diff --git a/runtime/history/HOMELAB-READER-V3-STORAGE-CONTRACT-AUDIT-375.json b/runtime/history/HOMELAB-READER-V3-STORAGE-CONTRACT-AUDIT-375.json
new file mode 100644
index 0000000..9ed8757
--- /dev/null
+++ b/runtime/history/HOMELAB-READER-V3-STORAGE-CONTRACT-AUDIT-375.json
@@ -0,0 +1,30 @@
+{
+  "schema_version": 1,
+  "channel": "homelab-runtime",
+  "command_id": "HOMELAB-READER-V3-STORAGE-CONTRACT-AUDIT-375",
+  "status": "OK",
+  "rc": 0,
+  "host": "pve01",
+  "mode": "read-only",
+  "component": "cluster-audit",
+  "started_at_utc": "2026-07-23T16:15:59Z",
+  "finished_at_utc": "2026-07-23T16:15:59Z",
+  "reference_register_checked": true,
+  "reference_sha256": "5763f2f8edc75fcf6f3951f8c95896d1cc112ceccb6cf5b64a383f540a4deb8e",
+  "error_register_checked": true,
+  "error_register_sha256": "08b3a769b8e38eaa1acec915352fb328180d70caa7ff6cd9d1ec0da426262752",
+  "command_sha256": "7a9dc5ecf6ec239bf61ccf2a67f6b3238f06106fe9ff6ff7c5442f76dd566e20",
+  "duplicate_failed_command_blocked": false,
+  "block_reason": null,
+  "execution_started": true,
+  "changes_made": false,
+  "sanitized": true,
+  "secrets_included": false,
+  "private_addresses_included": false,
+  "raw_evidence_retained_locally": true,
+  "raw_evidence_sha256": "520e76d1ea9c69ce029685bd7089a4d2b361287d3133004063ec0fd5adc97ee3",
+  "sanitized_output_sha256": "3bbc00cf03cf0b7088f1551454d01bf5f982791084f4c03918afecbe2986f1e9",
+  "output_truncated_in_json": false,
+  "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
+  "output": "DETAIL=READER_SHA256=092780e76ff18dfe2920c51f8b97dd09d194fd6cbdb59c3755c9fbf6530f3536\nDETAIL=LINKED_SHA256=efa9fce3c768e6e0650903ca14fe4b6d5319d57f20ec87c465a4a00cb300d4e0\nDETAIL=SOURCE_SYNTAX_AND_INTEGRITY=PASS\nDETAIL=READER_STORAGE_SOURCE_BEGIN\nDETAIL=READER_LINE=1|#!/usr/bin/python3\nDETAIL=READER_LINE=2|import hashlib\nDETAIL=READER_LINE=3|import http.server\nDETAIL=READER_LINE=4|import json\nDETAIL=READER_LINE=5|import os\nDETAIL=READER_LINE=6|import pathlib\nDETAIL=READER_LINE=7|import re\nDETAIL=READER_LINE=8|import sys\nDETAIL=READER_LINE=9|\nDETAIL=READER_LINE=10|ROOT=pathlib.Path(\"/var/lib/homelab-reader-v3\")\nDETAIL=READER_LINE=11|MANIFEST=ROOT/\"manifest.json\"\nDETAIL=READER_LINE=12|RESULTS=ROOT/\"results\"\nDETAIL=READER_LINE=13|CAPABILITY=os.environ[\"HOMELAB_READER_CAPABILITY\"]\nDETAIL=READER_LINE=14|PORT=int(os.environ.get(\"HOMELAB_READER_PORT\",\"18788\"))\nDETAIL=READER_LINE=15|RESULT_RE=re.compile(r\"^[A-Za-z0-9][A-Za-z0-9._-]{0,127}-[0-9a-f]{64}\\.txt$\")\nDETAIL=READER_LINE=16|\nDETAIL=READER_LINE=17|class Handler(http.server.BaseHTTPRequestHandler):\nDETAIL=READER_LINE=18|    server_version=\"HomelabReader/3\"\nDETAIL=READER_LINE=19|\nDETAIL=READER_LINE=20|    def log_message(self,fmt,*args):\nDETAIL=READER_LINE=21|        sys.stderr.write(\"%s - %s\\n\"%(self.address_string(),fmt%args))\nDETAIL=READER_LINE=22|\nDETAIL=READER_LINE=23|    def reply(self,status,content_type,payload,etag=\"\",include_body=True):\nDETAIL=READER_LINE=24|        self.send_response(status)\nDETAIL=READER_LINE=25|        self.send_header(\"Content-Type\",content_type)\nDETAIL=READER_LINE=26|        self.send_header(\"Content-Length\",str(len(payload)))\nDETAIL=READER_LINE=27|        self.send_header(\"Cache-Control\",\"no-store, no-cache, must-revalidate, max-age=0\")\nDETAIL=READER_LINE=28|        self.send_header(\"Surrogate-Control\",\"no-store\")\nDETAIL=READER_LINE=29|        self.send_header(\"Pragma\",\"no-cache\")\nDETAIL=READER_LINE=30|        self.send_header(\"Expires\",\"0\")\nDETAIL=READER_LINE=31|        self.send_header(\"X-Robots-Tag\",\"noindex, nofollow, noarchive\")\nDETAIL=READER_LINE=32|        if etag:\nDETAIL=READER_LINE=33|            self.send_header(\"ETag\",chr(34)+etag+chr(34))\nDETAIL=READER_LINE=34|            self.send_header(\"X-Homelab-Generation\",etag)\nDETAIL=READER_LINE=35|        self.end_headers()\nDETAIL=READER_LINE=36|        if include_body:\nDETAIL=READER_LINE=37|            self.wfile.write(payload)\nDETAIL=READER_LINE=38|\nDETAIL=READER_LINE=39|    def do_HEAD(self):\nDETAIL=READER_LINE=40|        self.handle_reader(False)\nDETAIL=READER_LINE=41|\nDETAIL=READER_LINE=42|    def do_GET(self):\nDETAIL=READER_LINE=43|        self.handle_reader(True)\nDETAIL=READER_LINE=44|\nDETAIL=READER_LINE=45|    def handle_reader(self,include_body):\nDETAIL=READER_LINE=46|        request_path=self.path.split(\"?\",1)[0]\nDETAIL=READER_LINE=47|        prefix=\"/\"+CAPABILITY+\"/\"\nDETAIL=READER_LINE=48|        if not request_path.startswith(prefix):\nDETAIL=READER_LINE=49|            self.reply(404,\"text/plain; charset=utf-8\",b\"not found\\n\",include_body=include_body)\nDETAIL=READER_LINE=50|            return\nDETAIL=READER_LINE=51|\nDETAIL=READER_LINE=52|        relative=request_path[len(prefix):]\nDETAIL=READER_LINE=53|\nDETAIL=READER_LINE=54|        if relative==\"health\":\nDETAIL=READER_LINE=55|            self.reply(200,\"application/json; charset=utf-8\",b\"{\\\"status\\\":\\\"ok\\\",\\\"version\\\":3}\\n\",\"health-v3\",include_body)\nDETAIL=READER_LINE=56|            return\nDETAIL=READER_LINE=57|\nDETAIL=READER_LINE=58|        if relative==\"feed\":\nDETAIL=READER_LINE=59|            try:\nDETAIL=READER_LINE=60|                payload=MANIFEST.read_bytes()\nDETAIL=READER_LINE=61|                document=json.loads(payload.decode(\"utf-8\"))\nDETAIL=READER_LINE=62|                generation=str(document.get(\"generation\",\"0\"))\nDETAIL=READER_LINE=63|                self.reply(200,\"application/json; charset=utf-8\",payload,generation,include_body)\nDETAIL=READER_LINE=64|            except Exception:\nDETAIL=READER_LINE=65|                self.reply(500,\"text/plain; charset=utf-8\",b\"reader error\\n\",include_body=include_body)\nDETAIL=READER_LINE=66|            return\nDETAIL=READER_LINE=67|\nDETAIL=READER_LINE=68|        if relative.startswith(\"results/\"):\nDETAIL=READER_LINE=69|            name=relative[len(\"results/\"):]\nDETAIL=READER_LINE=70|            target=RESULTS/name\nDETAIL=READER_LINE=71|            if not RESULT_RE.fullmatch(name) or not target.is_file():\nDETAIL=READER_LINE=72|                self.reply(404,\"text/plain; charset=utf-8\",b\"not found\\n\",include_body=include_body)\nDETAIL=READER_LINE=73|                return\nDETAIL=READER_LINE=74|            try:\nDETAIL=READER_LINE=75|                payload=target.read_bytes()\nDETAIL=READER_LINE=76|                digest=name.rsplit(\"-\",1)[1][:-4]\nDETAIL=READER_LINE=77|                if hashlib.sha256(payload).hexdigest()!=digest:\nDETAIL=READER_LINE=78|                    self.reply(500,\"text/plain; charset=utf-8\",b\"integrity error\\n\",include_body=include_body)\nDETAIL=READER_LINE=79|                    return\nDETAIL=READER_LINE=80|                self.reply(200,\"text/plain; charset=utf-8\",payload,digest,include_body)\nDETAIL=READER_LINE=81|            except Exception:\nDETAIL=READER_LINE=82|                self.reply(500,\"text/plain; charset=utf-8\",b\"reader error\\n\",include_body=include_body)\nDETAIL=READER_LINE=83|            return\nDETAIL=READER_LINE=84|\nDETAIL=READER_LINE=85|        self.reply(404,\"text/plain; charset=utf-8\",b\"not found\\n\",include_body=include_body)\nDETAIL=READER_LINE=86|\nDETAIL=READER_LINE=87|class Server(http.server.ThreadingHTTPServer):\nDETAIL=READER_LINE=88|    allow_reuse_address=True\nDETAIL=READER_LINE=89|\nDETAIL=READER_LINE=90|Server((\"[PRIVATE_IP]\",PORT),Handler).serve_forever()\nDETAIL=READER_STORAGE_SOURCE_END\nDETAIL=LINKED_SOURCE_BEGIN\nDETAIL=LINKED_LINE=1|#!/usr/bin/env bash\nDETAIL=LINKED_LINE=2|set -o pipefail\nDETAIL=LINKED_LINE=3|tmp=$(/usr/bin/mktemp)\nDETAIL=LINKED_LINE=4|trap '/usr/bin/rm -f \"$tmp\"' EXIT\nDETAIL=LINKED_LINE=5|\nDETAIL=LINKED_LINE=6|/usr/local/sbin/homelab-chat-run \"$@\" 2>&1 | /usr/bin/tee \"$tmp\"\nDETAIL=LINKED_LINE=7|rc=${PIPESTATUS[0]}\nDETAIL=LINKED_LINE=8|\nDETAIL=LINKED_LINE=9|cid=$(/usr/bin/sed -n \"s/^COMMAND_ID=//p\" \"$tmp\" | /usr/bin/tail -n 1)\nDETAIL=LINKED_LINE=10|sha=$(/usr/bin/sed -n \"s/^COMMIT_SHA=//p\" \"$tmp\" | /usr/bin/tail -n 1)\nDETAIL=LINKED_LINE=11|raw=$(/usr/bin/sed -n \"s/^LOCAL_RAW_FILE=//p\" \"$tmp\" | /usr/bin/tail -n 1)\nDETAIL=LINKED_LINE=12|\nDETAIL=LINKED_LINE=13|if [[ \"$cid\" =~ ^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$ && \"$sha\" =~ ^[0-9a-f]{40}$ ]]; then\nDETAIL=LINKED_LINE=14|    /usr/bin/printf \"COMMIT_URL=https://git.gram1.ru/homelab-admin/homelab-public-context/commit/%s\\n\" \"$sha\"\nDETAIL=LINKED_LINE=15|    /usr/bin/printf \"IMMUTABLE_RESULT_URL=https://git.gram1.ru/homelab-admin/homelab-public-context/raw/commit/%s/runtime/history/%s.txt\\n\" \"$sha\" \"$cid\"\nDETAIL=LINKED_LINE=16|fi\nDETAIL=LINKED_LINE=17|\nDETAIL=LINKED_LINE=18|/usr/bin/printf \"FAILURE_DIAGNOSTIC_BEGIN\\n\"\nDETAIL=LINKED_LINE=19|if [[ -n \"$raw\" && -r \"$raw\" ]]; then\nDETAIL=LINKED_LINE=20|    /usr/bin/grep -Ei '^(DECISION|DETAIL|FAILURE_REASON|ERROR_CODE|SOURCE_DECISION|NGINX_[A-Z0-9_]*|READER_[A-Z0-9_]*|RESULT_FEED_URL|PUBLIC_HEALTH_URL|HTTPS_[A-Z0-9_]*|LOCAL_[A-Z0-9_]*|CHANGES_MADE)=|Traceback|RuntimeError|SystemExit|FileNotFoundError|PermissionError|command not found|No such file or directory|Connection refused|failed|invalid|missing' \"$raw\" | /usr/bin/tail -n 100 || true\nDETAIL=LINKED_LINE=21|fi\nDETAIL=LINKED_LINE=22|/usr/bin/printf \"FAILURE_DIAGNOSTIC_END\\n\"\nDETAIL=LINKED_LINE=23|\nDETAIL=LINKED_LINE=24|exit \"$rc\"\nDETAIL=LINKED_SOURCE_END\nResult=success\nExecMainStatus=0\nExecStart={ path=/usr/bin/python3 ; argv[]=/usr/bin/python3 -B /usr/local/sbin/homelab-reader-server-v3 ; ignore_errors=no ; start_time=[Thu 2026-07-23 16:20:39 MSK] ; stop_time=[n/a] ; pid=1247 ; code=(null) ; status=0/0 }\nLoadState=loaded\nActiveState=active\nSubState=running\nFragmentPath=/etc/systemd/system/homelab-reader-v3.service\nDETAIL=PUBLIC_READER_ROUTE=feed|HTTP_STATUS=200\nDETAIL=PUBLIC_READER_ROUTE=results/HOMELAB-READER-V3-FEED-CONTRACT-AUDIT-374|HTTP_STATUS=404\nDETAIL=PUBLIC_READER_ROUTE=results/HOMELAB-READER-V3-FEED-CONTRACT-AUDIT-374.txt|HTTP_STATUS=404\nDETAIL=READER_V3_STORAGE_CONTRACT_AUDIT=PASS\nCHANGES_MADE=NO\n"
+}
diff --git a/runtime/history/HOMELAB-READER-V3-STORAGE-CONTRACT-AUDIT-375.txt b/runtime/history/HOMELAB-READER-V3-STORAGE-CONTRACT-AUDIT-375.txt
new file mode 100644
index 0000000..6e05846
--- /dev/null
+++ b/runtime/history/HOMELAB-READER-V3-STORAGE-CONTRACT-AUDIT-375.txt
@@ -0,0 +1,157 @@
+CHAT_OUTPUT_BEGIN
+COMMAND_ID=HOMELAB-READER-V3-STORAGE-CONTRACT-AUDIT-375
+STATUS=OK
+RC=0
+HOST=pve01
+MODE=read-only
+COMPONENT=cluster-audit
+REFERENCE_REGISTER_CHECK=OK
+REFERENCE_SHA256=5763f2f8edc75fcf6f3951f8c95896d1cc112ceccb6cf5b64a383f540a4deb8e
+ERROR_REGISTER_CHECK=OK
+ERROR_REGISTER_SHA256=08b3a769b8e38eaa1acec915352fb328180d70caa7ff6cd9d1ec0da426262752
+COMMAND_SHA256=7a9dc5ecf6ec239bf61ccf2a67f6b3238f06106fe9ff6ff7c5442f76dd566e20
+DUPLICATE_FAILED_COMMAND_BLOCKED=false
+EXECUTION_STARTED=true
+CHANGES_MADE=false
+SANITIZED=yes
+SECRETS_INCLUDED=no
+PRIVATE_ADDRESSES_INCLUDED=no
+RAW_EVIDENCE_SHA256=520e76d1ea9c69ce029685bd7089a4d2b361287d3133004063ec0fd5adc97ee3
+SANITIZED_OUTPUT_SHA256=3bbc00cf03cf0b7088f1551454d01bf5f982791084f4c03918afecbe2986f1e9
+OUTPUT_BEGIN
+DETAIL=READER_SHA256=092780e76ff18dfe2920c51f8b97dd09d194fd6cbdb59c3755c9fbf6530f3536
+DETAIL=LINKED_SHA256=efa9fce3c768e6e0650903ca14fe4b6d5319d57f20ec87c465a4a00cb300d4e0
+DETAIL=SOURCE_SYNTAX_AND_INTEGRITY=PASS
+DETAIL=READER_STORAGE_SOURCE_BEGIN
+DETAIL=READER_LINE=1|#!/usr/bin/python3
+DETAIL=READER_LINE=2|import hashlib
+DETAIL=READER_LINE=3|import http.server
+DETAIL=READER_LINE=4|import json
+DETAIL=READER_LINE=5|import os
+DETAIL=READER_LINE=6|import pathlib
+DETAIL=READER_LINE=7|import re
+DETAIL=READER_LINE=8|import sys
+DETAIL=READER_LINE=9|
+DETAIL=READER_LINE=10|ROOT=pathlib.Path("/var/lib/homelab-reader-v3")
+DETAIL=READER_LINE=11|MANIFEST=ROOT/"manifest.json"
+DETAIL=READER_LINE=12|RESULTS=ROOT/"results"
+DETAIL=READER_LINE=13|CAPABILITY=os.environ["HOMELAB_READER_CAPABILITY"]
+DETAIL=READER_LINE=14|PORT=int(os.environ.get("HOMELAB_READER_PORT","18788"))
+DETAIL=READER_LINE=15|RESULT_RE=re.compile(r"^[A-Za-z0-9][A-Za-z0-9._-]{0,127}-[0-9a-f]{64}\.txt$")
+DETAIL=READER_LINE=16|
+DETAIL=READER_LINE=17|class Handler(http.server.BaseHTTPRequestHandler):
+DETAIL=READER_LINE=18|    server_version="HomelabReader/3"
+DETAIL=READER_LINE=19|
+DETAIL=READER_LINE=20|    def log_message(self,fmt,*args):
+DETAIL=READER_LINE=21|        sys.stderr.write("%s - %s\n"%(self.address_string(),fmt%args))
+DETAIL=READER_LINE=22|
+DETAIL=READER_LINE=23|    def reply(self,status,content_type,payload,etag="",include_body=True):
+DETAIL=READER_LINE=24|        self.send_response(status)
+DETAIL=READER_LINE=25|        self.send_header("Content-Type",content_type)
+DETAIL=READER_LINE=26|        self.send_header("Content-Length",str(len(payload)))
+DETAIL=READER_LINE=27|        self.send_header("Cache-Control","no-store, no-cache, must-revalidate, max-age=0")
+DETAIL=READER_LINE=28|        self.send_header("Surrogate-Control","no-store")
+DETAIL=READER_LINE=29|        self.send_header("Pragma","no-cache")
+DETAIL=READER_LINE=30|        self.send_header("Expires","0")
+DETAIL=READER_LINE=31|        self.send_header("X-Robots-Tag","noindex, nofollow, noarchive")
+DETAIL=READER_LINE=32|        if etag:
+DETAIL=READER_LINE=33|            self.send_header("ETag",chr(34)+etag+chr(34))
+DETAIL=READER_LINE=34|            self.send_header("X-Homelab-Generation",etag)
+DETAIL=READER_LINE=35|        self.end_headers()
+DETAIL=READER_LINE=36|        if include_body:
+DETAIL=READER_LINE=37|            self.wfile.write(payload)
+DETAIL=READER_LINE=38|
+DETAIL=READER_LINE=39|    def do_HEAD(self):
+DETAIL=READER_LINE=40|        self.handle_reader(False)
+DETAIL=READER_LINE=41|
+DETAIL=READER_LINE=42|    def do_GET(self):
+DETAIL=READER_LINE=43|        self.handle_reader(True)
+DETAIL=READER_LINE=44|
+DETAIL=READER_LINE=45|    def handle_reader(self,include_body):
+DETAIL=READER_LINE=46|        request_path=self.path.split("?",1)[0]
+DETAIL=READER_LINE=47|        prefix="/"+CAPABILITY+"/"
+DETAIL=READER_LINE=48|        if not request_path.startswith(prefix):
+DETAIL=READER_LINE=49|            self.reply(404,"text/plain; charset=utf-8",b"not found\n",include_body=include_body)
+DETAIL=READER_LINE=50|            return
+DETAIL=READER_LINE=51|
+DETAIL=READER_LINE=52|        relative=request_path[len(prefix):]
+DETAIL=READER_LINE=53|
+DETAIL=READER_LINE=54|        if relative=="health":
+DETAIL=READER_LINE=55|            self.reply(200,"application/json; charset=utf-8",b"{\"status\":\"ok\",\"version\":3}\n","health-v3",include_body)
+DETAIL=READER_LINE=56|            return
+DETAIL=READER_LINE=57|
+DETAIL=READER_LINE=58|        if relative=="feed":
+DETAIL=READER_LINE=59|            try:
+DETAIL=READER_LINE=60|                payload=MANIFEST.read_bytes()
+DETAIL=READER_LINE=61|                document=json.loads(payload.decode("utf-8"))
+DETAIL=READER_LINE=62|                generation=str(document.get("generation","0"))
+DETAIL=READER_LINE=63|                self.reply(200,"application/json; charset=utf-8",payload,generation,include_body)
+DETAIL=READER_LINE=64|            except Exception:
+DETAIL=READER_LINE=65|                self.reply(500,"text/plain; charset=utf-8",b"reader error\n",include_body=include_body)
+DETAIL=READER_LINE=66|            return
+DETAIL=READER_LINE=67|
+DETAIL=READER_LINE=68|        if relative.startswith("results/"):
+DETAIL=READER_LINE=69|            name=relative[len("results/"):]
+DETAIL=READER_LINE=70|            target=RESULTS/name
+DETAIL=READER_LINE=71|            if not RESULT_RE.fullmatch(name) or not target.is_file():
+DETAIL=READER_LINE=72|                self.reply(404,"text/plain; charset=utf-8",b"not found\n",include_body=include_body)
+DETAIL=READER_LINE=73|                return
+DETAIL=READER_LINE=74|            try:
+DETAIL=READER_LINE=75|                payload=target.read_bytes()
+DETAIL=READER_LINE=76|                digest=name.rsplit("-",1)[1][:-4]
+DETAIL=READER_LINE=77|                if hashlib.sha256(payload).hexdigest()!=digest:
+DETAIL=READER_LINE=78|                    self.reply(500,"text/plain; charset=utf-8",b"integrity error\n",include_body=include_body)
+DETAIL=READER_LINE=79|                    return
+DETAIL=READER_LINE=80|                self.reply(200,"text/plain; charset=utf-8",payload,digest,include_body)
+DETAIL=READER_LINE=81|            except Exception:
+DETAIL=READER_LINE=82|                self.reply(500,"text/plain; charset=utf-8",b"reader error\n",include_body=include_body)
+DETAIL=READER_LINE=83|            return
+DETAIL=READER_LINE=84|
+DETAIL=READER_LINE=85|        self.reply(404,"text/plain; charset=utf-8",b"not found\n",include_body=include_body)
+DETAIL=READER_LINE=86|
+DETAIL=READER_LINE=87|class Server(http.server.ThreadingHTTPServer):
+DETAIL=READER_LINE=88|    allow_reuse_address=True
+DETAIL=READER_LINE=89|
+DETAIL=READER_LINE=90|Server(("[PRIVATE_IP]",PORT),Handler).serve_forever()
+DETAIL=READER_STORAGE_SOURCE_END
+DETAIL=LINKED_SOURCE_BEGIN
+DETAIL=LINKED_LINE=1|#!/usr/bin/env bash
+DETAIL=LINKED_LINE=2|set -o pipefail
+DETAIL=LINKED_LINE=3|tmp=$(/usr/bin/mktemp)
+DETAIL=LINKED_LINE=4|trap '/usr/bin/rm -f "$tmp"' EXIT
+DETAIL=LINKED_LINE=5|
+DETAIL=LINKED_LINE=6|/usr/local/sbin/homelab-chat-run "$@" 2>&1 | /usr/bin/tee "$tmp"
+DETAIL=LINKED_LINE=7|rc=${PIPESTATUS[0]}
+DETAIL=LINKED_LINE=8|
+DETAIL=LINKED_LINE=9|cid=$(/usr/bin/sed -n "s/^COMMAND_ID=//p" "$tmp" | /usr/bin/tail -n 1)
+DETAIL=LINKED_LINE=10|sha=$(/usr/bin/sed -n "s/^COMMIT_SHA=//p" "$tmp" | /usr/bin/tail -n 1)
+DETAIL=LINKED_LINE=11|raw=$(/usr/bin/sed -n "s/^LOCAL_RAW_FILE=//p" "$tmp" | /usr/bin/tail -n 1)
+DETAIL=LINKED_LINE=12|
+DETAIL=LINKED_LINE=13|if [[ "$cid" =~ ^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$ && "$sha" =~ ^[0-9a-f]{40}$ ]]; then
+DETAIL=LINKED_LINE=14|    /usr/bin/printf "COMMIT_URL=https://git.gram1.ru/homelab-admin/homelab-public-context/commit/%s\n" "$sha"
+DETAIL=LINKED_LINE=15|    /usr/bin/printf "IMMUTABLE_RESULT_URL=https://git.gram1.ru/homelab-admin/homelab-public-context/raw/commit/%s/runtime/history/%s.txt\n" "$sha" "$cid"
+DETAIL=LINKED_LINE=16|fi
+DETAIL=LINKED_LINE=17|
+DETAIL=LINKED_LINE=18|/usr/bin/printf "FAILURE_DIAGNOSTIC_BEGIN\n"
+DETAIL=LINKED_LINE=19|if [[ -n "$raw" && -r "$raw" ]]; then
+DETAIL=LINKED_LINE=20|    /usr/bin/grep -Ei '^(DECISION|DETAIL|FAILURE_REASON|ERROR_CODE|SOURCE_DECISION|NGINX_[A-Z0-9_]*|READER_[A-Z0-9_]*|RESULT_FEED_URL|PUBLIC_HEALTH_URL|HTTPS_[A-Z0-9_]*|LOCAL_[A-Z0-9_]*|CHANGES_MADE)=|Traceback|RuntimeError|SystemExit|FileNotFoundError|PermissionError|command not found|No such file or directory|Connection refused|failed|invalid|missing' "$raw" | /usr/bin/tail -n 100 || true
+DETAIL=LINKED_LINE=21|fi
+DETAIL=LINKED_LINE=22|/usr/bin/printf "FAILURE_DIAGNOSTIC_END\n"
+DETAIL=LINKED_LINE=23|
+DETAIL=LINKED_LINE=24|exit "$rc"
+DETAIL=LINKED_SOURCE_END
+Result=success
+ExecMainStatus=0
+ExecStart={ path=/usr/bin/python3 ; argv[]=/usr/bin/python3 -B /usr/local/sbin/homelab-reader-server-v3 ; ignore_errors=no ; start_time=[Thu 2026-07-23 16:20:39 MSK] ; stop_time=[n/a] ; pid=1247 ; code=(null) ; status=0/0 }
+LoadState=loaded
+ActiveState=active
+SubState=running
+FragmentPath=/etc/systemd/system/homelab-reader-v3.service
+DETAIL=PUBLIC_READER_ROUTE=feed|HTTP_STATUS=200
+DETAIL=PUBLIC_READER_ROUTE=results/HOMELAB-READER-V3-FEED-CONTRACT-AUDIT-374|HTTP_STATUS=404
+DETAIL=PUBLIC_READER_ROUTE=results/HOMELAB-READER-V3-FEED-CONTRACT-AUDIT-374.txt|HTTP_STATUS=404
+DETAIL=READER_V3_STORAGE_CONTRACT_AUDIT=PASS
+CHANGES_MADE=NO
+
+OUTPUT_END
+CHAT_OUTPUT_END
diff --git a/runtime/latest.json b/runtime/latest.json
index 1205ba6..9ed8757 100644
--- a/runtime/latest.json
+++ b/runtime/latest.json
@@ -1,19 +1,19 @@
 {
   "schema_version": 1,
   "channel": "homelab-runtime",
-  "command_id": "HOMELAB-READER-V3-FEED-CONTRACT-AUDIT-374",
+  "command_id": "HOMELAB-READER-V3-STORAGE-CONTRACT-AUDIT-375",
   "status": "OK",
   "rc": 0,
   "host": "pve01",
   "mode": "read-only",
   "component": "cluster-audit",
-  "started_at_utc": "2026-07-23T16:10:30Z",
-  "finished_at_utc": "2026-07-23T16:10:30Z",
+  "started_at_utc": "2026-07-23T16:15:59Z",
+  "finished_at_utc": "2026-07-23T16:15:59Z",
   "reference_register_checked": true,
   "reference_sha256": "5763f2f8edc75fcf6f3951f8c95896d1cc112ceccb6cf5b64a383f540a4deb8e",
   "error_register_checked": true,
   "error_register_sha256": "08b3a769b8e38eaa1acec915352fb328180d70caa7ff6cd9d1ec0da426262752",
-  "command_sha256": "117ab20f3b55ada28354401cd2a707f61c67b0b1ff189501492795fb36526ae6",
+  "command_sha256": "7a9dc5ecf6ec239bf61ccf2a67f6b3238f06106fe9ff6ff7c5442f76dd566e20",
   "duplicate_failed_command_blocked": false,
   "block_reason": null,
   "execution_started": true,
@@ -22,9 +22,9 @@
   "secrets_included": false,
   "private_addresses_included": false,
   "raw_evidence_retained_locally": true,
-  "raw_evidence_sha256": "b256b96004621b936d2338ec79126b6379e5097775d231a75fb1153df1709176",
-  "sanitized_output_sha256": "b256b96004621b936d2338ec79126b6379e5097775d231a75fb1153df1709176",
+  "raw_evidence_sha256": "520e76d1ea9c69ce029685bd7089a4d2b361287d3133004063ec0fd5adc97ee3",
+  "sanitized_output_sha256": "3bbc00cf03cf0b7088f1551454d01bf5f982791084f4c03918afecbe2986f1e9",
   "output_truncated_in_json": false,
   "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
-  "output": "DETAIL=READER_PROCESS_ARGV_BEGIN\nDETAIL=READER_ARG=/usr/bin/python3\nDETAIL=READER_ARG=-B\nDETAIL=READER_ARG=/usr/local/sbin/homelab-reader-server-v3\nDETAIL=READER_PROCESS_ARGV_END\nDETAIL=READER_SOURCE=/usr/local/sbin/homelab-reader-server-v3|META=root:root|755|3539|regular file|SHA256=092780e76ff18dfe2920c51f8b97dd09d194fd6cbdb59c3755c9fbf6530f3536|SHEBANG=#!/usr/bin/python3|SYNTAX=PASS_PYTHON\nPUBLIC_HEALTH_URL=https://git.gram1.ru/.well-known/homelab-reader/5a2edc1b3a3140d935e48ca0c0123849372dedff6fe55a48d25db7ab4de593b2/health\nDETAIL=PUBLIC_READER_HEALTH={\"status\":\"ok\",\"version\":3}\nDETAIL=READER_ROUTE_LITERALS_BEGIN\nDETAIL=READER_LITERAL=Cache-Control\nDETAIL=READER_LITERAL=feed\nDETAIL=READER_LITERAL=health\nDETAIL=READER_LITERAL=health-v3\nDETAIL=READER_LITERAL=no-cache\nDETAIL=READER_LITERAL=no-store, no-cache, must-revalidate, max-age=0\nDETAIL=READER_LITERAL=results\nDETAIL=READER_LITERAL=results/\nDETAIL=READER_ROUTE_LITERALS_END\nDETAIL=READER_RELEVANT_SOURCE_BEGIN\nDETAIL=READER_SOURCE_LINE=12|RESULTS=ROOT/\"results\"\nDETAIL=READER_SOURCE_LINE=27|        self.send_header(\"Cache-Control\",\"no-store, no-cache, must-revalidate, max-age=0\")\nDETAIL=READER_SOURCE_LINE=28|        self.send_header(\"Surrogate-Control\",\"no-store\")\nDETAIL=READER_SOURCE_LINE=42|    def do_GET(self):\nDETAIL=READER_SOURCE_LINE=54|        if relative==\"health\":\nDETAIL=READER_SOURCE_LINE=55|            self.reply(200,\"application/json; charset=utf-8\",b\"{\\\"status\\\":\\\"ok\\\",\\\"version\\\":3}\\n\",\"health-v3\",include_body)\nDETAIL=READER_SOURCE_LINE=58|        if relative==\"feed\":\nDETAIL=READER_SOURCE_LINE=68|        if relative.startswith(\"results/\"):\nDETAIL=READER_SOURCE_LINE=69|            name=relative[len(\"results/\"):]\nDETAIL=READER_RELEVANT_SOURCE_END\nDETAIL=LINKED_WRAPPER_FEED_LOGIC_BEGIN\nDETAIL=LINKED_SOURCE_LINE=9|cid=$(/usr/bin/sed -n \"s/^COMMAND_ID=//p\" \"$tmp\" | /usr/bin/tail -n 1)\nDETAIL=LINKED_SOURCE_LINE=15|    /usr/bin/printf \"IMMUTABLE_RESULT_URL=https://git.gram1.ru/homelab-admin/homelab-public-context/raw/commit/%s/runtime/history/%s.txt\\n\" \"$sha\" \"$cid\"\nDETAIL=LINKED_SOURCE_LINE=20|    /usr/bin/grep -Ei '^(DECISION|DETAIL|FAILURE_REASON|ERROR_CODE|SOURCE_DECISION|NGINX_[A-Z0-9_]*|READER_[A-Z0-9_]*|RESULT_FEED_URL|PUBLIC_HEALTH_URL|HTTPS_[A-Z0-9_]*|LOCAL_[A-Z0-9_]*|CHANGES_MADE)=|Traceback|RuntimeError|SystemExit|FileNotFoundError|PermissionError|command not found|No such file or directory|Connection refused|failed|invalid|missing' \"$raw\" | /usr/bin/tail -n 100 || true\nDETAIL=LINKED_WRAPPER_FEED_LOGIC_END\nDETAIL=READER_RUNNER_STORAGE_REFERENCE_COUNT=0\nDETAIL=READER_RESULT_API_MARKER_COUNT=7\nDETAIL=READER_CACHE_CONTROL_MARKER_COUNT=3\nDETAIL=READER_V3_FEED_CONTRACT_AUDIT=PASS\nCHANGES_MADE=NO\n"
+  "output": "DETAIL=READER_SHA256=092780e76ff18dfe2920c51f8b97dd09d194fd6cbdb59c3755c9fbf6530f3536\nDETAIL=LINKED_SHA256=efa9fce3c768e6e0650903ca14fe4b6d5319d57f20ec87c465a4a00cb300d4e0\nDETAIL=SOURCE_SYNTAX_AND_INTEGRITY=PASS\nDETAIL=READER_STORAGE_SOURCE_BEGIN\nDETAIL=READER_LINE=1|#!/usr/bin/python3\nDETAIL=READER_LINE=2|import hashlib\nDETAIL=READER_LINE=3|import http.server\nDETAIL=READER_LINE=4|import json\nDETAIL=READER_LINE=5|import os\nDETAIL=READER_LINE=6|import pathlib\nDETAIL=READER_LINE=7|import re\nDETAIL=READER_LINE=8|import sys\nDETAIL=READER_LINE=9|\nDETAIL=READER_LINE=10|ROOT=pathlib.Path(\"/var/lib/homelab-reader-v3\")\nDETAIL=READER_LINE=11|MANIFEST=ROOT/\"manifest.json\"\nDETAIL=READER_LINE=12|RESULTS=ROOT/\"results\"\nDETAIL=READER_LINE=13|CAPABILITY=os.environ[\"HOMELAB_READER_CAPABILITY\"]\nDETAIL=READER_LINE=14|PORT=int(os.environ.get(\"HOMELAB_READER_PORT\",\"18788\"))\nDETAIL=READER_LINE=15|RESULT_RE=re.compile(r\"^[A-Za-z0-9][A-Za-z0-9._-]{0,127}-[0-9a-f]{64}\\.txt$\")\nDETAIL=READER_LINE=16|\nDETAIL=READER_LINE=17|class Handler(http.server.BaseHTTPRequestHandler):\nDETAIL=READER_LINE=18|    server_version=\"HomelabReader/3\"\nDETAIL=READER_LINE=19|\nDETAIL=READER_LINE=20|    def log_message(self,fmt,*args):\nDETAIL=READER_LINE=21|        sys.stderr.write(\"%s - %s\\n\"%(self.address_string(),fmt%args))\nDETAIL=READER_LINE=22|\nDETAIL=READER_LINE=23|    def reply(self,status,content_type,payload,etag=\"\",include_body=True):\nDETAIL=READER_LINE=24|        self.send_response(status)\nDETAIL=READER_LINE=25|        self.send_header(\"Content-Type\",content_type)\nDETAIL=READER_LINE=26|        self.send_header(\"Content-Length\",str(len(payload)))\nDETAIL=READER_LINE=27|        self.send_header(\"Cache-Control\",\"no-store, no-cache, must-revalidate, max-age=0\")\nDETAIL=READER_LINE=28|        self.send_header(\"Surrogate-Control\",\"no-store\")\nDETAIL=READER_LINE=29|        self.send_header(\"Pragma\",\"no-cache\")\nDETAIL=READER_LINE=30|        self.send_header(\"Expires\",\"0\")\nDETAIL=READER_LINE=31|        self.send_header(\"X-Robots-Tag\",\"noindex, nofollow, noarchive\")\nDETAIL=READER_LINE=32|        if etag:\nDETAIL=READER_LINE=33|            self.send_header(\"ETag\",chr(34)+etag+chr(34))\nDETAIL=READER_LINE=34|            self.send_header(\"X-Homelab-Generation\",etag)\nDETAIL=READER_LINE=35|        self.end_headers()\nDETAIL=READER_LINE=36|        if include_body:\nDETAIL=READER_LINE=37|            self.wfile.write(payload)\nDETAIL=READER_LINE=38|\nDETAIL=READER_LINE=39|    def do_HEAD(self):\nDETAIL=READER_LINE=40|        self.handle_reader(False)\nDETAIL=READER_LINE=41|\nDETAIL=READER_LINE=42|    def do_GET(self):\nDETAIL=READER_LINE=43|        self.handle_reader(True)\nDETAIL=READER_LINE=44|\nDETAIL=READER_LINE=45|    def handle_reader(self,include_body):\nDETAIL=READER_LINE=46|        request_path=self.path.split(\"?\",1)[0]\nDETAIL=READER_LINE=47|        prefix=\"/\"+CAPABILITY+\"/\"\nDETAIL=READER_LINE=48|        if not request_path.startswith(prefix):\nDETAIL=READER_LINE=49|            self.reply(404,\"text/plain; charset=utf-8\",b\"not found\\n\",include_body=include_body)\nDETAIL=READER_LINE=50|            return\nDETAIL=READER_LINE=51|\nDETAIL=READER_LINE=52|        relative=request_path[len(prefix):]\nDETAIL=READER_LINE=53|\nDETAIL=READER_LINE=54|        if relative==\"health\":\nDETAIL=READER_LINE=55|            self.reply(200,\"application/json; charset=utf-8\",b\"{\\\"status\\\":\\\"ok\\\",\\\"version\\\":3}\\n\",\"health-v3\",include_body)\nDETAIL=READER_LINE=56|            return\nDETAIL=READER_LINE=57|\nDETAIL=READER_LINE=58|        if relative==\"feed\":\nDETAIL=READER_LINE=59|            try:\nDETAIL=READER_LINE=60|                payload=MANIFEST.read_bytes()\nDETAIL=READER_LINE=61|                document=json.loads(payload.decode(\"utf-8\"))\nDETAIL=READER_LINE=62|                generation=str(document.get(\"generation\",\"0\"))\nDETAIL=READER_LINE=63|                self.reply(200,\"application/json; charset=utf-8\",payload,generation,include_body)\nDETAIL=READER_LINE=64|            except Exception:\nDETAIL=READER_LINE=65|                self.reply(500,\"text/plain; charset=utf-8\",b\"reader error\\n\",include_body=include_body)\nDETAIL=READER_LINE=66|            return\nDETAIL=READER_LINE=67|\nDETAIL=READER_LINE=68|        if relative.startswith(\"results/\"):\nDETAIL=READER_LINE=69|            name=relative[len(\"results/\"):]\nDETAIL=READER_LINE=70|            target=RESULTS/name\nDETAIL=READER_LINE=71|            if not RESULT_RE.fullmatch(name) or not target.is_file():\nDETAIL=READER_LINE=72|                self.reply(404,\"text/plain; charset=utf-8\",b\"not found\\n\",include_body=include_body)\nDETAIL=READER_LINE=73|                return\nDETAIL=READER_LINE=74|            try:\nDETAIL=READER_LINE=75|                payload=target.read_bytes()\nDETAIL=READER_LINE=76|                digest=name.rsplit(\"-\",1)[1][:-4]\nDETAIL=READER_LINE=77|                if hashlib.sha256(payload).hexdigest()!=digest:\nDETAIL=READER_LINE=78|                    self.reply(500,\"text/plain; charset=utf-8\",b\"integrity error\\n\",include_body=include_body)\nDETAIL=READER_LINE=79|                    return\nDETAIL=READER_LINE=80|                self.reply(200,\"text/plain; charset=utf-8\",payload,digest,include_body)\nDETAIL=READER_LINE=81|            except Exception:\nDETAIL=READER_LINE=82|                self.reply(500,\"text/plain; charset=utf-8\",b\"reader error\\n\",include_body=include_body)\nDETAIL=READER_LINE=83|            return\nDETAIL=READER_LINE=84|\nDETAIL=READER_LINE=85|        self.reply(404,\"text/plain; charset=utf-8\",b\"not found\\n\",include_body=include_body)\nDETAIL=READER_LINE=86|\nDETAIL=READER_LINE=87|class Server(http.server.ThreadingHTTPServer):\nDETAIL=READER_LINE=88|    allow_reuse_address=True\nDETAIL=READER_LINE=89|\nDETAIL=READER_LINE=90|Server((\"[PRIVATE_IP]\",PORT),Handler).serve_forever()\nDETAIL=READER_STORAGE_SOURCE_END\nDETAIL=LINKED_SOURCE_BEGIN\nDETAIL=LINKED_LINE=1|#!/usr/bin/env bash\nDETAIL=LINKED_LINE=2|set -o pipefail\nDETAIL=LINKED_LINE=3|tmp=$(/usr/bin/mktemp)\nDETAIL=LINKED_LINE=4|trap '/usr/bin/rm -f \"$tmp\"' EXIT\nDETAIL=LINKED_LINE=5|\nDETAIL=LINKED_LINE=6|/usr/local/sbin/homelab-chat-run \"$@\" 2>&1 | /usr/bin/tee \"$tmp\"\nDETAIL=LINKED_LINE=7|rc=${PIPESTATUS[0]}\nDETAIL=LINKED_LINE=8|\nDETAIL=LINKED_LINE=9|cid=$(/usr/bin/sed -n \"s/^COMMAND_ID=//p\" \"$tmp\" | /usr/bin/tail -n 1)\nDETAIL=LINKED_LINE=10|sha=$(/usr/bin/sed -n \"s/^COMMIT_SHA=//p\" \"$tmp\" | /usr/bin/tail -n 1)\nDETAIL=LINKED_LINE=11|raw=$(/usr/bin/sed -n \"s/^LOCAL_RAW_FILE=//p\" \"$tmp\" | /usr/bin/tail -n 1)\nDETAIL=LINKED_LINE=12|\nDETAIL=LINKED_LINE=13|if [[ \"$cid\" =~ ^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$ && \"$sha\" =~ ^[0-9a-f]{40}$ ]]; then\nDETAIL=LINKED_LINE=14|    /usr/bin/printf \"COMMIT_URL=https://git.gram1.ru/homelab-admin/homelab-public-context/commit/%s\\n\" \"$sha\"\nDETAIL=LINKED_LINE=15|    /usr/bin/printf \"IMMUTABLE_RESULT_URL=https://git.gram1.ru/homelab-admin/homelab-public-context/raw/commit/%s/runtime/history/%s.txt\\n\" \"$sha\" \"$cid\"\nDETAIL=LINKED_LINE=16|fi\nDETAIL=LINKED_LINE=17|\nDETAIL=LINKED_LINE=18|/usr/bin/printf \"FAILURE_DIAGNOSTIC_BEGIN\\n\"\nDETAIL=LINKED_LINE=19|if [[ -n \"$raw\" && -r \"$raw\" ]]; then\nDETAIL=LINKED_LINE=20|    /usr/bin/grep -Ei '^(DECISION|DETAIL|FAILURE_REASON|ERROR_CODE|SOURCE_DECISION|NGINX_[A-Z0-9_]*|READER_[A-Z0-9_]*|RESULT_FEED_URL|PUBLIC_HEALTH_URL|HTTPS_[A-Z0-9_]*|LOCAL_[A-Z0-9_]*|CHANGES_MADE)=|Traceback|RuntimeError|SystemExit|FileNotFoundError|PermissionError|command not found|No such file or directory|Connection refused|failed|invalid|missing' \"$raw\" | /usr/bin/tail -n 100 || true\nDETAIL=LINKED_LINE=21|fi\nDETAIL=LINKED_LINE=22|/usr/bin/printf \"FAILURE_DIAGNOSTIC_END\\n\"\nDETAIL=LINKED_LINE=23|\nDETAIL=LINKED_LINE=24|exit \"$rc\"\nDETAIL=LINKED_SOURCE_END\nResult=success\nExecMainStatus=0\nExecStart={ path=/usr/bin/python3 ; argv[]=/usr/bin/python3 -B /usr/local/sbin/homelab-reader-server-v3 ; ignore_errors=no ; start_time=[Thu 2026-07-23 16:20:39 MSK] ; stop_time=[n/a] ; pid=1247 ; code=(null) ; status=0/0 }\nLoadState=loaded\nActiveState=active\nSubState=running\nFragmentPath=/etc/systemd/system/homelab-reader-v3.service\nDETAIL=PUBLIC_READER_ROUTE=feed|HTTP_STATUS=200\nDETAIL=PUBLIC_READER_ROUTE=results/HOMELAB-READER-V3-FEED-CONTRACT-AUDIT-374|HTTP_STATUS=404\nDETAIL=PUBLIC_READER_ROUTE=results/HOMELAB-READER-V3-FEED-CONTRACT-AUDIT-374.txt|HTTP_STATUS=404\nDETAIL=READER_V3_STORAGE_CONTRACT_AUDIT=PASS\nCHANGES_MADE=NO\n"
 }
diff --git a/runtime/latest.txt b/runtime/latest.txt
index 1911215..6e05846 100644
--- a/runtime/latest.txt
+++ b/runtime/latest.txt
@@ -1,5 +1,5 @@
 CHAT_OUTPUT_BEGIN
-COMMAND_ID=HOMELAB-READER-V3-FEED-CONTRACT-AUDIT-374
+COMMAND_ID=HOMELAB-READER-V3-STORAGE-CONTRACT-AUDIT-375
 STATUS=OK
 RC=0
 HOST=pve01
@@ -9,54 +9,148 @@ REFERENCE_REGISTER_CHECK=OK
 REFERENCE_SHA256=5763f2f8edc75fcf6f3951f8c95896d1cc112ceccb6cf5b64a383f540a4deb8e
 ERROR_REGISTER_CHECK=OK
 ERROR_REGISTER_SHA256=08b3a769b8e38eaa1acec915352fb328180d70caa7ff6cd9d1ec0da426262752
-COMMAND_SHA256=117ab20f3b55ada28354401cd2a707f61c67b0b1ff189501492795fb36526ae6
+COMMAND_SHA256=7a9dc5ecf6ec239bf61ccf2a67f6b3238f06106fe9ff6ff7c5442f76dd566e20
 DUPLICATE_FAILED_COMMAND_BLOCKED=false
 EXECUTION_STARTED=true
 CHANGES_MADE=false
 SANITIZED=yes
 SECRETS_INCLUDED=no
 PRIVATE_ADDRESSES_INCLUDED=no
-RAW_EVIDENCE_SHA256=b256b96004621b936d2338ec79126b6379e5097775d231a75fb1153df1709176
-SANITIZED_OUTPUT_SHA256=b256b96004621b936d2338ec79126b6379e5097775d231a75fb1153df1709176
+RAW_EVIDENCE_SHA256=520e76d1ea9c69ce029685bd7089a4d2b361287d3133004063ec0fd5adc97ee3
+SANITIZED_OUTPUT_SHA256=3bbc00cf03cf0b7088f1551454d01bf5f982791084f4c03918afecbe2986f1e9
 OUTPUT_BEGIN
-DETAIL=READER_PROCESS_ARGV_BEGIN
-DETAIL=READER_ARG=/usr/bin/python3
-DETAIL=READER_ARG=-B
-DETAIL=READER_ARG=/usr/local/sbin/homelab-reader-server-v3
-DETAIL=READER_PROCESS_ARGV_END
-DETAIL=READER_SOURCE=/usr/local/sbin/homelab-reader-server-v3|META=root:root|755|3539|regular file|SHA256=092780e76ff18dfe2920c51f8b97dd09d194fd6cbdb59c3755c9fbf6530f3536|SHEBANG=#!/usr/bin/python3|SYNTAX=PASS_PYTHON
-PUBLIC_HEALTH_URL=https://git.gram1.ru/.well-known/homelab-reader/5a2edc1b3a3140d935e48ca0c0123849372dedff6fe55a48d25db7ab4de593b2/health
-DETAIL=PUBLIC_READER_HEALTH={"status":"ok","version":3}
-DETAIL=READER_ROUTE_LITERALS_BEGIN
-DETAIL=READER_LITERAL=Cache-Control
-DETAIL=READER_LITERAL=feed
-DETAIL=READER_LITERAL=health
-DETAIL=READER_LITERAL=health-v3
-DETAIL=READER_LITERAL=no-cache
-DETAIL=READER_LITERAL=no-store, no-cache, must-revalidate, max-age=0
-DETAIL=READER_LITERAL=results
-DETAIL=READER_LITERAL=results/
-DETAIL=READER_ROUTE_LITERALS_END
-DETAIL=READER_RELEVANT_SOURCE_BEGIN
-DETAIL=READER_SOURCE_LINE=12|RESULTS=ROOT/"results"
-DETAIL=READER_SOURCE_LINE=27|        self.send_header("Cache-Control","no-store, no-cache, must-revalidate, max-age=0")
-DETAIL=READER_SOURCE_LINE=28|        self.send_header("Surrogate-Control","no-store")
-DETAIL=READER_SOURCE_LINE=42|    def do_GET(self):
-DETAIL=READER_SOURCE_LINE=54|        if relative=="health":
-DETAIL=READER_SOURCE_LINE=55|            self.reply(200,"application/json; charset=utf-8",b"{\"status\":\"ok\",\"version\":3}\n","health-v3",include_body)
-DETAIL=READER_SOURCE_LINE=58|        if relative=="feed":
-DETAIL=READER_SOURCE_LINE=68|        if relative.startswith("results/"):
-DETAIL=READER_SOURCE_LINE=69|            name=relative[len("results/"):]
-DETAIL=READER_RELEVANT_SOURCE_END
-DETAIL=LINKED_WRAPPER_FEED_LOGIC_BEGIN
-DETAIL=LINKED_SOURCE_LINE=9|cid=$(/usr/bin/sed -n "s/^COMMAND_ID=//p" "$tmp" | /usr/bin/tail -n 1)
-DETAIL=LINKED_SOURCE_LINE=15|    /usr/bin/printf "IMMUTABLE_RESULT_URL=https://git.gram1.ru/homelab-admin/homelab-public-context/raw/commit/%s/runtime/history/%s.txt\n" "$sha" "$cid"
-DETAIL=LINKED_SOURCE_LINE=20|    /usr/bin/grep -Ei '^(DECISION|DETAIL|FAILURE_REASON|ERROR_CODE|SOURCE_DECISION|NGINX_[A-Z0-9_]*|READER_[A-Z0-9_]*|RESULT_FEED_URL|PUBLIC_HEALTH_URL|HTTPS_[A-Z0-9_]*|LOCAL_[A-Z0-9_]*|CHANGES_MADE)=|Traceback|RuntimeError|SystemExit|FileNotFoundError|PermissionError|command not found|No such file or directory|Connection refused|failed|invalid|missing' "$raw" | /usr/bin/tail -n 100 || true
-DETAIL=LINKED_WRAPPER_FEED_LOGIC_END
-DETAIL=READER_RUNNER_STORAGE_REFERENCE_COUNT=0
-DETAIL=READER_RESULT_API_MARKER_COUNT=7
-DETAIL=READER_CACHE_CONTROL_MARKER_COUNT=3
-DETAIL=READER_V3_FEED_CONTRACT_AUDIT=PASS
+DETAIL=READER_SHA256=092780e76ff18dfe2920c51f8b97dd09d194fd6cbdb59c3755c9fbf6530f3536
+DETAIL=LINKED_SHA256=efa9fce3c768e6e0650903ca14fe4b6d5319d57f20ec87c465a4a00cb300d4e0
+DETAIL=SOURCE_SYNTAX_AND_INTEGRITY=PASS
+DETAIL=READER_STORAGE_SOURCE_BEGIN
+DETAIL=READER_LINE=1|#!/usr/bin/python3
+DETAIL=READER_LINE=2|import hashlib
+DETAIL=READER_LINE=3|import http.server
+DETAIL=READER_LINE=4|import json
+DETAIL=READER_LINE=5|import os
+DETAIL=READER_LINE=6|import pathlib
+DETAIL=READER_LINE=7|import re
+DETAIL=READER_LINE=8|import sys
+DETAIL=READER_LINE=9|
+DETAIL=READER_LINE=10|ROOT=pathlib.Path("/var/lib/homelab-reader-v3")
+DETAIL=READER_LINE=11|MANIFEST=ROOT/"manifest.json"
+DETAIL=READER_LINE=12|RESULTS=ROOT/"results"
+DETAIL=READER_LINE=13|CAPABILITY=os.environ["HOMELAB_READER_CAPABILITY"]
+DETAIL=READER_LINE=14|PORT=int(os.environ.get("HOMELAB_READER_PORT","18788"))
+DETAIL=READER_LINE=15|RESULT_RE=re.compile(r"^[A-Za-z0-9][A-Za-z0-9._-]{0,127}-[0-9a-f]{64}\.txt$")
+DETAIL=READER_LINE=16|
+DETAIL=READER_LINE=17|class Handler(http.server.BaseHTTPRequestHandler):
+DETAIL=READER_LINE=18|    server_version="HomelabReader/3"
+DETAIL=READER_LINE=19|
+DETAIL=READER_LINE=20|    def log_message(self,fmt,*args):
+DETAIL=READER_LINE=21|        sys.stderr.write("%s - %s\n"%(self.address_string(),fmt%args))
+DETAIL=READER_LINE=22|
+DETAIL=READER_LINE=23|    def reply(self,status,content_type,payload,etag="",include_body=True):
+DETAIL=READER_LINE=24|        self.send_response(status)
+DETAIL=READER_LINE=25|        self.send_header("Content-Type",content_type)
+DETAIL=READER_LINE=26|        self.send_header("Content-Length",str(len(payload)))
+DETAIL=READER_LINE=27|        self.send_header("Cache-Control","no-store, no-cache, must-revalidate, max-age=0")
+DETAIL=READER_LINE=28|        self.send_header("Surrogate-Control","no-store")
+DETAIL=READER_LINE=29|        self.send_header("Pragma","no-cache")
+DETAIL=READER_LINE=30|        self.send_header("Expires","0")
+DETAIL=READER_LINE=31|        self.send_header("X-Robots-Tag","noindex, nofollow, noarchive")
+DETAIL=READER_LINE=32|        if etag:
+DETAIL=READER_LINE=33|            self.send_header("ETag",chr(34)+etag+chr(34))
+DETAIL=READER_LINE=34|            self.send_header("X-Homelab-Generation",etag)
+DETAIL=READER_LINE=35|        self.end_headers()
+DETAIL=READER_LINE=36|        if include_body:
+DETAIL=READER_LINE=37|            self.wfile.write(payload)
+DETAIL=READER_LINE=38|
+DETAIL=READER_LINE=39|    def do_HEAD(self):
+DETAIL=READER_LINE=40|        self.handle_reader(False)
+DETAIL=READER_LINE=41|
+DETAIL=READER_LINE=42|    def do_GET(self):
+DETAIL=READER_LINE=43|        self.handle_reader(True)
+DETAIL=READER_LINE=44|
+DETAIL=READER_LINE=45|    def handle_reader(self,include_body):
+DETAIL=READER_LINE=46|        request_path=self.path.split("?",1)[0]
+DETAIL=READER_LINE=47|        prefix="/"+CAPABILITY+"/"
+DETAIL=READER_LINE=48|        if not request_path.startswith(prefix):
+DETAIL=READER_LINE=49|            self.reply(404,"text/plain; charset=utf-8",b"not found\n",include_body=include_body)
+DETAIL=READER_LINE=50|            return
+DETAIL=READER_LINE=51|
+DETAIL=READER_LINE=52|        relative=request_path[len(prefix):]
+DETAIL=READER_LINE=53|
+DETAIL=READER_LINE=54|        if relative=="health":
+DETAIL=READER_LINE=55|            self.reply(200,"application/json; charset=utf-8",b"{\"status\":\"ok\",\"version\":3}\n","health-v3",include_body)
+DETAIL=READER_LINE=56|            return
+DETAIL=READER_LINE=57|
+DETAIL=READER_LINE=58|        if relative=="feed":
+DETAIL=READER_LINE=59|            try:
+DETAIL=READER_LINE=60|                payload=MANIFEST.read_bytes()
+DETAIL=READER_LINE=61|                document=json.loads(payload.decode("utf-8"))
+DETAIL=READER_LINE=62|                generation=str(document.get("generation","0"))
+DETAIL=READER_LINE=63|                self.reply(200,"application/json; charset=utf-8",payload,generation,include_body)
+DETAIL=READER_LINE=64|            except Exception:
+DETAIL=READER_LINE=65|                self.reply(500,"text/plain; charset=utf-8",b"reader error\n",include_body=include_body)
+DETAIL=READER_LINE=66|            return
+DETAIL=READER_LINE=67|
+DETAIL=READER_LINE=68|        if relative.startswith("results/"):
+DETAIL=READER_LINE=69|            name=relative[len("results/"):]
+DETAIL=READER_LINE=70|            target=RESULTS/name
+DETAIL=READER_LINE=71|            if not RESULT_RE.fullmatch(name) or not target.is_file():
+DETAIL=READER_LINE=72|                self.reply(404,"text/plain; charset=utf-8",b"not found\n",include_body=include_body)
+DETAIL=READER_LINE=73|                return
+DETAIL=READER_LINE=74|            try:
+DETAIL=READER_LINE=75|                payload=target.read_bytes()
+DETAIL=READER_LINE=76|                digest=name.rsplit("-",1)[1][:-4]
+DETAIL=READER_LINE=77|                if hashlib.sha256(payload).hexdigest()!=digest:
+DETAIL=READER_LINE=78|                    self.reply(500,"text/plain; charset=utf-8",b"integrity error\n",include_body=include_body)
+DETAIL=READER_LINE=79|                    return
+DETAIL=READER_LINE=80|                self.reply(200,"text/plain; charset=utf-8",payload,digest,include_body)
+DETAIL=READER_LINE=81|            except Exception:
+DETAIL=READER_LINE=82|                self.reply(500,"text/plain; charset=utf-8",b"reader error\n",include_body=include_body)
+DETAIL=READER_LINE=83|            return
+DETAIL=READER_LINE=84|
+DETAIL=READER_LINE=85|        self.reply(404,"text/plain; charset=utf-8",b"not found\n",include_body=include_body)
+DETAIL=READER_LINE=86|
+DETAIL=READER_LINE=87|class Server(http.server.ThreadingHTTPServer):
+DETAIL=READER_LINE=88|    allow_reuse_address=True
+DETAIL=READER_LINE=89|
+DETAIL=READER_LINE=90|Server(("[PRIVATE_IP]",PORT),Handler).serve_forever()
+DETAIL=READER_STORAGE_SOURCE_END
+DETAIL=LINKED_SOURCE_BEGIN
+DETAIL=LINKED_LINE=1|#!/usr/bin/env bash
+DETAIL=LINKED_LINE=2|set -o pipefail
+DETAIL=LINKED_LINE=3|tmp=$(/usr/bin/mktemp)
+DETAIL=LINKED_LINE=4|trap '/usr/bin/rm -f "$tmp"' EXIT
+DETAIL=LINKED_LINE=5|
+DETAIL=LINKED_LINE=6|/usr/local/sbin/homelab-chat-run "$@" 2>&1 | /usr/bin/tee "$tmp"
+DETAIL=LINKED_LINE=7|rc=${PIPESTATUS[0]}
+DETAIL=LINKED_LINE=8|
+DETAIL=LINKED_LINE=9|cid=$(/usr/bin/sed -n "s/^COMMAND_ID=//p" "$tmp" | /usr/bin/tail -n 1)
+DETAIL=LINKED_LINE=10|sha=$(/usr/bin/sed -n "s/^COMMIT_SHA=//p" "$tmp" | /usr/bin/tail -n 1)
+DETAIL=LINKED_LINE=11|raw=$(/usr/bin/sed -n "s/^LOCAL_RAW_FILE=//p" "$tmp" | /usr/bin/tail -n 1)
+DETAIL=LINKED_LINE=12|
+DETAIL=LINKED_LINE=13|if [[ "$cid" =~ ^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$ && "$sha" =~ ^[0-9a-f]{40}$ ]]; then
+DETAIL=LINKED_LINE=14|    /usr/bin/printf "COMMIT_URL=https://git.gram1.ru/homelab-admin/homelab-public-context/commit/%s\n" "$sha"
+DETAIL=LINKED_LINE=15|    /usr/bin/printf "IMMUTABLE_RESULT_URL=https://git.gram1.ru/homelab-admin/homelab-public-context/raw/commit/%s/runtime/history/%s.txt\n" "$sha" "$cid"
+DETAIL=LINKED_LINE=16|fi
+DETAIL=LINKED_LINE=17|
+DETAIL=LINKED_LINE=18|/usr/bin/printf "FAILURE_DIAGNOSTIC_BEGIN\n"
+DETAIL=LINKED_LINE=19|if [[ -n "$raw" && -r "$raw" ]]; then
+DETAIL=LINKED_LINE=20|    /usr/bin/grep -Ei '^(DECISION|DETAIL|FAILURE_REASON|ERROR_CODE|SOURCE_DECISION|NGINX_[A-Z0-9_]*|READER_[A-Z0-9_]*|RESULT_FEED_URL|PUBLIC_HEALTH_URL|HTTPS_[A-Z0-9_]*|LOCAL_[A-Z0-9_]*|CHANGES_MADE)=|Traceback|RuntimeError|SystemExit|FileNotFoundError|PermissionError|command not found|No such file or directory|Connection refused|failed|invalid|missing' "$raw" | /usr/bin/tail -n 100 || true
+DETAIL=LINKED_LINE=21|fi
+DETAIL=LINKED_LINE=22|/usr/bin/printf "FAILURE_DIAGNOSTIC_END\n"
+DETAIL=LINKED_LINE=23|
+DETAIL=LINKED_LINE=24|exit "$rc"
+DETAIL=LINKED_SOURCE_END
+Result=success
+ExecMainStatus=0
+ExecStart={ path=/usr/bin/python3 ; argv[]=/usr/bin/python3 -B /usr/local/sbin/homelab-reader-server-v3 ; ignore_errors=no ; start_time=[Thu 2026-07-23 16:20:39 MSK] ; stop_time=[n/a] ; pid=1247 ; code=(null) ; status=0/0 }
+LoadState=loaded
+ActiveState=active
+SubState=running
+FragmentPath=/etc/systemd/system/homelab-reader-v3.service
+DETAIL=PUBLIC_READER_ROUTE=feed|HTTP_STATUS=200
+DETAIL=PUBLIC_READER_ROUTE=results/HOMELAB-READER-V3-FEED-CONTRACT-AUDIT-374|HTTP_STATUS=404
+DETAIL=PUBLIC_READER_ROUTE=results/HOMELAB-READER-V3-FEED-CONTRACT-AUDIT-374.txt|HTTP_STATUS=404
+DETAIL=READER_V3_STORAGE_CONTRACT_AUDIT=PASS
 CHANGES_MADE=NO
 
 OUTPUT_END