_MISSING\",\"NEWFILYA_PROXY_ACME_ROUTE_NOT_READY\",\"NEWFILYA_PROXY_ROUTE_NOT_UNIQUE\",\"NEWFILYA_PROXY_ROUTE_RISKY_DIRECTIVES\",\"NEWFILYA_PUBLIC_RESPONSE_INVALID\",\"NEWFILYA_UPSTREAM_NOT_CONFIGURED\",\"NEWFILYA_UPSTREAM_SHAPE_INVALID\",\"NPMPLUS_CONFIG_NOT_READY\",\"NPMPLUS_NOT_HEALTHY\",\"PUBLIC_EDGE_CERTIFICATE_MISMATCH\"],\"body_returned\":false,\"certificate_changed\":false,\"certificate_contents_returned\":false,\"changes_made\":false,\"command_id\":\"HOMEPAGE-NEWFILYA-PUBLIC-TLS-READ-ONLY-PLAN-FIX2-V11-20260804T094000Z\",\"container_restarted\":false,\"control_plane_error\":null,\"desired_state_changed\":false,\"diagnosis\":\"NEWFILYA_PUBLIC_TLS_PLAN_BLOCKED\",\"dns_changed\":false,\"duration_ms\":3164,\"edge\":{\"certbot_account_count\":null,\"certbot_account_path_set_sha256\":null,\"certbot_available\":null,\"certbot_config_metadata_exact\":null,\"certbot_config_stat_sha256\":null,\"certbot_root_kind\":null,\"certbot_selected_webroot\":null,\"certbot_selected_webroot_sha256\":null,\"certbot_strategy\":null,\"certbot_webroot_metadata_exact\":null,\"certificate_config_path_sha256\":null,\"certificate_configured\":null,\"certificate_covers_domain\":null,\"certificate_path_sha256\":null,\"certificate_private_key_read\":null,\"certificate_remaining_seconds_bucket\":null,\"certificate_sha256\":null,\"certificate_valid_now\":null,\"command_audit_count\":14,\"command_audit_output_returned\":false,\"command_audit_stage_set_sha256\":\"fd877d1138be7b704e1309015bd27cfc6388acc0c84a13cd85cf94a1aac0b68a\",\"diagnosis\":\"EDGE_PREFLIGHT_EXCEPTION\",\"domain_match_count\":null,\"effective_nginx_bytes\":null,\"effective_nginx_sha256\":null,\"failed_checks\":[],\"failed_checks_allowlisted\":false,\"failure_evidence\":{\"errno\":null,\"message_bytes\":55,\"message_sha256\":\"e1113f6f16265ce603b8123c8d38d4bb5d395acf458ff0531003ce72605916b5\",\"type\":\"AttributeError\"},\"key_content_read\":null,\"key_exists\":null,\"key_path_sha256\":null,\"nginx_test_rc\":null,\"npmplus_container_id_sha256\":null,\"npmplus_data_mount_exact\":null,\"npmplus_health\":null,\"npmplus_image_sha256\":null,\"npmplus_running\":null,\"npmplus_started_at_sha256\":null,\"ok\":false,\"persistent_acme_http_route_count\":null,\"persistent_acme_http_route_present\":null,\"primary_certificate_path_states\":{},\"primary_certificate_paths_absent\":null,\"private_addresses_included\":false,\"proxy_file_count\":null,\"proxy_tree_sha256\":null,\"route_bytes\":null,\"route_content_returned\":null,\"route_domain_exact\":null,\"route_filename\":null,\"route_persistent_acme_root_count\":null,\"route_private_addresses_returned\":null,\"route_risky_directives\":null,\"route_safe_acme_allow\":null,\"route_sha256\":null,\"secret_files_read\":false,\"secrets_included\":false,\"status\":\"FAIL\",\"upstream_host_configured\":null,\"upstream_host_sha256\":null,\"upstream_port\":null,\"upstream_proxy_pass_present\":null,\"upstream_scheme\":null,\"upstream_style\":null},\"gate\":\"BLOCKED\",\"gitea_changed\":false,\"homepage\":{\"backup_bytes\":12005,\"backup_mode\":\"0o600\",\"backup_sha256\":\"6468974ef09b3d9899bae5df4d8a7fa711d6cf16edda00b116747192277dcb2c\",\"card_count\":65,\"contains_private_dispatch_material\":false,\"failed_checks\":[],\"group_count\":7,\"hbarhub_card_exact\":true,\"homepage_api_sha256\":\"a1ece968406ec5ce5ba02197d5270d1e3ce34da451a69cc3cc5f38b6081ada0d\",\"homepage_api_target_href_counts\":{\"hbarhub.ru\":1,\"newfilya.ru\":1},\"homepage_image_id_sha256\":\"242e6332e372aaffcf7c821cff66dcbc12c42b2cd4ae282db9533b640892ac79\",\"homepage_image_reference_sha256\":\"b0c046cffbc1a48af0e6b240575c63b6f405debba0b2c50fa190616b5ea62808\",\"homepage_mount_exact\":true,\"homepage_restart_count\":0,\"newfilya_card_exact\":true,\"newfilya_monitor_enabled\":false,\"ok\":true,\"secret_file_read\":false,\"secrets_included\":false,\"services_bytes\":12308,\"services_sha256\":\"0b7360dc34b9bd3e25073eae449f3c0c5a6609f7eb9f4bb2feca72b6e04fc928\",\"services_structure_sha256\":\"eff9a7e610218ffdd092d704d2fcfad357db5d3b75ee0cc584c606ae4ee61f82\",\"source_contents_returned\":false,\"status\":\"OK\",\"target_href_counts\":{\"hbarhub.ru\":1,\"newfilya.ru\":1}},\"homepage_changed\":false,\"mutation_outcome\":\"NO_MUTATION\",\"next_stage\":\"NEWFILYA_PUBLIC_TLS_PLAN_FIX\",\"npmplus_reloaded\":false,\"parent_v10_failure_evidence\":{\"capsule_bytes\":91586,\"capsule_sha256\":\"e459b6b04c842ec43e23d44935163c488460d529ee456a14906e4bfb8a5f79c2\",\"changes_made\":false,\"command_id\":\"HOMEPAGE-NEWFILYA-PUBLIC-TLS-READ-ONLY-PLAN-FIX1-V10-20260804T092000Z\",\"command_sha256\":\"eb8cae611596457796446a6f7e06c46315bdbaf5b72d87a9b3371ae67da603b5\",\"diagnosis\":\"NEWFILYA_PUBLIC_TLS_PLAN_BLOCKED\",\"edge_remote_rc\":1,\"edge_remote_stdout_bytes\":4825,\"edge_remote_stdout_sha256\":\"a46985e99ba1160268e81e1f6c920fb294d68491f014d29a084ef9674daae8aa\",\"gate\":\"BLOCKED\",\"mutation_outcome\":\"NO_MUTATION\",\"output_sha256\":\"f03ab62f3c66920f27ac5aa0b8ad278bac481236138ff8167c3ea0bd4c3f410e\",\"public_leaf_certificate_sha256\":\"c14d6f3eda27dcd7e8c8a44c18844f8009b4f23a74ab82d49475f138ddef0b93\",\"rc\":1,\"rollback_restored\":null,\"rollback_started\":false,\"services_sha256\":\"0b7360dc34b9bd3e25073eae449f3c0c5a6609f7eb9f4bb2feca72b6e04fc928\",\"status\":\"FAIL\",\"tls_state\":\"SELF_SIGNED\"},\"parent_v8_evidence\":{\"capsule_bytes\":119374,\"capsule_sha256\":\"e5689bf4a8cfd99f2b0b7427936018d7c4f82ef535ca3b2046f87311fd829418\",\"card_count\":65,\"changes_made\":true,\"command_id\":\"HOMEPAGE-ADD-NEWFILYA-HBARHUB-ATOMIC-LIVE-APPLY-INDENT-FIX1-V8-20260804T083000Z\",\"gate\":\"APPLIED_AND_VERIFIED\",\"group_count\":7,\"hbarhub_monitor_enabled\":true,\"mutation_outcome\":\"MUTATED\",\"newfilya_monitor_enabled\":false,\"output_sha256\":\"0b8fccd5235c8a460a5c477a1747b03299c0f908310f029e728afe9cd6c2e706\",\"rc\":0,\"rollback_restored\":null,\"rollback_started\":false,\"runner_command_sha256\":\"a253ded2c86ff0445c7317080bc94c7138dc71ad20bd7bf9452e161aff8efbb1\",\"services_bytes\":12308,\"services_sha256\":\"0b7360dc34b9bd3e25073eae449f3c0c5a6609f7eb9f4bb2feca72b6e04fc928\",\"services_structure_sha256\":\"eff9a7e610218ffdd092d704d2fcfad357db5d3b75ee0cc584c606ae4ee61f82\",\"status\":\"OK\",\"target_href_counts\":{\"hbarhub.ru\":1,\"newfilya.ru\":1}},\"parent_v9_failure_evidence\":{\"capsule_bytes\":90705,\"capsule_sha256\":\"8e3918d06c8dda6e27c54836d71f1bcfed9b51bb5b006ae8525815cd287841e7\",\"changes_made\":false,\"command_id\":\"HOMEPAGE-NEWFILYA-PUBLIC-TLS-READ-ONLY-PLAN-V9-20260804T090000Z\",\"command_sha256\":\"214195c7f7e365f8d2d20e31115a8d17b8fded41ef72c9c8a5d6e1f478d98059\",\"diagnosis\":\"CONTROL_PLANE_EXCEPTION\",\"failure_type\":\"TypeError\",\"mutation_outcome\":\"NO_MUTATION\",\"output_sha256\":\"8e9abfc55dc183e11da09fa973e9b1cd121b991eab0294aa10471911bf7c6a16\",\"rc\":1,\"rollback_restored\":null,\"rollback_started\":false,\"status\":\"FAIL\"},\"plan\":{\"action\":null,\"apply_scope\":{\"certificate_domain_count\":1,\"certificate_strategy\":\"PRIMARY_NAME_IF_ABSENT_ELSE_NEW_ISOLATED_LINEAGE\",\"desired_state_changes\":false,\"dns_changes\":false,\"edge_vm_restart_forbidden\":true,\"first_mutation\":\"HOMEPAGE_MONITOR_ONLY\",\"gitea_changes\":false,\"homepage_restart_forbidden\":true,\"homepage_site_monitor_lines_added_eventually\":1,\"nginx_config_test_required\":true,\"nginx_reload_allowed\":false,\"npmplus_restart_forbidden\":true,\"other_homepage_cards_changed\":0,\"private_addresses_in_output\":false,\"private_keys_read\":false,\"proxy_directives_allowed\":[\"ssl_certificate\",\"ssl_certificate_key\"],\"selected_proxy_file_count\":1},\"domain\":\"newfilya.ru\",\"edge_lock\":{\"certbot_account_count\":null,\"certbot_account_path_set_sha256\":null,\"certbot_available\":null,\"certbot_config_metadata_exact\":null,\"certbot_config_stat_sha256\":null,\"certbot_root_kind\":null,\"certbot_selected_webroot\":null,\"certbot_selected_webroot_sha256\":null,\"certbot_strategy\":null,\"certbot_webroot_metadata_exact\":null,\"certificate_config_path_sha256\":null,\"certificate_configured\":null,\"certificate_covers_domain\":null,\"certificate_path_sha256\":null,\"certificate_private_key_read\":null,\"certificate_remaining_seconds_bucket\":null,\"certificate_sha256\":null,\"certificate_valid_now\":null,\"command_audit_count\":14,\"command_audit_output_returned\":false,\"command_audit_stage_set_sha256\":\"fd877d1138be7b704e1309015bd27cfc6388acc0c84a13cd85cf94a1aac0b68a\",\"diagnosis\":\"EDGE_PREFLIGHT_EXCEPTION\",\"domain_match_count\":null,\"effective_nginx_bytes\":null,\"effective_nginx_sha256\":null,\"failed_checks\":[],\"failed_checks_allowlisted\":false,\"failure_evidence\":{\"errno\":null,\"message_bytes\":55,\"message_sha256\":\"e1113f6f16265ce603b8123c8d38d4bb5d395acf458ff0531003ce72605916b5\",\"type\":\"AttributeError\"},\"key_content_read\":null,\"key_exists\":null,\"key_path_sha256\":null,\"nginx_test_rc\":null,\"npmplus_container_id_sha256\":null,\"npmplus_data_mount_exact\":null,\"npmplus_health\":null,\"npmplus_image_sha256\":null,\"npmplus_running\":null,\"npmplus_started_at_sha256\":null,\"ok\":false,\"persistent_acme_http_route_count\":null,\"persistent_acme_http_route_present\":null,\"primary_certificate_path_states\":{},\"primary_certificate_paths_absent\":null,\"private_addresses_included\":false,\"proxy_file_count\":null,\"proxy_tree_sha256\":null,\"route_bytes\":null,\"route_content_returned\":null,\"route_domain_exact\":null,\"route_filename\":null,\"route_persistent_acme_root_count\":null,\"route_private_addresses_returned\":null,\"route_risky_directives\":null,\"route_safe_acme_allow\":null,\"route_sha256\":null,\"secret_files_read\":false,\"secrets_included\":false,\"status\":\"FAIL\",\"upstream_host_configured\":null,\"upstream_host_sha256\":null,\"upstream_port\":null,\"upstream_proxy_pass_present\":null,\"upstream_scheme\":null,\"upstream_style\":null},\"homepage_lock\":{\"backup_bytes\":12005,\"backup_mode\":\"0o600\",\"backup_sha256\":\"6468974ef09b3d9899bae5df4d8a7fa711d6cf16edda00b116747192277dcb2c\",\"card_count\":65,\"contains_private_dispatch_material\":false,\"failed_checks\":[],\"group_count\":7,\"hbarhub_card_exact\":true,\"homepage_api_sha256\":\"a1ece968406ec5ce5ba02197d5270d1e3ce34da451a69cc3cc5f38b6081ada0d\",\"homepage_api_target_href_counts\":{\"hbarhub.ru\":1,\"newfilya.ru\":1},\"homepage_image_id_sha256\":\"242e6332e372aaffcf7c821cff66dcbc12c42b2cd4ae282db9533b640892ac79\",\"homepage_image_reference_sha256\":\"b0c046cffbc1a48af0e6b240575c63b6f405debba0b2c50fa190616b5ea62808\",\"homepage_mount_exact\":true,\"homepage_restart_count\":0,\"newfilya_card_exact\":true,\"newfilya_monitor_enabled\":false,\"ok\":true,\"secret_file_read\":false,\"secrets_included\":false,\"services_bytes\":12308,\"services_sha256\":\"0b7360dc34b9bd3e25073eae449f3c0c5a6609f7eb9f4bb2feca72b6e04fc928\",\"services_structure_sha256\":\"eff9a7e610218ffdd092d704d2fcfad357db5d3b75ee0cc584c606ae4ee61f82\",\"source_contents_returned\":false,\"status\":\"OK\",\"target_href_counts\":{\"hbarhub.ru\":1,\"newfilya.ru\":1}},\"next_stage\":\"NEWFILYA_PUBLIC_TLS_PLAN_FIX\",\"operation\":\"NEWFILYA_PUBLIC_TLS_THEN_HOMEPAGE_MONITOR\",\"parent_v8_evidence\":{\"capsule_bytes\":119374,\"capsule_sha256\":\"e5689bf4a8cfd99f2b0b7427936018d7c4f82ef535ca3b2046f87311fd829418\",\"card_count\":65,\"changes_made\":true,\"command_id\":\"HOMEPAGE-ADD-NEWFILYA-HBARHUB-ATOMIC-LIVE-APPLY-INDENT-FIX1-V8-20260804T083000Z\",\"gate\":\"APPLIED_AND_VERIFIED\",\"group_count\":7,\"hbarhub_monitor_enabled\":true,\"mutation_outcome\":\"MUTATED\",\"newfilya_monitor_enabled\":false,\"output_sha256\":\"0b8fccd5235c8a460a5c477a1747b03299c0f908310f029e728afe9cd6c2e706\",\"rc\":0,\"rollback_restored\":null,\"rollback_started\":false,\"runner_command_sha256\":\"a253ded2c86ff0445c7317080bc94c7138dc71ad20bd7bf9452e161aff8efbb1\",\"services_bytes\":12308,\"services_sha256\":\"0b7360dc34b9bd3e25073eae449f3c0c5a6609f7eb9f4bb2feca72b6e04fc928\",\"services_structure_sha256\":\"eff9a7e610218ffdd092d704d2fcfad357db5d3b75ee0cc584c606ae4ee61f82\",\"status\":\"OK\",\"target_href_counts\":{\"hbarhub.ru\":1,\"newfilya.ru\":1}},\"predecessor_v10_failure_evidence\":{\"capsule_bytes\":91586,\"capsule_sha256\":\"e459b6b04c842ec43e23d44935163c488460d529ee456a14906e4bfb8a5f79c2\",\"changes_made\":false,\"command_id\":\"HOMEPAGE-NEWFILYA-PUBLIC-TLS-READ-ONLY-PLAN-FIX1-V10-20260804T092000Z\",\"command_sha256\":\"eb8cae611596457796446a6f7e06c46315bdbaf5b72d87a9b3371ae67da603b5\",\"diagnosis\":\"NEWFILYA_PUBLIC_TLS_PLAN_BLOCKED\",\"edge_remote_rc\":1,\"edge_remote_stdout_bytes\":4825,\"edge_remote_stdout_sha256\":\"a46985e99ba1160268e81e1f6c920fb294d68491f014d29a084ef9674daae8aa\",\"gate\":\"BLOCKED\",\"mutation_outcome\":\"NO_MUTATION\",\"output_sha256\":\"f03ab62f3c66920f27ac5aa0b8ad278bac481236138ff8167c3ea0bd4c3f410e\",\"public_leaf_certificate_sha256\":\"c14d6f3eda27dcd7e8c8a44c18844f8009b4f23a74ab82d49475f138ddef0b93\",\"rc\":1,\"rollback_restored\":null,\"rollback_started\":false,\"services_sha256\":\"0b7360dc34b9bd3e25073eae449f3c0c5a6609f7eb9f4bb2feca72b6e04fc928\",\"status\":\"FAIL\",\"tls_state\":\"SELF_SIGNED\"},\"predecessor_v9_failure_evidence\":{\"capsule_bytes\":90705,\"capsule_sha256\":\"8e3918d06c8dda6e27c54836d71f1bcfed9b51bb5b006ae8525815cd287841e7\",\"changes_made\":false,\"command_id\":\"HOMEPAGE-NEWFILYA-PUBLIC-TLS-READ-ONLY-PLAN-V9-20260804T090000Z\",\"command_sha256\":\"214195c7f7e365f8d2d20e31115a8d17b8fded41ef72c9c8a5d6e1f478d98059\",\"diagnosis\":\"CONTROL_PLANE_EXCEPTION\",\"failure_type\":\"TypeError\",\"mutation_outcome\":\"NO_MUTATION\",\"output_sha256\":\"8e9abfc55dc183e11da09fa973e9b1cd121b991eab0294aa10471911bf7c6a16\",\"rc\":1,\"rollback_restored\":null,\"rollback_started\":false,\"status\":\"FAIL\"},\"public_lock\":{\"acme_http\":{\"completed\":true,\"final_hop\":{\"body_bytes\":124,\"body_sha256\":\"8cdc5c9588e8cc315d89a7c73f1bea4d41f8d68ae165756df0ec4a7db6a49892\",\"certificate_validation_disabled\":true,\"completed\":true,\"header_values_returned\":false,\"location_present\":false,\"status\":404},\"first_hop\":{\"body_bytes\":140,\"body_sha256\":\"367cbd2bd4bb3ccdbff9b81ad94e4c1d9c66ee80e9df3ffcd7080f2000cbac6a\",\"completed\":true,\"header_values_returned\":false,\"location_matches_expected_https\":true,\"location_present\":true,\"status\":301},\"header_values_returned\":false,\"path_sha256\":\"ebb00f520143e8a70afa9836f017f0f2739e4b125abe4dac843212401e36a6b8\",\"redirect_count\":1,\"route_model\":\"HTTP_TO_HTTPS_404\",\"route_proven\":true},\"addresses_returned\":false,\"anchor_dns\":{\"address_set_sha256\":\"c76b6b888b15b83623f3fc36fe6617dc24550f6b09b0d8f73c92ea22016e3a13\",\"addresses_returned\":false,\"public_target_count\":1,\"record_count\":1,\"resolved\":true},\"body_returned\":false,\"certificate_contents_returned\":false,\"dns\":{\"address_set_sha256\":\"c76b6b888b15b83623f3fc36fe6617dc24550f6b09b0d8f73c92ea22016e3a13\",\"addresses_returned\":false,\"families\":[\"IPv4\"],\"public_target_count\":1,\"record_count\":1,\"rejected_non_public_count\":0,\"resolved\":true},\"dns_matches_hbarhub_anchor\":true,\"http\":{\"bad_gateway\":false,\"body_bytes\":140,\"body_sha256\":\"367cbd2bd4bb3ccdbff9b81ad94e4c1d9c66ee80e9df3ffcd7080f2000cbac6a\",\"completed\":true,\"connection_mode\":\"PINNED_GLOBAL_TARGET\",\"header_values_returned\":false,\"npmplus_default\":false,\"redirects_to_expected_https\":true,\"status\":301},\"https_unverified\":{\"bad_gateway\":false,\"body_bytes\":2056,\"body_returned\":false,\"body_sha256\":\"808dfeea0cf787d85e03645e62ab18b97ab8138924420966413edcfe22ef4879\",\"certificate_validation_disabled\":true,\"completed\":true,\"connection_mode\":\"PINNED_GLOBAL_TARGET_WITH_SNI\",\"leaf_certificate_sha256\":\"c14d6f3eda27dcd7e8c8a44c18844f8009b4f23a74ab82d49475f138ddef0b93\",\"npmplus_default\":true,\"status\":200},\"tcp_443\":{\"addresses_returned\":false,\"attempt_count\":1,\"error_types\":{},\"reachable\":true,\"success_count\":1},\"tls_443\":{\"addresses_returned\":false,\"attempt_count\":1,\"certificate_contents_returned\":false,\"unverified\":{\"certificate_contents_returned\":false,\"certificate_validation_disabled\":true,\"completed\":true,\"error_types\":{},\"leaf_certificate_count\":1,\"leaf_certificate_sha256\":\"c14d6f3eda27dcd7e8c8a44c18844f8009b4f23a74ab82d49475f138ddef0b93\",\"leaf_set_sha256\":\"620f5c3147455134d92b987f4f0c17c97663931b52966c15d089b43e1e452c1b\",\"protocols\":[\"TLSv1.3\"],\"success_count\":1},\"verified\":false,\"verified_leaf_certificate_sha256\":null,\"verified_protocol\":null,\"verified_success_count\":0,\"verify_codes\":{\"18\":1}}},\"rollback_requirements\":[\"backup selected proxy config before TLS path swap\",\"remove only newly created certbot lineage when apply fails\",\"restore proxy config byte-for-byte and validate nginx before reload\",\"enable Homepage monitoring only after trusted public TLS is verified\"],\"schema\":1},\"private_addresses_included\":false,\"private_keys_read\":false,\"production_site_changed\":false,\"public\":{\"acme_http\":{\"completed\":true,\"final_hop\":{\"body_bytes\":124,\"body_sha256\":\"8cdc5c9588e8cc315d89a7c73f1bea4d41f8d68ae165756df0ec4a7db6a49892\",\"certificate_validation_disabled\":true,\"completed\":true,\"header_values_returned\":false,\"location_present\":false,\"status\":404},\"first_hop\":{\"body_bytes\":140,\"body_sha256\":\"367cbd2bd4bb3ccdbff9b81ad94e4c1d9c66ee80e9df3ffcd7080f2000cbac6a\",\"completed\":true,\"header_values_returned\":false,\"location_matches_expected_https\":true,\"location_present\":true,\"status\":301},\"header_values_returned\":false,\"path_sha256\":\"ebb00f520143e8a70afa9836f017f0f2739e4b125abe4dac843212401e36a6b8\",\"redirect_count\":1,\"route_model\":\"HTTP_TO_HTTPS_404\",\"route_proven\":true},\"addresses_returned\":false,\"anchor_dns\":{\"address_set_sha256\":\"c76b6b888b15b83623f3fc36fe6617dc24550f6b09b0d8f73c92ea22016e3a13\",\"addresses_returned\":false,\"public_target_count\":1,\"record_count\":1,\"resolved\":true},\"body_returned\":false,\"certificate_contents_returned\":false,\"dns\":{\"address_set_sha256\":\"c76b6b888b15b83623f3fc36fe6617dc24550f6b09b0d8f73c92ea22016e3a13\",\"addresses_returned\":false,\"families\":[\"IPv4\"],\"public_target_count\":1,\"record_count\":1,\"rejected_non_public_count\":0,\"resolved\":true},\"dns_matches_hbarhub_anchor\":true,\"http\":{\"bad_gateway\":false,\"body_bytes\":140,\"body_sha256\":\"367cbd2bd4bb3ccdbff9b81ad94e4c1d9c66ee80e9df3ffcd7080f2000cbac6a\",\"completed\":true,\"connection_mode\":\"PINNED_GLOBAL_TARGET\",\"header_values_returned\":false,\"npmplus_default\":false,\"redirects_to_expected_https\":true,\"status\":301},\"https_unverified\":{\"bad_gateway\":false,\"body_bytes\":2056,\"body_returned\":false,\"body_sha256\":\"808dfeea0cf787d85e03645e62ab18b97ab8138924420966413edcfe22ef4879\",\"certificate_validation_disabled\":true,\"completed\":true,\"connection_mode\":\"PINNED_GLOBAL_TARGET_WITH_SNI\",\"leaf_certificate_sha256\":\"c14d6f3eda27dcd7e8c8a44c18844f8009b4f23a74ab82d49475f138ddef0b93\",\"npmplus_default\":true,\"status\":200},\"tcp_443\":{\"addresses_returned\":false,\"attempt_count\":1,\"error_types\":{},\"reachable\":true,\"success_count\":1},\"tls_443\":{\"addresses_returned\":false,\"attempt_count\":1,\"certificate_contents_returned\":false,\"unverified\":{\"certificate_contents_returned\":false,\"certificate_validation_disabled\":true,\"completed\":true,\"error_types\":{},\"leaf_certificate_count\":1,\"leaf_certificate_sha256\":\"c14d6f3eda27dcd7e8c8a44c18844f8009b4f23a74ab82d49475f138ddef0b93\",\"leaf_set_sha256\":\"620f5c3147455134d92b987f4f0c17c97663931b52966c15d089b43e1e452c1b\",\"protocols\":[\"TLSv1.3\"],\"success_count\":1},\"verified\":false,\"verified_leaf_certificate_sha256\":null,\"verified_protocol\":null,\"verified_success_count\":0,\"verify_codes\":{\"18\":1}}},\"public_proxy_changed\":false,\"rc\":1,\"read_only\":true,\"ready_for_apply\":false,\"rollback_restored\":null,\"rollback_started\":false,\"sanitized\":true,\"schema\":1,\"secret_files_read\":false,\"secrets_included\":false,\"source_contents_returned\":false,\"status\":\"FAIL\",\"tls_state\":\"SELF_SIGNED\",\"transport\":{\"core\":{\"config_view\":\"service-view\",\"mode\":\"DIRECT_QGA\",\"private_addresses_returned\":false,\"qga_step_count\":6,\"qga_step_set_sha256\":\"2b45c8caf92db65327124be11f433d366a3a1aeb2a519cc98812a6d73bfe0d58\",\"remote_rc\":0,\"remote_stdout_bytes\":2806,\"remote_stdout_sha256\":\"3f9ebf7e463b2268c06a5f467fc6307d749817f737f1918934748c54983f0bf9\",\"socket_view\":\"service-view\",\"vm_name\":\"core-apps\",\"vmid\":170},\"edge\":{\"config_view\":\"service-view\",\"mode\":\"STRICT_SSH_TO_OWNING_NODE_THEN_DIRECT_QGA\",\"node\":\"pve03\",\"private_addresses_returned\":false,\"qga_step_count\":10,\"qga_step_set_sha256\":\"a45bdf0fa92e1fcd90726974350deb0e9a26c4b65e3ae7719c8615919e0bbde6\",\"remote_rc\":1,\"remote_stdout_bytes\":4825,\"remote_stdout_sha256\":\"0f25798ade036d428a9eb8fe98687d511de833d44eee7198b0f972b02daf385b\",\"socket_view\":\"service-view\",\"ssh_rc\":0,\"vm_name\":\"edge-vm\",\"vmid\":130}}}\n"
 }
diff --git a/runtime/latest.txt b/runtime/latest.txt
index 9c3dff4..70413b8 100644
--- a/runtime/latest.txt
+++ b/runtime/latest.txt
@@ -1,15 +1,15 @@
 CHAT_OUTPUT_BEGIN
-COMMAND_ID=HOMEPAGE-NEWFILYA-PUBLIC-TLS-READ-ONLY-PLAN-FIX1-V10-20260804T092000Z
+COMMAND_ID=HOMEPAGE-NEWFILYA-PUBLIC-TLS-READ-ONLY-PLAN-FIX2-V11-20260804T094000Z
 STATUS=FAIL
 RC=1
 HOST=pve01
 MODE=verify
-COMPONENT=homepage-newfilya-public-tls-read-only-plan-fix1-v10
+COMPONENT=homepage-newfilya-public-tls-read-only-plan-fix2-v11
 REFERENCE_REGISTER_CHECK=OK
 REFERENCE_SHA256=5763f2f8edc75fcf6f3951f8c95896d1cc112ceccb6cf5b64a383f540a4deb8e
 ERROR_REGISTER_CHECK=OK
 ERROR_REGISTER_SHA256=24934a2c7fa5c26f6e828583c4aefac7f143b40c0171736ed7571e617d55ab83
-COMMAND_SHA256=eb8cae611596457796446a6f7e06c46315bdbaf5b72d87a9b3371ae67da603b5
+COMMAND_SHA256=b181fddb8f08dc98c269c3cbdd9dac57d6391f4587cb02bc2e3c8d7c076515c5
 DUPLICATE_FAILED_COMMAND_BLOCKED=false
 EXECUTION_STARTED=true
 CHANGE_DECLARED=false
@@ -24,11 +24,11 @@ MUTATION_OUTCOME=NO_MUTATION
 SANITIZED=yes
 SECRETS_INCLUDED=no
 PRIVATE_ADDRESSES_INCLUDED=no
-RAW_EVIDENCE_SHA256=f03ab62f3c66920f27ac5aa0b8ad278bac481236138ff8167c3ea0bd4c3f410e
-SANITIZED_OUTPUT_SHA256=f03ab62f3c66920f27ac5aa0b8ad278bac481236138ff8167c3ea0bd4c3f410e
+RAW_EVIDENCE_SHA256=6d690c1f670fa38abfb8bdef4127cf386c4bf602812e9013ff56875139bdca71
+SANITIZED_OUTPUT_SHA256=6d690c1f670fa38abfb8bdef4127cf386c4bf602812e9013ff56875139bdca71
 OUTPUT_BEGIN
-HOMELAB_RESULT_CONTRACT={"changes_made":false,"command_id":"HOMEPAGE-NEWFILYA-PUBLIC-TLS-READ-ONLY-PLAN-FIX1-V10-20260804T092000Z","mutation_outcome":"NO_MUTATION","rollback_restored":null,"rollback_started":false,"status":"FAIL","version":1}
-{"PLAN_SHA256":null,"action":null,"blockers":["CERTBOT_ACCOUNT_MISSING","CERTBOT_METADATA_NOT_READY","CERTBOT_NOT_READY","CERTBOT_PERSISTENT_WEBROOT_NOT_SELECTED","CURRENT_SELF_SIGNED_CERTIFICATE_NOT_VALID_NOW","EDGE_EFFECTIVE_ACME_ROUTE_NOT_PROVEN","EDGE_PRIVATE_KEY_PRIVACY_INVALID","EDGE_ROUTE_PRIVACY_CONTRACT_INVALID","NEWFILYA_EDGE_CERTIFICATE_NOT_IDENTIFIED","NEWFILYA_EDGE_PRIVATE_KEY_MISSING","NEWFILYA_PROXY_ACME_ROUTE_NOT_READY","NEWFILYA_PROXY_ROUTE_NOT_UNIQUE","NEWFILYA_PROXY_ROUTE_RISKY_DIRECTIVES","NEWFILYA_PUBLIC_RESPONSE_INVALID","NEWFILYA_UPSTREAM_NOT_CONFIGURED","NEWFILYA_UPSTREAM_SHAPE_INVALID","NPMPLUS_CONFIG_NOT_READY","NPMPLUS_NOT_HEALTHY","PUBLIC_EDGE_CERTIFICATE_MISMATCH","PUBLIC_TLS_HTTP_LEAF_MISMATCH"],"body_returned":false,"certificate_changed":false,"certificate_contents_returned":false,"changes_made":false,"command_id":"HOMEPAGE-NEWFILYA-PUBLIC-TLS-READ-ONLY-PLAN-FIX1-V10-20260804T092000Z","container_restarted":false,"control_plane_error":null,"desired_state_changed":false,"diagnosis":"NEWFILYA_PUBLIC_TLS_PLAN_BLOCKED","dns_changed":false,"duration_ms":3028,"edge":{"certbot_account_count":null,"certbot_account_path_set_sha256":null,"certbot_available":null,"certbot_config_metadata_exact":null,"certbot_config_stat_sha256":null,"certbot_root_kind":null,"certbot_selected_webroot":null,"certbot_selected_webroot_sha256":null,"certbot_strategy":null,"certbot_webroot_metadata_exact":null,"certificate_config_path_sha256":null,"certificate_configured":null,"certificate_covers_domain":null,"certificate_path_sha256":null,"certificate_private_key_read":null,"certificate_remaining_seconds_bucket":null,"certificate_sha256":null,"certificate_valid_now":null,"domain_match_count":null,"effective_nginx_bytes":null,"effective_nginx_sha256":null,"failed_checks":[],"failed_checks_allowlisted":true,"key_content_read":null,"key_exists":null,"key_path_sha256":null,"nginx_test_rc":null,"npmplus_container_id_sha256":null,"npmplus_data_mount_exact":null,"npmplus_health":null,"npmplus_image_sha256":null,"npmplus_running":null,"npmplus_started_at_sha256":null,"ok":false,"persistent_acme_http_route_count":null,"persistent_acme_http_route_present":null,"primary_certificate_path_states":{},"primary_certificate_paths_absent":null,"private_addresses_included":false,"proxy_file_count":null,"proxy_tree_sha256":null,"route_bytes":null,"route_content_returned":null,"route_domain_exact":null,"route_filename":null,"route_persistent_acme_root_count":null,"route_private_addresses_returned":null,"route_risky_directives":null,"route_safe_acme_allow":null,"route_sha256":null,"secret_files_read":false,"secrets_included":false,"status":"FAIL","upstream_host_configured":null,"upstream_host_sha256":null,"upstream_port":null,"upstream_proxy_pass_present":null,"upstream_scheme":null,"upstream_style":null},"gate":"BLOCKED","gitea_changed":false,"homepage":{"backup_bytes":12005,"backup_mode":"0o600","backup_sha256":"6468974ef09b3d9899bae5df4d8a7fa711d6cf16edda00b116747192277dcb2c","card_count":65,"contains_private_dispatch_material":false,"failed_checks":[],"group_count":7,"hbarhub_card_exact":true,"homepage_api_sha256":"a1ece968406ec5ce5ba02197d5270d1e3ce34da451a69cc3cc5f38b6081ada0d","homepage_api_target_href_counts":{"hbarhub.ru":1,"newfilya.ru":1},"homepage_image_id_sha256":"242e6332e372aaffcf7c821cff66dcbc12c42b2cd4ae282db9533b640892ac79","homepage_image_reference_sha256":"b0c046cffbc1a48af0e6b240575c63b6f405debba0b2c50fa190616b5ea62808","homepage_mount_exact":true,"homepage_restart_count":0,"newfilya_card_exact":true,"newfilya_monitor_enabled":false,"ok":true,"secret_file_read":false,"secrets_included":false,"services_bytes":12308,"services_sha256":"0b7360dc34b9bd3e25073eae449f3c0c5a6609f7eb9f4bb2feca72b6e04fc928","services_structure_sha256":"eff9a7e610218ffdd092d704d2fcfad357db5d3b75ee0cc584c606ae4ee61f82","source_contents_returned":false,"status":"OK","target_href_counts":{"hbarhub.ru":1,"newfilya.ru":1}},"homepage_changed":false,"mutation_outcome":"NO_MUTATION","next_stage":"NEWFILYA_PUBLIC_TLS_PLAN_FIX","npmplus_reloaded":false,"parent_v8_evidence":{"capsule_bytes":119374,"capsule_sha256":"e5689bf4a8cfd99f2b0b7427936018d7c4f82ef535ca3b2046f87311fd829418","card_count":65,"changes_made":true,"command_id":"HOMEPAGE-ADD-NEWFILYA-HBARHUB-ATOMIC-LIVE-APPLY-INDENT-FIX1-V8-20260804T083000Z","gate":"APPLIED_AND_VERIFIED","group_count":7,"hbarhub_monitor_enabled":true,"mutation_outcome":"MUTATED","newfilya_monitor_enabled":false,"output_sha256":"0b8fccd5235c8a460a5c477a1747b03299c0f908310f029e728afe9cd6c2e706","rc":0,"rollback_restored":null,"rollback_started":false,"runner_command_sha256":"a253ded2c86ff0445c7317080bc94c7138dc71ad20bd7bf9452e161aff8efbb1","services_bytes":12308,"services_sha256":"0b7360dc34b9bd3e25073eae449f3c0c5a6609f7eb9f4bb2feca72b6e04fc928","services_structure_sha256":"eff9a7e610218ffdd092d704d2fcfad357db5d3b75ee0cc584c606ae4ee61f82","status":"OK","target_href_counts":{"hbarhub.ru":1,"newfilya.ru":1}},"parent_v9_failure_evidence":{"capsule_bytes":90705,"capsule_sha256":"8e3918d06c8dda6e27c54836d71f1bcfed9b51bb5b006ae8525815cd287841e7","changes_made":false,"command_id":"HOMEPAGE-NEWFILYA-PUBLIC-TLS-READ-ONLY-PLAN-V9-20260804T090000Z","command_sha256":"214195c7f7e365f8d2d20e31115a8d17b8fded41ef72c9c8a5d6e1f478d98059","diagnosis":"CONTROL_PLANE_EXCEPTION","failure_type":"TypeError","mutation_outcome":"NO_MUTATION","output_sha256":"8e9abfc55dc183e11da09fa973e9b1cd121b991eab0294aa10471911bf7c6a16","rc":1,"rollback_restored":null,"rollback_started":false,"status":"FAIL"},"plan":{"action":null,"apply_scope":{"certificate_domain_count":1,"certificate_strategy":"PRIMARY_NAME_IF_ABSENT_ELSE_NEW_ISOLATED_LINEAGE","desired_state_changes":false,"dns_changes":false,"edge_vm_restart_forbidden":true,"first_mutation":"HOMEPAGE_MONITOR_ONLY","gitea_changes":false,"homepage_restart_forbidden":true,"homepage_site_monitor_lines_added_eventually":1,"nginx_config_test_required":true,"nginx_reload_allowed":false,"npmplus_restart_forbidden":true,"other_homepage_cards_changed":0,"private_addresses_in_output":false,"private_keys_read":false,"proxy_directives_allowed":["ssl_certificate","ssl_certificate_key"],"selected_proxy_file_count":1},"domain":"newfilya.ru","edge_lock":{"certbot_account_count":null,"certbot_account_path_set_sha256":null,"certbot_available":null,"certbot_config_metadata_exact":null,"certbot_config_stat_sha256":null,"certbot_root_kind":null,"certbot_selected_webroot":null,"certbot_selected_webroot_sha256":null,"certbot_strategy":null,"certbot_webroot_metadata_exact":null,"certificate_config_path_sha256":null,"certificate_configured":null,"certificate_covers_domain":null,"certificate_path_sha256":null,"certificate_private_key_read":null,"certificate_remaining_seconds_bucket":null,"certificate_sha256":null,"certificate_valid_now":null,"domain_match_count":null,"effective_nginx_bytes":null,"effective_nginx_sha256":null,"failed_checks":[],"failed_checks_allowlisted":true,"key_content_read":null,"key_exists":null,"key_path_sha256":null,"nginx_test_rc":null,"npmplus_container_id_sha256":null,"npmplus_data_mount_exact":null,"npmplus_health":null,"npmplus_image_sha256":null,"npmplus_running":null,"npmplus_started_at_sha256":null,"ok":false,"persistent_acme_http_route_count":null,"persistent_acme_http_route_present":null,"primary_certificate_path_states":{},"primary_certificate_paths_absent":null,"private_addresses_included":false,"proxy_file_count":null,"proxy_tree_sha256":null,"route_bytes":null,"route_content_returned":null,"route_domain_exact":null,"route_filename":null,"route_persistent_acme_root_count":null,"route_private_addresses_returned":null,"route_risky_directives":null,"route_safe_acme_allow":null,"route_sha256":null,"secret_files_read":false,"secrets_included":false,"status":"FAIL","upstream_host_configured":null,"upstream_host_sha256":null,"upstream_port":null,"upstream_proxy_pass_present":null,"upstream_scheme":null,"upstream_style":null},"homepage_lock":{"backup_bytes":12005,"backup_mode":"0o600","backup_sha256":"6468974ef09b3d9899bae5df4d8a7fa711d6cf16edda00b116747192277dcb2c","card_count":65,"contains_private_dispatch_material":false,"failed_checks":[],"group_count":7,"hbarhub_card_exact":true,"homepage_api_sha256":"a1ece968406ec5ce5ba02197d5270d1e3ce34da451a69cc3cc5f38b6081ada0d","homepage_api_target_href_counts":{"hbarhub.ru":1,"newfilya.ru":1},"homepage_image_id_sha256":"242e6332e372aaffcf7c821cff66dcbc12c42b2cd4ae282db9533b640892ac79","homepage_image_reference_sha256":"b0c046cffbc1a48af0e6b240575c63b6f405debba0b2c50fa190616b5ea62808","homepage_mount_exact":true,"homepage_restart_count":0,"newfilya_card_exact":true,"newfilya_monitor_enabled":false,"ok":true,"secret_file_read":false,"secrets_included":false,"services_bytes":12308,"services_sha256":"0b7360dc34b9bd3e25073eae449f3c0c5a6609f7eb9f4bb2feca72b6e04fc928","services_structure_sha256":"eff9a7e610218ffdd092d704d2fcfad357db5d3b75ee0cc584c606ae4ee61f82","source_contents_returned":false,"status":"OK","target_href_counts":{"hbarhub.ru":1,"newfilya.ru":1}},"next_stage":"NEWFILYA_PUBLIC_TLS_PLAN_FIX","operation":"NEWFILYA_PUBLIC_TLS_THEN_HOMEPAGE_MONITOR","parent_v8_evidence":{"capsule_bytes":119374,"capsule_sha256":"e5689bf4a8cfd99f2b0b7427936018d7c4f82ef535ca3b2046f87311fd829418","card_count":65,"changes_made":true,"command_id":"HOMEPAGE-ADD-NEWFILYA-HBARHUB-ATOMIC-LIVE-APPLY-INDENT-FIX1-V8-20260804T083000Z","gate":"APPLIED_AND_VERIFIED","group_count":7,"hbarhub_monitor_enabled":true,"mutation_outcome":"MUTATED","newfilya_monitor_enabled":false,"output_sha256":"0b8fccd5235c8a460a5c477a1747b03299c0f908310f029e728afe9cd6c2e706","rc":0,"rollback_restored":null,"rollback_started":false,"runner_command_sha256":"a253ded2c86ff0445c7317080bc94c7138dc71ad20bd7bf9452e161aff8efbb1","services_bytes":12308,"services_sha256":"0b7360dc34b9bd3e25073eae449f3c0c5a6609f7eb9f4bb2feca72b6e04fc928","services_structure_sha256":"eff9a7e610218ffdd092d704d2fcfad357db5d3b75ee0cc584c606ae4ee61f82","status":"OK","target_href_counts":{"hbarhub.ru":1,"newfilya.ru":1}},"predecessor_v9_failure_evidence":{"capsule_bytes":90705,"capsule_sha256":"8e3918d06c8dda6e27c54836d71f1bcfed9b51bb5b006ae8525815cd287841e7","changes_made":false,"command_id":"HOMEPAGE-NEWFILYA-PUBLIC-TLS-READ-ONLY-PLAN-V9-20260804T090000Z","command_sha256":"214195c7f7e365f8d2d20e31115a8d17b8fded41ef72c9c8a5d6e1f478d98059","diagnosis":"CONTROL_PLANE_EXCEPTION","failure_type":"TypeError","mutation_outcome":"NO_MUTATION","output_sha256":"8e9abfc55dc183e11da09fa973e9b1cd121b991eab0294aa10471911bf7c6a16","rc":1,"rollback_restored":null,"rollback_started":false,"status":"FAIL"},"public_lock":{"acme_http":{"completed":true,"final_hop":{"body_bytes":124,"body_sha256":"8cdc5c9588e8cc315d89a7c73f1bea4d41f8d68ae165756df0ec4a7db6a49892","certificate_validation_disabled":true,"completed":true,"header_values_returned":false,"location_present":false,"status":404},"first_hop":{"body_bytes":140,"body_sha256":"367cbd2bd4bb3ccdbff9b81ad94e4c1d9c66ee80e9df3ffcd7080f2000cbac6a","completed":true,"header_values_returned":false,"location_matches_expected_https":true,"location_present":true,"status":301},"header_values_returned":false,"path_sha256":"ed6e9adfc140318caddce708b4f384413cc9e7ac1c1e9dff3a0d7eecdf1edc88","redirect_count":1,"route_model":"HTTP_TO_HTTPS_404","route_proven":true},"addresses_returned":false,"anchor_dns":{"address_set_sha256":"c76b6b888b15b83623f3fc36fe6617dc24550f6b09b0d8f73c92ea22016e3a13","addresses_returned":false,"public_target_count":1,"record_count":1,"resolved":true},"body_returned":false,"certificate_contents_returned":false,"dns":{"address_set_sha256":"c76b6b888b15b83623f3fc36fe6617dc24550f6b09b0d8f73c92ea22016e3a13","addresses_returned":false,"families":["IPv4"],"public_target_count":1,"record_count":1,"rejected_non_public_count":0,"resolved":true},"dns_matches_hbarhub_anchor":true,"http":{"bad_gateway":false,"body_bytes":140,"body_sha256":"367cbd2bd4bb3ccdbff9b81ad94e4c1d9c66ee80e9df3ffcd7080f2000cbac6a","completed":true,"connection_mode":"PINNED_GLOBAL_TARGET","header_values_returned":false,"npmplus_default":false,"redirects_to_expected_https":true,"status":301},"https_unverified":{"bad_gateway":false,"body_bytes":2056,"body_returned":false,"body_sha256":"808dfeea0cf787d85e03645e62ab18b97ab8138924420966413edcfe22ef4879","certificate_validation_disabled":true,"completed":true,"connection_mode":"PINNED_GLOBAL_TARGET_WITH_SNI","leaf_certificate_sha256":null,"npmplus_default":true,"status":200},"tcp_443":{"addresses_returned":false,"attempt_count":1,"error_types":{},"reachable":true,"success_count":1},"tls_443":{"addresses_returned":false,"attempt_count":1,"certificate_contents_returned":false,"unverified":{"certificate_contents_returned":false,"certificate_validation_disabled":true,"completed":true,"error_types":{},"leaf_certificate_count":1,"leaf_certificate_sha256":"c14d6f3eda27dcd7e8c8a44c18844f8009b4f23a74ab82d49475f138ddef0b93","leaf_set_sha256":"620f5c3147455134d92b987f4f0c17c97663931b52966c15d089b43e1e452c1b","protocols":["TLSv1.3"],"success_count":1},"verified":false,"verified_leaf_certificate_sha256":null,"verified_protocol":null,"verified_success_count":0,"verify_codes":{"18":1}}},"rollback_requirements":["backup selected proxy config before TLS path swap","remove only newly created certbot lineage when apply fails","restore proxy config byte-for-byte and validate nginx before reload","enable Homepage monitoring only after trusted public TLS is verified"],"schema":1},"private_addresses_included":false,"private_keys_read":false,"production_site_changed":false,"public":{"acme_http":{"completed":true,"final_hop":{"body_bytes":124,"body_sha256":"8cdc5c9588e8cc315d89a7c73f1bea4d41f8d68ae165756df0ec4a7db6a49892","certificate_validation_disabled":true,"completed":true,"header_values_returned":false,"location_present":false,"status":404},"first_hop":{"body_bytes":140,"body_sha256":"367cbd2bd4bb3ccdbff9b81ad94e4c1d9c66ee80e9df3ffcd7080f2000cbac6a","completed":true,"header_values_returned":false,"location_matches_expected_https":true,"location_present":true,"status":301},"header_values_returned":false,"path_sha256":"ed6e9adfc140318caddce708b4f384413cc9e7ac1c1e9dff3a0d7eecdf1edc88","redirect_count":1,"route_model":"HTTP_TO_HTTPS_404","route_proven":true},"addresses_returned":false,"anchor_dns":{"address_set_sha256":"c76b6b888b15b83623f3fc36fe6617dc24550f6b09b0d8f73c92ea22016e3a13","addresses_returned":false,"public_target_count":1,"record_count":1,"resolved":true},"body_returned":false,"certificate_contents_returned":false,"dns":{"address_set_sha256":"c76b6b888b15b83623f3fc36fe6617dc24550f6b09b0d8f73c92ea22016e3a13","addresses_returned":false,"families":["IPv4"],"public_target_count":1,"record_count":1,"rejected_non_public_count":0,"resolved":true},"dns_matches_hbarhub_anchor":true,"http":{"bad_gateway":false,"body_bytes":140,"body_sha256":"367cbd2bd4bb3ccdbff9b81ad94e4c1d9c66ee80e9df3ffcd7080f2000cbac6a","completed":true,"connection_mode":"PINNED_GLOBAL_TARGET","header_values_returned":false,"npmplus_default":false,"redirects_to_expected_https":true,"status":301},"https_unverified":{"bad_gateway":false,"body_bytes":2056,"body_returned":false,"body_sha256":"808dfeea0cf787d85e03645e62ab18b97ab8138924420966413edcfe22ef4879","certificate_validation_disabled":true,"completed":true,"connection_mode":"PINNED_GLOBAL_TARGET_WITH_SNI","leaf_certificate_sha256":null,"npmplus_default":true,"status":200},"tcp_443":{"addresses_returned":false,"attempt_count":1,"error_types":{},"reachable":true,"success_count":1},"tls_443":{"addresses_returned":false,"attempt_count":1,"certificate_contents_returned":false,"unverified":{"certificate_contents_returned":false,"certificate_validation_disabled":true,"completed":true,"error_types":{},"leaf_certificate_count":1,"leaf_certificate_sha256":"c14d6f3eda27dcd7e8c8a44c18844f8009b4f23a74ab82d49475f138ddef0b93","leaf_set_sha256":"620f5c3147455134d92b987f4f0c17c97663931b52966c15d089b43e1e452c1b","protocols":["TLSv1.3"],"success_count":1},"verified":false,"verified_leaf_certificate_sha256":null,"verified_protocol":null,"verified_success_count":0,"verify_codes":{"18":1}}},"public_proxy_changed":false,"rc":1,"read_only":true,"ready_for_apply":false,"rollback_restored":null,"rollback_started":false,"sanitized":true,"schema":1,"secret_files_read":false,"secrets_included":false,"source_contents_returned":false,"status":"FAIL","tls_state":"SELF_SIGNED","transport":{"core":{"config_view":"service-view","mode":"DIRECT_QGA","private_addresses_returned":false,"qga_step_count":6,"qga_step_set_sha256":"a6de7376a5c2b8f65e8c36707819b76c729470e9894c1d635d759048c55e154b","remote_rc":0,"remote_stdout_bytes":2807,"remote_stdout_sha256":"51eca8f40d23e6b44f0836dfa95e6b8ab9d0fe358729f64c053a8515484d2267","socket_view":"service-view","vm_name":"core-apps","vmid":170},"edge":{"config_view":"service-view","mode":"STRICT_SSH_TO_OWNING_NODE_THEN_DIRECT_QGA","node":"pve03","private_addresses_returned":false,"qga_step_count":10,"qga_step_set_sha256":"3ce254f32a54702dfffe8d7506f32d5b7fef3671afd76280c1cb5ccd1e85c96e","remote_rc":1,"remote_stdout_bytes":4825,"remote_stdout_sha256":"a46985e99ba1160268e81e1f6c920fb294d68491f014d29a084ef9674daae8aa","socket_view":"service-view","ssh_rc":0,"vm_name":"edge-vm","vmid":130}}}
+HOMELAB_RESULT_CONTRACT={"changes_made":false,"command_id":"HOMEPAGE-NEWFILYA-PUBLIC-TLS-READ-ONLY-PLAN-FIX2-V11-20260804T094000Z","mutation_outcome":"NO_MUTATION","rollback_restored":null,"rollback_started":false,"status":"FAIL","version":1}
+{"PLAN_SHA256":null,"action":null,"blockers":["CERTBOT_ACCOUNT_MISSING","CERTBOT_METADATA_NOT_READY","CERTBOT_NOT_READY","CERTBOT_PERSISTENT_WEBROOT_NOT_SELECTED","CURRENT_SELF_SIGNED_CERTIFICATE_NOT_VALID_NOW","EDGE_EFFECTIVE_ACME_ROUTE_NOT_PROVEN","EDGE_PREFLIGHT_FAILURE_OUTSIDE_ALLOWLIST","EDGE_PRIVATE_KEY_PRIVACY_INVALID","EDGE_ROUTE_PRIVACY_CONTRACT_INVALID","NEWFILYA_EDGE_CERTIFICATE_NOT_IDENTIFIED","NEWFILYA_EDGE_PRIVATE_KEY_MISSING","NEWFILYA_PROXY_ACME_ROUTE_NOT_READY","NEWFILYA_PROXY_ROUTE_NOT_UNIQUE","NEWFILYA_PROXY_ROUTE_RISKY_DIRECTIVES","NEWFILYA_PUBLIC_RESPONSE_INVALID","NEWFILYA_UPSTREAM_NOT_CONFIGURED","NEWFILYA_UPSTREAM_SHAPE_INVALID","NPMPLUS_CONFIG_NOT_READY","NPMPLUS_NOT_HEALTHY","PUBLIC_EDGE_CERTIFICATE_MISMATCH"],"body_returned":false,"certificate_changed":false,"certificate_contents_returned":false,"changes_made":false,"command_id":"HOMEPAGE-NEWFILYA-PUBLIC-TLS-READ-ONLY-PLAN-FIX2-V11-20260804T094000Z","container_restarted":false,"control_plane_error":null,"desired_state_changed":false,"diagnosis":"NEWFILYA_PUBLIC_TLS_PLAN_BLOCKED","dns_changed":false,"duration_ms":3164,"edge":{"certbot_account_count":null,"certbot_account_path_set_sha256":null,"certbot_available":null,"certbot_config_metadata_exact":null,"certbot_config_stat_sha256":null,"certbot_root_kind":null,"certbot_selected_webroot":null,"certbot_selected_webroot_sha256":null,"certbot_strategy":null,"certbot_webroot_metadata_exact":null,"certificate_config_path_sha256":null,"certificate_configured":null,"certificate_covers_domain":null,"certificate_path_sha256":null,"certificate_private_key_read":null,"certificate_remaining_seconds_bucket":null,"certificate_sha256":null,"certificate_valid_now":null,"command_audit_count":14,"command_audit_output_returned":false,"command_audit_stage_set_sha256":"fd877d1138be7b704e1309015bd27cfc6388acc0c84a13cd85cf94a1aac0b68a","diagnosis":"EDGE_PREFLIGHT_EXCEPTION","domain_match_count":null,"effective_nginx_bytes":null,"effective_nginx_sha256":null,"failed_checks":[],"failed_checks_allowlisted":false,"failure_evidence":{"errno":null,"message_bytes":55,"message_sha256":"e1113f6f16265ce603b8123c8d38d4bb5d395acf458ff0531003ce72605916b5","type":"AttributeError"},"key_content_read":null,"key_exists":null,"key_path_sha256":null,"nginx_test_rc":null,"npmplus_container_id_sha256":null,"npmplus_data_mount_exact":null,"npmplus_health":null,"npmplus_image_sha256":null,"npmplus_running":null,"npmplus_started_at_sha256":null,"ok":false,"persistent_acme_http_route_count":null,"persistent_acme_http_route_present":null,"primary_certificate_path_states":{},"primary_certificate_paths_absent":null,"private_addresses_included":false,"proxy_file_count":null,"proxy_tree_sha256":null,"route_bytes":null,"route_content_returned":null,"route_domain_exact":null,"route_filename":null,"route_persistent_acme_root_count":null,"route_private_addresses_returned":null,"route_risky_directives":null,"route_safe_acme_allow":null,"route_sha256":null,"secret_files_read":false,"secrets_included":false,"status":"FAIL","upstream_host_configured":null,"upstream_host_sha256":null,"upstream_port":null,"upstream_proxy_pass_present":null,"upstream_scheme":null,"upstream_style":null},"gate":"BLOCKED","gitea_changed":false,"homepage":{"backup_bytes":12005,"backup_mode":"0o600","backup_sha256":"6468974ef09b3d9899bae5df4d8a7fa711d6cf16edda00b116747192277dcb2c","card_count":65,"contains_private_dispatch_material":false,"failed_checks":[],"group_count":7,"hbarhub_card_exact":true,"homepage_api_sha256":"a1ece968406ec5ce5ba02197d5270d1e3ce34da451a69cc3cc5f38b6081ada0d","homepage_api_target_href_counts":{"hbarhub.ru":1,"newfilya.ru":1},"homepage_image_id_sha256":"242e6332e372aaffcf7c821cff66dcbc12c42b2cd4ae282db9533b640892ac79","homepage_image_reference_sha256":"b0c046cffbc1a48af0e6b240575c63b6f405debba0b2c50fa190616b5ea62808","homepage_mount_exact":true,"homepage_restart_count":0,"newfilya_card_exact":true,"newfilya_monitor_enabled":false,"ok":true,"secret_file_read":false,"secrets_included":false,"services_bytes":12308,"services_sha256":"0b7360dc34b9bd3e25073eae449f3c0c5a6609f7eb9f4bb2feca72b6e04fc928","services_structure_sha256":"eff9a7e610218ffdd092d704d2fcfad357db5d3b75ee0cc584c606ae4ee61f82","source_contents_returned":false,"status":"OK","target_href_counts":{"hbarhub.ru":1,"newfilya.ru":1}},"homepage_changed":false,"mutation_outcome":"NO_MUTATION","next_stage":"NEWFILYA_PUBLIC_TLS_PLAN_FIX","npmplus_reloaded":false,"parent_v10_failure_evidence":{"capsule_bytes":91586,"capsule_sha256":"e459b6b04c842ec43e23d44935163c488460d529ee456a14906e4bfb8a5f79c2","changes_made":false,"command_id":"HOMEPAGE-NEWFILYA-PUBLIC-TLS-READ-ONLY-PLAN-FIX1-V10-20260804T092000Z","command_sha256":"eb8cae611596457796446a6f7e06c46315bdbaf5b72d87a9b3371ae67da603b5","diagnosis":"NEWFILYA_PUBLIC_TLS_PLAN_BLOCKED","edge_remote_rc":1,"edge_remote_stdout_bytes":4825,"edge_remote_stdout_sha256":"a46985e99ba1160268e81e1f6c920fb294d68491f014d29a084ef9674daae8aa","gate":"BLOCKED","mutation_outcome":"NO_MUTATION","output_sha256":"f03ab62f3c66920f27ac5aa0b8ad278bac481236138ff8167c3ea0bd4c3f410e","public_leaf_certificate_sha256":"c14d6f3eda27dcd7e8c8a44c18844f8009b4f23a74ab82d49475f138ddef0b93","rc":1,"rollback_restored":null,"rollback_started":false,"services_sha256":"0b7360dc34b9bd3e25073eae449f3c0c5a6609f7eb9f4bb2feca72b6e04fc928","status":"FAIL","tls_state":"SELF_SIGNED"},"parent_v8_evidence":{"capsule_bytes":119374,"capsule_sha256":"e5689bf4a8cfd99f2b0b7427936018d7c4f82ef535ca3b2046f87311fd829418","card_count":65,"changes_made":true,"command_id":"HOMEPAGE-ADD-NEWFILYA-HBARHUB-ATOMIC-LIVE-APPLY-INDENT-FIX1-V8-20260804T083000Z","gate":"APPLIED_AND_VERIFIED","group_count":7,"hbarhub_monitor_enabled":true,"mutation_outcome":"MUTATED","newfilya_monitor_enabled":false,"output_sha256":"0b8fccd5235c8a460a5c477a1747b03299c0f908310f029e728afe9cd6c2e706","rc":0,"rollback_restored":null,"rollback_started":false,"runner_command_sha256":"a253ded2c86ff0445c7317080bc94c7138dc71ad20bd7bf9452e161aff8efbb1","services_bytes":12308,"services_sha256":"0b7360dc34b9bd3e25073eae449f3c0c5a6609f7eb9f4bb2feca72b6e04fc928","services_structure_sha256":"eff9a7e610218ffdd092d704d2fcfad357db5d3b75ee0cc584c606ae4ee61f82","status":"OK","target_href_counts":{"hbarhub.ru":1,"newfilya.ru":1}},"parent_v9_failure_evidence":{"capsule_bytes":90705,"capsule_sha256":"8e3918d06c8dda6e27c54836d71f1bcfed9b51bb5b006ae8525815cd287841e7","changes_made":false,"command_id":"HOMEPAGE-NEWFILYA-PUBLIC-TLS-READ-ONLY-PLAN-V9-20260804T090000Z","command_sha256":"214195c7f7e365f8d2d20e31115a8d17b8fded41ef72c9c8a5d6e1f478d98059","diagnosis":"CONTROL_PLANE_EXCEPTION","failure_type":"TypeError","mutation_outcome":"NO_MUTATION","output_sha256":"8e9abfc55dc183e11da09fa973e9b1cd121b991eab0294aa10471911bf7c6a16","rc":1,"rollback_restored":null,"rollback_started":false,"status":"FAIL"},"plan":{"action":null,"apply_scope":{"certificate_domain_count":1,"certificate_strategy":"PRIMARY_NAME_IF_ABSENT_ELSE_NEW_ISOLATED_LINEAGE","desired_state_changes":false,"dns_changes":false,"edge_vm_restart_forbidden":true,"first_mutation":"HOMEPAGE_MONITOR_ONLY","gitea_changes":false,"homepage_restart_forbidden":true,"homepage_site_monitor_lines_added_eventually":1,"nginx_config_test_required":true,"nginx_reload_allowed":false,"npmplus_restart_forbidden":true,"other_homepage_cards_changed":0,"private_addresses_in_output":false,"private_keys_read":false,"proxy_directives_allowed":["ssl_certificate","ssl_certificate_key"],"selected_proxy_file_count":1},"domain":"newfilya.ru","edge_lock":{"certbot_account_count":null,"certbot_account_path_set_sha256":null,"certbot_available":null,"certbot_config_metadata_exact":null,"certbot_config_stat_sha256":null,"certbot_root_kind":null,"certbot_selected_webroot":null,"certbot_selected_webroot_sha256":null,"certbot_strategy":null,"certbot_webroot_metadata_exact":null,"certificate_config_path_sha256":null,"certificate_configured":null,"certificate_covers_domain":null,"certificate_path_sha256":null,"certificate_private_key_read":null,"certificate_remaining_seconds_bucket":null,"certificate_sha256":null,"certificate_valid_now":null,"command_audit_count":14,"command_audit_output_returned":false,"command_audit_stage_set_sha256":"fd877d1138be7b704e1309015bd27cfc6388acc0c84a13cd85cf94a1aac0b68a","diagnosis":"EDGE_PREFLIGHT_EXCEPTION","domain_match_count":null,"effective_nginx_bytes":null,"effective_nginx_sha256":null,"failed_checks":[],"failed_checks_allowlisted":false,"failure_evidence":{"errno":null,"message_bytes":55,"message_sha256":"e1113f6f16265ce603b8123c8d38d4bb5d395acf458ff0531003ce72605916b5","type":"AttributeError"},"key_content_read":null,"key_exists":null,"key_path_sha256":null,"nginx_test_rc":null,"npmplus_container_id_sha256":null,"npmplus_data_mount_exact":null,"npmplus_health":null,"npmplus_image_sha256":null,"npmplus_running":null,"npmplus_started_at_sha256":null,"ok":false,"persistent_acme_http_route_count":null,"persistent_acme_http_route_present":null,"primary_certificate_path_states":{},"primary_certificate_paths_absent":null,"private_addresses_included":false,"proxy_file_count":null,"proxy_tree_sha256":null,"route_bytes":null,"route_content_returned":null,"route_domain_exact":null,"route_filename":null,"route_persistent_acme_root_count":null,"route_private_addresses_returned":null,"route_risky_directives":null,"route_safe_acme_allow":null,"route_sha256":null,"secret_files_read":false,"secrets_included":false,"status":"FAIL","upstream_host_configured":null,"upstream_host_sha256":null,"upstream_port":null,"upstream_proxy_pass_present":null,"upstream_scheme":null,"upstream_style":null},"homepage_lock":{"backup_bytes":12005,"backup_mode":"0o600","backup_sha256":"6468974ef09b3d9899bae5df4d8a7fa711d6cf16edda00b116747192277dcb2c","card_count":65,"contains_private_dispatch_material":false,"failed_checks":[],"group_count":7,"hbarhub_card_exact":true,"homepage_api_sha256":"a1ece968406ec5ce5ba02197d5270d1e3ce34da451a69cc3cc5f38b6081ada0d","homepage_api_target_href_counts":{"hbarhub.ru":1,"newfilya.ru":1},"homepage_image_id_sha256":"242e6332e372aaffcf7c821cff66dcbc12c42b2cd4ae282db9533b640892ac79","homepage_image_reference_sha256":"b0c046cffbc1a48af0e6b240575c63b6f405debba0b2c50fa190616b5ea62808","homepage_mount_exact":true,"homepage_restart_count":0,"newfilya_card_exact":true,"newfilya_monitor_enabled":false,"ok":true,"secret_file_read":false,"secrets_included":false,"services_bytes":12308,"services_sha256":"0b7360dc34b9bd3e25073eae449f3c0c5a6609f7eb9f4bb2feca72b6e04fc928","services_structure_sha256":"eff9a7e610218ffdd092d704d2fcfad357db5d3b75ee0cc584c606ae4ee61f82","source_contents_returned":false,"status":"OK","target_href_counts":{"hbarhub.ru":1,"newfilya.ru":1}},"next_stage":"NEWFILYA_PUBLIC_TLS_PLAN_FIX","operation":"NEWFILYA_PUBLIC_TLS_THEN_HOMEPAGE_MONITOR","parent_v8_evidence":{"capsule_bytes":119374,"capsule_sha256":"e5689bf4a8cfd99f2b0b7427936018d7c4f82ef535ca3b2046f87311fd829418","card_count":65,"changes_made":true,"command_id":"HOMEPAGE-ADD-NEWFILYA-HBARHUB-ATOMIC-LIVE-APPLY-INDENT-FIX1-V8-20260804T083000Z","gate":"APPLIED_AND_VERIFIED","group_count":7,"hbarhub_monitor_enabled":true,"mutation_outcome":"MUTATED","newfilya_monitor_enabled":false,"output_sha256":"0b8fccd5235c8a460a5c477a1747b03299c0f908310f029e728afe9cd6c2e706","rc":0,"rollback_restored":null,"rollback_started":false,"runner_command_sha256":"a253ded2c86ff0445c7317080bc94c7138dc71ad20bd7bf9452e161aff8efbb1","services_bytes":12308,"services_sha256":"0b7360dc34b9bd3e25073eae449f3c0c5a6609f7eb9f4bb2feca72b6e04fc928","services_structure_sha256":"eff9a7e610218ffdd092d704d2fcfad357db5d3b75ee0cc584c606ae4ee61f82","status":"OK","target_href_counts":{"hbarhub.ru":1,"newfilya.ru":1}},"predecessor_v10_failure_evidence":{"capsule_bytes":91586,"capsule_sha256":"e459b6b04c842ec43e23d44935163c488460d529ee456a14906e4bfb8a5f79c2","changes_made":false,"command_id":"HOMEPAGE-NEWFILYA-PUBLIC-TLS-READ-ONLY-PLAN-FIX1-V10-20260804T092000Z","command_sha256":"eb8cae611596457796446a6f7e06c46315bdbaf5b72d87a9b3371ae67da603b5","diagnosis":"NEWFILYA_PUBLIC_TLS_PLAN_BLOCKED","edge_remote_rc":1,"edge_remote_stdout_bytes":4825,"edge_remote_stdout_sha256":"a46985e99ba1160268e81e1f6c920fb294d68491f014d29a084ef9674daae8aa","gate":"BLOCKED","mutation_outcome":"NO_MUTATION","output_sha256":"f03ab62f3c66920f27ac5aa0b8ad278bac481236138ff8167c3ea0bd4c3f410e","public_leaf_certificate_sha256":"c14d6f3eda27dcd7e8c8a44c18844f8009b4f23a74ab82d49475f138ddef0b93","rc":1,"rollback_restored":null,"rollback_started":false,"services_sha256":"0b7360dc34b9bd3e25073eae449f3c0c5a6609f7eb9f4bb2feca72b6e04fc928","status":"FAIL","tls_state":"SELF_SIGNED"},"predecessor_v9_failure_evidence":{"capsule_bytes":90705,"capsule_sha256":"8e3918d06c8dda6e27c54836d71f1bcfed9b51bb5b006ae8525815cd287841e7","changes_made":false,"command_id":"HOMEPAGE-NEWFILYA-PUBLIC-TLS-READ-ONLY-PLAN-V9-20260804T090000Z","command_sha256":"214195c7f7e365f8d2d20e31115a8d17b8fded41ef72c9c8a5d6e1f478d98059","diagnosis":"CONTROL_PLANE_EXCEPTION","failure_type":"TypeError","mutation_outcome":"NO_MUTATION","output_sha256":"8e9abfc55dc183e11da09fa973e9b1cd121b991eab0294aa10471911bf7c6a16","rc":1,"rollback_restored":null,"rollback_started":false,"status":"FAIL"},"public_lock":{"acme_http":{"completed":true,"final_hop":{"body_bytes":124,"body_sha256":"8cdc5c9588e8cc315d89a7c73f1bea4d41f8d68ae165756df0ec4a7db6a49892","certificate_validation_disabled":true,"completed":true,"header_values_returned":false,"location_present":false,"status":404},"first_hop":{"body_bytes":140,"body_sha256":"367cbd2bd4bb3ccdbff9b81ad94e4c1d9c66ee80e9df3ffcd7080f2000cbac6a","completed":true,"header_values_returned":false,"location_matches_expected_https":true,"location_present":true,"status":301},"header_values_returned":false,"path_sha256":"ebb00f520143e8a70afa9836f017f0f2739e4b125abe4dac843212401e36a6b8","redirect_count":1,"route_model":"HTTP_TO_HTTPS_404","route_proven":true},"addresses_returned":false,"anchor_dns":{"address_set_sha256":"c76b6b888b15b83623f3fc36fe6617dc24550f6b09b0d8f73c92ea22016e3a13","addresses_returned":false,"public_target_count":1,"record_count":1,"resolved":true},"body_returned":false,"certificate_contents_returned":false,"dns":{"address_set_sha256":"c76b6b888b15b83623f3fc36fe6617dc24550f6b09b0d8f73c92ea22016e3a13","addresses_returned":false,"families":["IPv4"],"public_target_count":1,"record_count":1,"rejected_non_public_count":0,"resolved":true},"dns_matches_hbarhub_anchor":true,"http":{"bad_gateway":false,"body_bytes":140,"body_sha256":"367cbd2bd4bb3ccdbff9b81ad94e4c1d9c66ee80e9df3ffcd7080f2000cbac6a","completed":true,"connection_mode":"PINNED_GLOBAL_TARGET","header_values_returned":false,"npmplus_default":false,"redirects_to_expected_https":true,"status":301},"https_unverified":{"bad_gateway":false,"body_bytes":2056,"body_returned":false,"body_sha256":"808dfeea0cf787d85e03645e62ab18b97ab8138924420966413edcfe22ef4879","certificate_validation_disabled":true,"completed":true,"connection_mode":"PINNED_GLOBAL_TARGET_WITH_SNI","leaf_certificate_sha256":"c14d6f3eda27dcd7e8c8a44c18844f8009b4f23a74ab82d49475f138ddef0b93","npmplus_default":true,"status":200},"tcp_443":{"addresses_returned":false,"attempt_count":1,"error_types":{},"reachable":true,"success_count":1},"tls_443":{"addresses_returned":false,"attempt_count":1,"certificate_contents_returned":false,"unverified":{"certificate_contents_returned":false,"certificate_validation_disabled":true,"completed":true,"error_types":{},"leaf_certificate_count":1,"leaf_certificate_sha256":"c14d6f3eda27dcd7e8c8a44c18844f8009b4f23a74ab82d49475f138ddef0b93","leaf_set_sha256":"620f5c3147455134d92b987f4f0c17c97663931b52966c15d089b43e1e452c1b","protocols":["TLSv1.3"],"success_count":1},"verified":false,"verified_leaf_certificate_sha256":null,"verified_protocol":null,"verified_success_count":0,"verify_codes":{"18":1}}},"rollback_requirements":["backup selected proxy config before TLS path swap","remove only newly created certbot lineage when apply fails","restore proxy config byte-for-byte and validate nginx before reload","enable Homepage monitoring only after trusted public TLS is verified"],"schema":1},"private_addresses_included":false,"private_keys_read":false,"production_site_changed":false,"public":{"acme_http":{"completed":true,"final_hop":{"body_bytes":124,"body_sha256":"8cdc5c9588e8cc315d89a7c73f1bea4d41f8d68ae165756df0ec4a7db6a49892","certificate_validation_disabled":true,"completed":true,"header_values_returned":false,"location_present":false,"status":404},"first_hop":{"body_bytes":140,"body_sha256":"367cbd2bd4bb3ccdbff9b81ad94e4c1d9c66ee80e9df3ffcd7080f2000cbac6a","completed":true,"header_values_returned":false,"location_matches_expected_https":true,"location_present":true,"status":301},"header_values_returned":false,"path_sha256":"ebb00f520143e8a70afa9836f017f0f2739e4b125abe4dac843212401e36a6b8","redirect_count":1,"route_model":"HTTP_TO_HTTPS_404","route_proven":true},"addresses_returned":false,"anchor_dns":{"address_set_sha256":"c76b6b888b15b83623f3fc36fe6617dc24550f6b09b0d8f73c92ea22016e3a13","addresses_returned":false,"public_target_count":1,"record_count":1,"resolved":true},"body_returned":false,"certificate_contents_returned":false,"dns":{"address_set_sha256":"c76b6b888b15b83623f3fc36fe6617dc24550f6b09b0d8f73c92ea22016e3a13","addresses_returned":false,"families":["IPv4"],"public_target_count":1,"record_count":1,"rejected_non_public_count":0,"resolved":true},"dns_matches_hbarhub_anchor":true,"http":{"bad_gateway":false,"body_bytes":140,"body_sha256":"367cbd2bd4bb3ccdbff9b81ad94e4c1d9c66ee80e9df3ffcd7080f2000cbac6a","completed":true,"connection_mode":"PINNED_GLOBAL_TARGET","header_values_returned":false,"npmplus_default":false,"redirects_to_expected_https":true,"status":301},"https_unverified":{"bad_gateway":false,"body_bytes":2056,"body_returned":false,"body_sha256":"808dfeea0cf787d85e03645e62ab18b97ab8138924420966413edcfe22ef4879","certificate_validation_disabled":true,"completed":true,"connection_mode":"PINNED_GLOBAL_TARGET_WITH_SNI","leaf_certificate_sha256":"c14d6f3eda27dcd7e8c8a44c18844f8009b4f23a74ab82d49475f138ddef0b93","npmplus_default":true,"status":200},"tcp_443":{"addresses_returned":false,"attempt_count":1,"error_types":{},"reachable":true,"success_count":1},"tls_443":{"addresses_returned":false,"attempt_count":1,"certificate_contents_returned":false,"unverified":{"certificate_contents_returned":false,"certificate_validation_disabled":true,"completed":true,"error_types":{},"leaf_certificate_count":1,"leaf_certificate_sha256":"c14d6f3eda27dcd7e8c8a44c18844f8009b4f23a74ab82d49475f138ddef0b93","leaf_set_sha256":"620f5c3147455134d92b987f4f0c17c97663931b52966c15d089b43e1e452c1b","protocols":["TLSv1.3"],"success_count":1},"verified":false,"verified_leaf_certificate_sha256":null,"verified_protocol":null,"verified_success_count":0,"verify_codes":{"18":1}}},"public_proxy_changed":false,"rc":1,"read_only":true,"ready_for_apply":false,"rollback_restored":null,"rollback_started":false,"sanitized":true,"schema":1,"secret_files_read":false,"secrets_included":false,"source_contents_returned":false,"status":"FAIL","tls_state":"SELF_SIGNED","transport":{"core":{"config_view":"service-view","mode":"DIRECT_QGA","private_addresses_returned":false,"qga_step_count":6,"qga_step_set_sha256":"2b45c8caf92db65327124be11f433d366a3a1aeb2a519cc98812a6d73bfe0d58","remote_rc":0,"remote_stdout_bytes":2806,"remote_stdout_sha256":"3f9ebf7e463b2268c06a5f467fc6307d749817f737f1918934748c54983f0bf9","socket_view":"service-view","vm_name":"core-apps","vmid":170},"edge":{"config_view":"service-view","mode":"STRICT_SSH_TO_OWNING_NODE_THEN_DIRECT_QGA","node":"pve03","private_addresses_returned":false,"qga_step_count":10,"qga_step_set_sha256":"a45bdf0fa92e1fcd90726974350deb0e9a26c4b65e3ae7719c8615919e0bbde6","remote_rc":1,"remote_stdout_bytes":4825,"remote_stdout_sha256":"0f25798ade036d428a9eb8fe98687d511de833d44eee7198b0f972b02daf385b","socket_view":"service-view","ssh_rc":0,"vm_name":"edge-vm","vmid":130}}}
 
 OUTPUT_END
 CHAT_OUTPUT_END