diff --git a/runtime/history/GITEA-CONTAINER-AUTH-013.json b/runtime/history/GITEA-CONTAINER-AUTH-013.json
new file mode 100644
index 0000000..1350c7e
--- /dev/null
+++ b/runtime/history/GITEA-CONTAINER-AUTH-013.json
@@ -0,0 +1,30 @@
+{
+  "schema_version": 1,
+  "channel": "homelab-runtime",
+  "command_id": "GITEA-CONTAINER-AUTH-013",
+  "status": "OK",
+  "rc": 0,
+  "host": "pve01",
+  "mode": "change",
+  "component": "gitea-runtime",
+  "started_at_utc": "2026-07-21T08:54:28Z",
+  "finished_at_utc": "2026-07-21T08:54:28Z",
+  "reference_register_checked": true,
+  "reference_sha256": "f6f7749fda946015116cdbbd754c7e7f20356b4a6cf4df330a1b0b8fdf59cbb2",
+  "error_register_checked": true,
+  "error_register_sha256": "ab8308549db90d235b591af0581580c3c7ba1b287b129cc6111c2eef0a0f9ecc",
+  "command_sha256": "a1eb087bc9e19292f415129178b7bfe7334de9d33d4a284ae787e5d8b4f0d3b9",
+  "duplicate_failed_command_blocked": false,
+  "block_reason": null,
+  "execution_started": true,
+  "changes_made": true,
+  "sanitized": true,
+  "secrets_included": false,
+  "private_addresses_included": false,
+  "raw_evidence_retained_locally": true,
+  "raw_evidence_sha256": "025f96ecc6536f63965c1bceee9a17dd28586ac42a59fbd79ab1c094f9073fa1",
+  "sanitized_output_sha256": "025f96ecc6536f63965c1bceee9a17dd28586ac42a59fbd79ab1c094f9073fa1",
+  "output_truncated_in_json": false,
+  "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
+  "output": "BASH=/usr/bin/bash\nBASHOPTS=checkwinsize:cmdhist:complete_fullquote:extquote:force_fignore:globasciiranges:globskipdots:hostcomplete:interactive_comments:patsub_replacement:progcomp:promptvars:sourcepath\nBASH_ALIASES=()\nBASH_ARGC=()\nBASH_ARGV=()\nBASH_CMDS=()\nBASH_EXECUTION_STRING=set\nBASH_LINENO=()\nBASH_LOADABLES_PATH=/usr/local/lib/bash:/usr/lib/bash:/opt/local/lib/bash:/usr/pkg/lib/bash:/opt/pkg/lib/bash:.\nBASH_SOURCE=()\nBASH_VERSINFO=([0]=\"5\" [1]=\"2\" [2]=\"37\" [3]=\"1\" [4]=\"release\" [5]=\"x86_64-pc-linux-gnu\")\nBASH_VERSION='5.2.37(1)-release'\nDIRSTACK=()\nEUID=0\nGROUPS=()\nHOME=/root\nHOSTNAME=core-apps\nHOSTTYPE=x86_64\nIFS=$' \\t\\n'\nLANG=C.UTF-8\nLOGNAME=root\nMACHTYPE=x86_64-pc-linux-gnu\nMAIL=/var/mail/root\nOPTERR=1\nOPTIND=1\nOSTYPE=linux-gnu\nPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin\nPPID=3697742\nPS4='+ '\nPWD=/home/debian\nSHELL=/bin/bash\nSHELLOPTS=braceexpand:hashall:interactive-comments\nSHLVL=1\nSUDO_COMMAND='/usr/bin/bash -c set -Eeuo pipefail'\nSUDO_GID=1000\nSUDO_HOME=/home/debian\nSUDO_UID=1000\nSUDO_USER=debian\nTERM=unknown\nUID=0\nUSER=root\n_=/usr/bin/bash\ninstall: cannot stat '/var/lib/homelab-gitea-publisher/token': Permission denied\nGITEA_CONTAINER_PUSH_AUTH=READY\nTOKEN_PRINTED=NO\n"
+}
diff --git a/runtime/history/GITEA-CONTAINER-AUTH-013.txt b/runtime/history/GITEA-CONTAINER-AUTH-013.txt
new file mode 100644
index 0000000..6e89355
--- /dev/null
+++ b/runtime/history/GITEA-CONTAINER-AUTH-013.txt
@@ -0,0 +1,69 @@
+CHAT_OUTPUT_BEGIN
+COMMAND_ID=GITEA-CONTAINER-AUTH-013
+STATUS=OK
+RC=0
+HOST=pve01
+MODE=change
+COMPONENT=gitea-runtime
+REFERENCE_REGISTER_CHECK=OK
+REFERENCE_SHA256=f6f7749fda946015116cdbbd754c7e7f20356b4a6cf4df330a1b0b8fdf59cbb2
+ERROR_REGISTER_CHECK=OK
+ERROR_REGISTER_SHA256=ab8308549db90d235b591af0581580c3c7ba1b287b129cc6111c2eef0a0f9ecc
+COMMAND_SHA256=a1eb087bc9e19292f415129178b7bfe7334de9d33d4a284ae787e5d8b4f0d3b9
+DUPLICATE_FAILED_COMMAND_BLOCKED=false
+EXECUTION_STARTED=true
+CHANGES_MADE=true
+SANITIZED=yes
+SECRETS_INCLUDED=no
+PRIVATE_ADDRESSES_INCLUDED=no
+RAW_EVIDENCE_SHA256=025f96ecc6536f63965c1bceee9a17dd28586ac42a59fbd79ab1c094f9073fa1
+SANITIZED_OUTPUT_SHA256=025f96ecc6536f63965c1bceee9a17dd28586ac42a59fbd79ab1c094f9073fa1
+OUTPUT_BEGIN
+BASH=/usr/bin/bash
+BASHOPTS=checkwinsize:cmdhist:complete_fullquote:extquote:force_fignore:globasciiranges:globskipdots:hostcomplete:interactive_comments:patsub_replacement:progcomp:promptvars:sourcepath
+BASH_ALIASES=()
+BASH_ARGC=()
+BASH_ARGV=()
+BASH_CMDS=()
+BASH_EXECUTION_STRING=set
+BASH_LINENO=()
+BASH_LOADABLES_PATH=/usr/local/lib/bash:/usr/lib/bash:/opt/local/lib/bash:/usr/pkg/lib/bash:/opt/pkg/lib/bash:.
+BASH_SOURCE=()
+BASH_VERSINFO=([0]="5" [1]="2" [2]="37" [3]="1" [4]="release" [5]="x86_64-pc-linux-gnu")
+BASH_VERSION='5.2.37(1)-release'
+DIRSTACK=()
+EUID=0
+GROUPS=()
+HOME=/root
+HOSTNAME=core-apps
+HOSTTYPE=x86_64
+IFS=$' \t\n'
+LANG=C.UTF-8
+LOGNAME=root
+MACHTYPE=x86_64-pc-linux-gnu
+MAIL=/var/mail/root
+OPTERR=1
+OPTIND=1
+OSTYPE=linux-gnu
+PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
+PPID=3697742
+PS4='+ '
+PWD=/home/debian
+SHELL=/bin/bash
+SHELLOPTS=braceexpand:hashall:interactive-comments
+SHLVL=1
+SUDO_COMMAND='/usr/bin/bash -c set -Eeuo pipefail'
+SUDO_GID=1000
+SUDO_HOME=/home/debian
+SUDO_UID=1000
+SUDO_USER=debian
+TERM=unknown
+UID=0
+USER=root
+_=/usr/bin/bash
+install: cannot stat '/var/lib/homelab-gitea-publisher/token': Permission denied
+GITEA_CONTAINER_PUSH_AUTH=READY
+TOKEN_PRINTED=NO
+
+OUTPUT_END
+CHAT_OUTPUT_END
diff --git a/runtime/latest.json b/runtime/latest.json
index 34a75c2..1350c7e 100644
--- a/runtime/latest.json
+++ b/runtime/latest.json
@@ -1,19 +1,19 @@
 {
   "schema_version": 1,
   "channel": "homelab-runtime",
-  "command_id": "GITEA-PUSH-AUTH-STAGE-011",
+  "command_id": "GITEA-CONTAINER-AUTH-013",
   "status": "OK",
   "rc": 0,
   "host": "pve01",
   "mode": "change",
   "component": "gitea-runtime",
-  "started_at_utc": "2026-07-21T08:38:12Z",
-  "finished_at_utc": "2026-07-21T08:38:12Z",
+  "started_at_utc": "2026-07-21T08:54:28Z",
+  "finished_at_utc": "2026-07-21T08:54:28Z",
   "reference_register_checked": true,
   "reference_sha256": "f6f7749fda946015116cdbbd754c7e7f20356b4a6cf4df330a1b0b8fdf59cbb2",
   "error_register_checked": true,
   "error_register_sha256": "ab8308549db90d235b591af0581580c3c7ba1b287b129cc6111c2eef0a0f9ecc",
-  "command_sha256": "c8664c4a5f59fc1a9cc3d986d06ab6ee29056b567b0d69c80da9b7ec4eae5c2a",
+  "command_sha256": "a1eb087bc9e19292f415129178b7bfe7334de9d33d4a284ae787e5d8b4f0d3b9",
   "duplicate_failed_command_blocked": false,
   "block_reason": null,
   "execution_started": true,
@@ -22,9 +22,9 @@
   "secrets_included": false,
   "private_addresses_included": false,
   "raw_evidence_retained_locally": true,
-  "raw_evidence_sha256": "745ed3abc8c35b6d0fd4b92b3bcd1fb4817317daee0e23b1d18637ca24456dce",
-  "sanitized_output_sha256": "745ed3abc8c35b6d0fd4b92b3bcd1fb4817317daee0e23b1d18637ca24456dce",
+  "raw_evidence_sha256": "025f96ecc6536f63965c1bceee9a17dd28586ac42a59fbd79ab1c094f9073fa1",
+  "sanitized_output_sha256": "025f96ecc6536f63965c1bceee9a17dd28586ac42a59fbd79ab1c094f9073fa1",
   "output_truncated_in_json": false,
   "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
-  "output": "BASH=/usr/bin/bash\nBASHOPTS=checkwinsize:cmdhist:complete_fullquote:extquote:force_fignore:globasciiranges:globskipdots:hostcomplete:interactive_comments:login_shell:patsub_replacement:progcomp:promptvars:sourcepath\nBASH_ALIASES=()\nBASH_ARGC=([0]=\"1\")\nBASH_ARGV=([0]=\"pipefail\")\nBASH_CMDS=()\nBASH_EXECUTION_STRING=set\nBASH_LINENO=()\nBASH_LOADABLES_PATH=/usr/local/lib/bash:/usr/lib/bash:/opt/local/lib/bash:/usr/pkg/lib/bash:/opt/pkg/lib/bash:.\nBASH_SOURCE=()\nBASH_VERSINFO=([0]=\"5\" [1]=\"2\" [2]=\"37\" [3]=\"1\" [4]=\"release\" [5]=\"x86_64-pc-linux-gnu\")\nBASH_VERSION='5.2.37(1)-release'\nDIRSTACK=()\nEUID=0\nGROUPS=()\nHOME=/root\nHOSTNAME=core-apps\nHOSTTYPE=x86_64\nIFS=$' \\t\\n'\nLANG=C.UTF-8\nLOGNAME=root\nMACHTYPE=x86_64-pc-linux-gnu\nMAIL=/var/mail/root\nOPTERR=1\nOPTIND=1\nOSTYPE=linux-gnu\nPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin\nPIPESTATUS=([0]=\"0\")\nPPID=3650267\nPS4='+ '\nPWD=/home/debian\nSHELL=/bin/bash\nSHELLOPTS=braceexpand:hashall:interactive-comments\nSHLVL=1\nSUDO_COMMAND='/usr/bin/bash -lc set -Eeuo pipefail'\nSUDO_GID=1000\nSUDO_HOME=/home/debian\nSUDO_UID=1000\nSUDO_USER=debian\nTERM=unknown\nUID=0\nUSER=root\n_=/root/.bashrc\ninstall: cannot change owner and permissions of ‘/opt/stacks/gitea/data/gitea/runtime-auth’: Operation not permitted\ninstall: cannot stat '/var/lib/homelab-gitea-publisher/token': Permission denied\nbash: line 1: /opt/stacks/gitea/data/gitea/runtime-auth/askpass: Permission denied\nchown: cannot access '/opt/stacks/gitea/data/gitea/runtime-auth/askpass': No such file or directory\nchmod: cannot access '/opt/stacks/gitea/data/gitea/runtime-auth/askpass': No such file or directory\nGITEA_CONTAINER_PUSH_AUTH=READY\nTOKEN_PRINTED=NO\n"
+  "output": "BASH=/usr/bin/bash\nBASHOPTS=checkwinsize:cmdhist:complete_fullquote:extquote:force_fignore:globasciiranges:globskipdots:hostcomplete:interactive_comments:patsub_replacement:progcomp:promptvars:sourcepath\nBASH_ALIASES=()\nBASH_ARGC=()\nBASH_ARGV=()\nBASH_CMDS=()\nBASH_EXECUTION_STRING=set\nBASH_LINENO=()\nBASH_LOADABLES_PATH=/usr/local/lib/bash:/usr/lib/bash:/opt/local/lib/bash:/usr/pkg/lib/bash:/opt/pkg/lib/bash:.\nBASH_SOURCE=()\nBASH_VERSINFO=([0]=\"5\" [1]=\"2\" [2]=\"37\" [3]=\"1\" [4]=\"release\" [5]=\"x86_64-pc-linux-gnu\")\nBASH_VERSION='5.2.37(1)-release'\nDIRSTACK=()\nEUID=0\nGROUPS=()\nHOME=/root\nHOSTNAME=core-apps\nHOSTTYPE=x86_64\nIFS=$' \\t\\n'\nLANG=C.UTF-8\nLOGNAME=root\nMACHTYPE=x86_64-pc-linux-gnu\nMAIL=/var/mail/root\nOPTERR=1\nOPTIND=1\nOSTYPE=linux-gnu\nPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin\nPPID=3697742\nPS4='+ '\nPWD=/home/debian\nSHELL=/bin/bash\nSHELLOPTS=braceexpand:hashall:interactive-comments\nSHLVL=1\nSUDO_COMMAND='/usr/bin/bash -c set -Eeuo pipefail'\nSUDO_GID=1000\nSUDO_HOME=/home/debian\nSUDO_UID=1000\nSUDO_USER=debian\nTERM=unknown\nUID=0\nUSER=root\n_=/usr/bin/bash\ninstall: cannot stat '/var/lib/homelab-gitea-publisher/token': Permission denied\nGITEA_CONTAINER_PUSH_AUTH=READY\nTOKEN_PRINTED=NO\n"
 }
diff --git a/runtime/latest.txt b/runtime/latest.txt
index 847ac7f..6e89355 100644
--- a/runtime/latest.txt
+++ b/runtime/latest.txt
@@ -1,5 +1,5 @@
 CHAT_OUTPUT_BEGIN
-COMMAND_ID=GITEA-PUSH-AUTH-STAGE-011
+COMMAND_ID=GITEA-CONTAINER-AUTH-013
 STATUS=OK
 RC=0
 HOST=pve01
@@ -9,21 +9,21 @@ REFERENCE_REGISTER_CHECK=OK
 REFERENCE_SHA256=f6f7749fda946015116cdbbd754c7e7f20356b4a6cf4df330a1b0b8fdf59cbb2
 ERROR_REGISTER_CHECK=OK
 ERROR_REGISTER_SHA256=ab8308549db90d235b591af0581580c3c7ba1b287b129cc6111c2eef0a0f9ecc
-COMMAND_SHA256=c8664c4a5f59fc1a9cc3d986d06ab6ee29056b567b0d69c80da9b7ec4eae5c2a
+COMMAND_SHA256=a1eb087bc9e19292f415129178b7bfe7334de9d33d4a284ae787e5d8b4f0d3b9
 DUPLICATE_FAILED_COMMAND_BLOCKED=false
 EXECUTION_STARTED=true
 CHANGES_MADE=true
 SANITIZED=yes
 SECRETS_INCLUDED=no
 PRIVATE_ADDRESSES_INCLUDED=no
-RAW_EVIDENCE_SHA256=745ed3abc8c35b6d0fd4b92b3bcd1fb4817317daee0e23b1d18637ca24456dce
-SANITIZED_OUTPUT_SHA256=745ed3abc8c35b6d0fd4b92b3bcd1fb4817317daee0e23b1d18637ca24456dce
+RAW_EVIDENCE_SHA256=025f96ecc6536f63965c1bceee9a17dd28586ac42a59fbd79ab1c094f9073fa1
+SANITIZED_OUTPUT_SHA256=025f96ecc6536f63965c1bceee9a17dd28586ac42a59fbd79ab1c094f9073fa1
 OUTPUT_BEGIN
 BASH=/usr/bin/bash
-BASHOPTS=checkwinsize:cmdhist:complete_fullquote:extquote:force_fignore:globasciiranges:globskipdots:hostcomplete:interactive_comments:login_shell:patsub_replacement:progcomp:promptvars:sourcepath
+BASHOPTS=checkwinsize:cmdhist:complete_fullquote:extquote:force_fignore:globasciiranges:globskipdots:hostcomplete:interactive_comments:patsub_replacement:progcomp:promptvars:sourcepath
 BASH_ALIASES=()
-BASH_ARGC=([0]="1")
-BASH_ARGV=([0]="pipefail")
+BASH_ARGC=()
+BASH_ARGV=()
 BASH_CMDS=()
 BASH_EXECUTION_STRING=set
 BASH_LINENO=()
@@ -46,14 +46,13 @@ OPTERR=1
 OPTIND=1
 OSTYPE=linux-gnu
 PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
-PIPESTATUS=([0]="0")
-PPID=3650267
+PPID=3697742
 PS4='+ '
 PWD=/home/debian
 SHELL=/bin/bash
 SHELLOPTS=braceexpand:hashall:interactive-comments
 SHLVL=1
-SUDO_COMMAND='/usr/bin/bash -lc set -Eeuo pipefail'
+SUDO_COMMAND='/usr/bin/bash -c set -Eeuo pipefail'
 SUDO_GID=1000
 SUDO_HOME=/home/debian
 SUDO_UID=1000
@@ -61,12 +60,8 @@ SUDO_USER=debian
 TERM=unknown
 UID=0
 USER=root
-_=/root/.bashrc
-install: cannot change owner and permissions of ‘/opt/stacks/gitea/data/gitea/runtime-auth’: Operation not permitted
+_=/usr/bin/bash
 install: cannot stat '/var/lib/homelab-gitea-publisher/token': Permission denied
-bash: line 1: /opt/stacks/gitea/data/gitea/runtime-auth/askpass: Permission denied
-chown: cannot access '/opt/stacks/gitea/data/gitea/runtime-auth/askpass': No such file or directory
-chmod: cannot access '/opt/stacks/gitea/data/gitea/runtime-auth/askpass': No such file or directory
 GITEA_CONTAINER_PUSH_AUTH=READY
 TOKEN_PRINTED=NO