diff --git a/runtime/history/GITEA-READER-NGINX-APPLY-258.json b/runtime/history/GITEA-READER-NGINX-APPLY-258.json
new file mode 100644
index 0000000..ad37fc1
--- /dev/null
+++ b/runtime/history/GITEA-READER-NGINX-APPLY-258.json
@@ -0,0 +1,30 @@
+{
+  "schema_version": 1,
+  "channel": "homelab-runtime",
+  "command_id": "GITEA-READER-NGINX-APPLY-258",
+  "status": "FAIL",
+  "rc": 1,
+  "host": "pve01",
+  "mode": "change",
+  "component": "cluster-admin",
+  "started_at_utc": "2026-07-22T20:21:03Z",
+  "finished_at_utc": "2026-07-22T20:21:03Z",
+  "reference_register_checked": true,
+  "reference_sha256": "5763f2f8edc75fcf6f3951f8c95896d1cc112ceccb6cf5b64a383f540a4deb8e",
+  "error_register_checked": true,
+  "error_register_sha256": "08b3a769b8e38eaa1acec915352fb328180d70caa7ff6cd9d1ec0da426262752",
+  "command_sha256": "feff7013a7dda55e6d9b8c0219e8aab2ce8c9aee79b3bda0a7f81594941d9ac1",
+  "duplicate_failed_command_blocked": false,
+  "block_reason": null,
+  "execution_started": true,
+  "changes_made": true,
+  "sanitized": true,
+  "secrets_included": false,
+  "private_addresses_included": false,
+  "raw_evidence_retained_locally": true,
+  "raw_evidence_sha256": "f95ef11a4abe01f6934db35958097081409822cb867fb0a837b52e3e6cdfcfc2",
+  "sanitized_output_sha256": "f95ef11a4abe01f6934db35958097081409822cb867fb0a837b52e3e6cdfcfc2",
+  "output_truncated_in_json": false,
+  "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
+  "output": "UNSUPPORTED_DECISION=\nSOURCE_DECISION=\n"
+}
diff --git a/runtime/history/GITEA-READER-NGINX-APPLY-258.txt b/runtime/history/GITEA-READER-NGINX-APPLY-258.txt
new file mode 100644
index 0000000..eb69e13
--- /dev/null
+++ b/runtime/history/GITEA-READER-NGINX-APPLY-258.txt
@@ -0,0 +1,26 @@
+CHAT_OUTPUT_BEGIN
+COMMAND_ID=GITEA-READER-NGINX-APPLY-258
+STATUS=FAIL
+RC=1
+HOST=pve01
+MODE=change
+COMPONENT=cluster-admin
+REFERENCE_REGISTER_CHECK=OK
+REFERENCE_SHA256=5763f2f8edc75fcf6f3951f8c95896d1cc112ceccb6cf5b64a383f540a4deb8e
+ERROR_REGISTER_CHECK=OK
+ERROR_REGISTER_SHA256=08b3a769b8e38eaa1acec915352fb328180d70caa7ff6cd9d1ec0da426262752
+COMMAND_SHA256=feff7013a7dda55e6d9b8c0219e8aab2ce8c9aee79b3bda0a7f81594941d9ac1
+DUPLICATE_FAILED_COMMAND_BLOCKED=false
+EXECUTION_STARTED=true
+CHANGES_MADE=true
+SANITIZED=yes
+SECRETS_INCLUDED=no
+PRIVATE_ADDRESSES_INCLUDED=no
+RAW_EVIDENCE_SHA256=f95ef11a4abe01f6934db35958097081409822cb867fb0a837b52e3e6cdfcfc2
+SANITIZED_OUTPUT_SHA256=f95ef11a4abe01f6934db35958097081409822cb867fb0a837b52e3e6cdfcfc2
+OUTPUT_BEGIN
+UNSUPPORTED_DECISION=
+SOURCE_DECISION=
+
+OUTPUT_END
+CHAT_OUTPUT_END
diff --git a/runtime/latest.json b/runtime/latest.json
index 7d8d7a5..ad37fc1 100644
--- a/runtime/latest.json
+++ b/runtime/latest.json
@@ -1,30 +1,30 @@
 {
   "schema_version": 1,
   "channel": "homelab-runtime",
-  "command_id": "GITEA-READER-NGINX-TARGET-FINAL-257",
-  "status": "OK",
-  "rc": 0,
+  "command_id": "GITEA-READER-NGINX-APPLY-258",
+  "status": "FAIL",
+  "rc": 1,
   "host": "pve01",
-  "mode": "read-only",
-  "component": "cluster-audit",
-  "started_at_utc": "2026-07-22T20:18:31Z",
-  "finished_at_utc": "2026-07-22T20:18:31Z",
+  "mode": "change",
+  "component": "cluster-admin",
+  "started_at_utc": "2026-07-22T20:21:03Z",
+  "finished_at_utc": "2026-07-22T20:21:03Z",
   "reference_register_checked": true,
   "reference_sha256": "5763f2f8edc75fcf6f3951f8c95896d1cc112ceccb6cf5b64a383f540a4deb8e",
   "error_register_checked": true,
   "error_register_sha256": "08b3a769b8e38eaa1acec915352fb328180d70caa7ff6cd9d1ec0da426262752",
-  "command_sha256": "5e60560bbeda7c0801a20c70b4a248ac12f2ddea0e6016455c48b0dcdf3f337e",
+  "command_sha256": "feff7013a7dda55e6d9b8c0219e8aab2ce8c9aee79b3bda0a7f81594941d9ac1",
   "duplicate_failed_command_blocked": false,
   "block_reason": null,
   "execution_started": true,
-  "changes_made": false,
+  "changes_made": true,
   "sanitized": true,
   "secrets_included": false,
   "private_addresses_included": false,
   "raw_evidence_retained_locally": true,
-  "raw_evidence_sha256": "68fe5de6e73582bd77b95333a9b20e114e4b674c8b956b168a35839c3010cf71",
-  "sanitized_output_sha256": "68fe5de6e73582bd77b95333a9b20e114e4b674c8b956b168a35839c3010cf71",
+  "raw_evidence_sha256": "f95ef11a4abe01f6934db35958097081409822cb867fb0a837b52e3e6cdfcfc2",
+  "sanitized_output_sha256": "f95ef11a4abe01f6934db35958097081409822cb867fb0a837b52e3e6cdfcfc2",
   "output_truncated_in_json": false,
   "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
-  "output": "PREVIOUS_COMMAND_ID=GITEA-READER-NGINX-DECISION-DETAIL-256\n=== DECISION ===\nCHANGES_MADE=NO\n=== FAILURE_REASON ===\n3:=== RAW_ERRORS_255 ===\n4:1:Traceback (most recent call last):\n5:29:FileNotFoundError: [Errno 2] No such file or directory: '/usr/sbin/nginx'\n7:Traceback (most recent call last):\n35:FileNotFoundError: [Errno 2] No such file or directory: '/usr/sbin/nginx'\n=== ACTIVE_GITEA_TLS_CONFIG ===\n=== READER ===\nactive\n{\"status\":\"ok\",\"version\":3}\n\nCHANGES_MADE=NO\n"
+  "output": "UNSUPPORTED_DECISION=\nSOURCE_DECISION=\n"
 }
diff --git a/runtime/latest.txt b/runtime/latest.txt
index fbf3af1..eb69e13 100644
--- a/runtime/latest.txt
+++ b/runtime/latest.txt
@@ -1,39 +1,26 @@
 CHAT_OUTPUT_BEGIN
-COMMAND_ID=GITEA-READER-NGINX-TARGET-FINAL-257
-STATUS=OK
-RC=0
+COMMAND_ID=GITEA-READER-NGINX-APPLY-258
+STATUS=FAIL
+RC=1
 HOST=pve01
-MODE=read-only
-COMPONENT=cluster-audit
+MODE=change
+COMPONENT=cluster-admin
 REFERENCE_REGISTER_CHECK=OK
 REFERENCE_SHA256=5763f2f8edc75fcf6f3951f8c95896d1cc112ceccb6cf5b64a383f540a4deb8e
 ERROR_REGISTER_CHECK=OK
 ERROR_REGISTER_SHA256=08b3a769b8e38eaa1acec915352fb328180d70caa7ff6cd9d1ec0da426262752
-COMMAND_SHA256=5e60560bbeda7c0801a20c70b4a248ac12f2ddea0e6016455c48b0dcdf3f337e
+COMMAND_SHA256=feff7013a7dda55e6d9b8c0219e8aab2ce8c9aee79b3bda0a7f81594941d9ac1
 DUPLICATE_FAILED_COMMAND_BLOCKED=false
 EXECUTION_STARTED=true
-CHANGES_MADE=false
+CHANGES_MADE=true
 SANITIZED=yes
 SECRETS_INCLUDED=no
 PRIVATE_ADDRESSES_INCLUDED=no
-RAW_EVIDENCE_SHA256=68fe5de6e73582bd77b95333a9b20e114e4b674c8b956b168a35839c3010cf71
-SANITIZED_OUTPUT_SHA256=68fe5de6e73582bd77b95333a9b20e114e4b674c8b956b168a35839c3010cf71
+RAW_EVIDENCE_SHA256=f95ef11a4abe01f6934db35958097081409822cb867fb0a837b52e3e6cdfcfc2
+SANITIZED_OUTPUT_SHA256=f95ef11a4abe01f6934db35958097081409822cb867fb0a837b52e3e6cdfcfc2
 OUTPUT_BEGIN
-PREVIOUS_COMMAND_ID=GITEA-READER-NGINX-DECISION-DETAIL-256
-=== DECISION ===
-CHANGES_MADE=NO
-=== FAILURE_REASON ===
-3:=== RAW_ERRORS_255 ===
-4:1:Traceback (most recent call last):
-5:29:FileNotFoundError: [Errno 2] No such file or directory: '/usr/sbin/nginx'
-7:Traceback (most recent call last):
-35:FileNotFoundError: [Errno 2] No such file or directory: '/usr/sbin/nginx'
-=== ACTIVE_GITEA_TLS_CONFIG ===
-=== READER ===
-active
-{"status":"ok","version":3}
-
-CHANGES_MADE=NO
+UNSUPPORTED_DECISION=
+SOURCE_DECISION=
 
 OUTPUT_END
 CHAT_OUTPUT_END