diff --git a/runtime/history/HOMELAB-GITEA-R9-API-405-ENDPOINT-DIAGNOSTIC-READ-ONLY-20260806T011500Z.json b/runtime/history/HOMELAB-GITEA-R9-API-405-ENDPOINT-DIAGNOSTIC-READ-ONLY-20260806T011500Z.json
new file mode 100644
index 0000000..c0a1371
--- /dev/null
+++ b/runtime/history/HOMELAB-GITEA-R9-API-405-ENDPOINT-DIAGNOSTIC-READ-ONLY-20260806T011500Z.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": 1,
+  "channel": "homelab-runtime",
+  "command_id": "HOMELAB-GITEA-R9-API-405-ENDPOINT-DIAGNOSTIC-READ-ONLY-20260806T011500Z",
+  "status": "OK",
+  "rc": 0,
+  "host": "pve01",
+  "mode": "verify",
+  "component": "cluster-knowledge-base-error-system",
+  "started_at_utc": "2026-08-06T01:16:24Z",
+  "finished_at_utc": "2026-08-06T01:16:37Z",
+  "reference_register_checked": true,
+  "reference_sha256": "5763f2f8edc75fcf6f3951f8c95896d1cc112ceccb6cf5b64a383f540a4deb8e",
+  "error_register_checked": true,
+  "error_register_sha256": "24934a2c7fa5c26f6e828583c4aefac7f143b40c0171736ed7571e617d55ab83",
+  "command_sha256": "f9a58fe5afa47e62434e6858727118332f3c0c14c6360b61c10264aae4d6e208",
+  "duplicate_failed_command_blocked": false,
+  "block_reason": null,
+  "execution_started": true,
+  "change_declared": false,
+  "result_contract_valid": true,
+  "result_contract_status": null,
+  "result_contract_error": null,
+  "command_rc": 0,
+  "changes_made": false,
+  "rollback_started": false,
+  "rollback_restored": null,
+  "mutation_outcome": "NO_MUTATION",
+  "sanitized": true,
+  "secrets_included": false,
+  "private_addresses_included": false,
+  "raw_evidence_retained_locally": true,
+  "raw_evidence_sha256": "61a298a66b6e307dd84363f18a534d5990c7e858b49854e7cac54c202250350c",
+  "sanitized_output_sha256": "61a298a66b6e307dd84363f18a534d5990c7e858b49854e7cac54c202250350c",
+  "output_truncated_in_json": false,
+  "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
+  "output": "HOMELAB_RESULT_CONTRACT={\"changes_made\":false,\"command_id\":\"HOMELAB-GITEA-R9-API-405-ENDPOINT-DIAGNOSTIC-READ-ONLY-20260806T011500Z\",\"command_rc\":0,\"control_plane_error\":null,\"mutation_outcome\":\"NO_MUTATION\",\"output_truncated_in_json\":false,\"rc\":0,\"rollback_restored\":null,\"rollback_started\":false,\"status\":\"OK\",\"version\":1}\n{\"changes_made\":false,\"command_id\":\"HOMELAB-GITEA-R9-API-405-ENDPOINT-DIAGNOSTIC-READ-ONLY-20260806T011500Z\",\"command_rc\":0,\"control_plane_error\":null,\"diagnosis\":{\"diagnosis\":{\"classification\":\"GITEA_API_GET_ENDPOINT_METHOD_NOT_ALLOWED_PROVEN\",\"credential_values_exposed\":false,\"http_405_count\":1,\"http_405_endpoints\":[\"teams\"],\"proven_endpoint\":\"teams\",\"request_method\":\"GET\",\"response_bodies_exposed\":false,\"transport_failure_count\":0,\"transport_failure_endpoints\":[]},\"identity\":{\"api_auth_mode\":\"basic\",\"api_identity_verified\":true,\"candidate_count\":1,\"credential_source\":\"git-credentials-file\",\"credential_values_exposed\":false,\"git_ls_remote_verified\":true,\"repository_pull_permission_verified\":true,\"repository_push_permission_verified\":true,\"selected_alias_source_count\":1,\"source_detail_sha256\":null,\"source_path_sha256\":\"8243365621e06dc272481f7e8bddbc15f93de999624148dbf66b71a0c7dee5cb\",\"username_sha256\":\"17be8cd40a805524484650e38ba17226d72606f6868226bfc7ddadcd407344a7\",\"valid_credential_set_count\":1},\"next_step\":\"Correct only the proven unsupported GET endpoint handling in the full allowed-write-path READ_ONLY diagnostic, then rerun that diagnostic. Prepare no mutation until one safe write path is proven.\",\"probes\":[{\"body_bytes\":548,\"body_sha256\":\"ee83e11097838c0b245bd4b5016be2cefd3166b7a1ddba457ca2075999ea5aea\",\"content_type_sha256\":\"ce58f2c43b3e44fcde114a5337223939cb05fd032fdc1d01d096014708e5b904\",\"endpoint\":\"current_user\",\"json_shape\":\"object\",\"path_sha256\":\"c9ffce190f1d5c1f64cfc8abc900d97d6ede620346a7ce44a3aa61e67d399711\",\"status\":200,\"transport_exception\":null},{\"body_bytes\":2280,\"body_sha256\":\"adda1db0b9fc3105dc8bbd18774f3b92f12139613600ac7fd2a561bbf5713e6b\",\"content_type_sha256\":\"ce58f2c43b3e44fcde114a5337223939cb05fd032fdc1d01d096014708e5b904\",\"endpoint\":\"repository\",\"json_shape\":\"object\",\"path_sha256\":\"c5c14b838aa6657ad7f28ae067526acb8470083e15168ea3f9e63cd0952d7b61\",\"status\":200,\"transport_exception\":null},{\"body_bytes\":862,\"body_sha256\":\"9259d73f0f6a6674805580f1f9bb623316eaee8c7504636aecfc3c17eaf80dfa\",\"content_type_sha256\":\"ce58f2c43b3e44fcde114a5337223939cb05fd032fdc1d01d096014708e5b904\",\"endpoint\":\"main_branch\",\"json_shape\":\"object\",\"path_sha256\":\"a4a4e639825e02e836cc51173635b93ffb28679b773123c8319526ec3147c5d0\",\"status\":200,\"transport_exception\":null},{\"body_bytes\":1015,\"body_sha256\":\"c7c2608d695adeddb59f822cc51ae26916d7885ebedc7e0bb6453924394117c5\",\"content_type_sha256\":\"ce58f2c43b3e44fcde114a5337223939cb05fd032fdc1d01d096014708e5b904\",\"endpoint\":\"branch_protection_exact\",\"json_shape\":\"object\",\"path_sha256\":\"d5099ab1b952312208c000c94f32d4c4b9b1d5c84a35febdca2116efb1ecd173\",\"status\":200,\"transport_exception\":null},{\"body_bytes\":1017,\"body_sha256\":\"063eb028bbb24c2e93f71369bd0d6f1ec420eccf996788e441bd5d8a1a4cce83\",\"content_type_sha256\":\"ce58f2c43b3e44fcde114a5337223939cb05fd032fdc1d01d096014708e5b904\",\"endpoint\":\"branch_protection_list\",\"json_shape\":\"array\",\"path_sha256\":\"5fd14c1a3d505f92404100fae148a80a52c0be9aef873102e003f6d17f738427\",\"status\":200,\"transport_exception\":null},{\"body_bytes\":598,\"body_sha256\":\"0aa7ab6cd0d0e02bb67203349c3b5c6495df2a3b479805cf2dfacad697fc7abd\",\"content_type_sha256\":\"ce58f2c43b3e44fcde114a5337223939cb05fd032fdc1d01d096014708e5b904\",\"endpoint\":\"collaborator_permission\",\"json_shape\":\"object\",\"path_sha256\":\"bb33cbd7bf37d153c05ba5dfabff630826eb9fa7497a3968b75ba50cc4b91c40\",\"status\":200,\"transport_exception\":null},{\"body_bytes\":2,\"body_sha256\":\"4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945\",\"content_type_sha256\":\"ce58f2c43b3e44fcde114a5337223939cb05fd032fdc1d01d096014708e5b904\",\"endpoint\":\"deploy_keys\",\"json_shape\":\"array\",\"path_sha256\":\"b82598550a75f77dc46834086bea9a41c21a5edaf686002e7f8d514a5c1566ea\",\"status\":200,\"transport_exception\":null},{\"body_bytes\":2,\"body_sha256\":\"4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945\",\"content_type_sha256\":\"ce58f2c43b3e44fcde114a5337223939cb05fd032fdc1d01d096014708e5b904\",\"endpoint\":\"pull_requests\",\"json_shape\":\"array\",\"path_sha256\":\"5ad87c8455e15b58dd402f940542e6531b970e9dee5500d0a074cbd5ddf41479\",\"status\":200,\"transport_exception\":null},{\"body_bytes\":10955,\"body_sha256\":\"e3b8dff8b1a58b55ad9dd37bf6c628af5026b0d7c288f34d6d604e3b4c98802b\",\"content_type_sha256\":\"ce58f2c43b3e44fcde114a5337223939cb05fd032fdc1d01d096014708e5b904\",\"endpoint\":\"branches\",\"json_shape\":\"array\",\"path_sha256\":\"886118aa7aaa06d4f907594ae1fff9781c97913e3d1b9158946213ee5cd06372\",\"status\":200,\"transport_exception\":null},{\"body_bytes\":538,\"body_sha256\":\"aef10a9a27871982f8e6451e2578d8843de6c93c835b32d5dd27058214ea4d77\",\"content_type_sha256\":\"ce58f2c43b3e44fcde114a5337223939cb05fd032fdc1d01d096014708e5b904\",\"endpoint\":\"actions_workflows\",\"json_shape\":\"object\",\"path_sha256\":\"dc2367b736bcc0bbd27eb1b61fce7f37e8e8bf26f37d9f04f5dde07a0e245d3f\",\"status\":200,\"transport_exception\":null},{\"body_bytes\":696,\"body_sha256\":\"3cd8417345b4d0086683f153984f4368fd05c5e7b1e622a7e5f70699e15229b0\",\"content_type_sha256\":\"ce58f2c43b3e44fcde114a5337223939cb05fd032fdc1d01d096014708e5b904\",\"endpoint\":\"collaborators\",\"json_shape\":\"array\",\"path_sha256\":\"d598d0b7897ab8a5e55d0006fd70ee991cabf60c81bb68cec8c66deb99ab5aa4\",\"status\":200,\"transport_exception\":null},{\"body_bytes\":91,\"body_sha256\":\"edaa0e5b66a5d560a724418f607fc9e4b597a4c4c9e869d157b68df03dbf412b\",\"content_type_sha256\":\"ce58f2c43b3e44fcde114a5337223939cb05fd032fdc1d01d096014708e5b904\",\"endpoint\":\"teams\",\"json_shape\":\"object\",\"path_sha256\":\"80730d87f43707f670d9fd6aa13ead2145119a7618077edab82583506b71cd77\",\"status\":405,\"transport_exception\":null}],\"remote_main\":\"fe1221b06643db3b00a621b0230f92a46a4edc2b\",\"remote_main_matches_expected\":true},\"error_system_v2_future_record\":{\"classification\":\"GITEA_BRANCH_PROTECTION_REJECTS_DIRECT_PUSHER\",\"fingerprint\":\"40795f946c36fcaaf8413b2b46b1900a5df4771d93aeb24f2a596287df0a8023\",\"id\":\"GITEA_PROTECTED_MAIN_DIRECT_PUSH_DRY_RUN_FALSE_POSITIVE\",\"negative_control\":\"dry-run may return rc=0 without exercising the server-side protected-branch mutation decision\",\"normalized_signature\":\"gitea protected main rejects direct push while git push --dry-run succeeds; dry-run does not prove that the server-side protected-branch pre-receive path will accept a real update\",\"positive_control\":\"protected main has direct push disabled and the previous real push was rejected\",\"prevention_rule\":\"A successful git push --dry-run must never be treated as proof that a real update to a protected branch is allowed; the configured branch-protection write path must be proven separately by read-only evidence.\",\"regression_test_required\":true,\"space\":\"runtime\"},\"exact_error\":null,\"identity_confirmed\":true,\"mode\":\"READ_ONLY\",\"mutation_outcome\":\"NO_MUTATION\",\"next_step\":\"Correct only the proven unsupported GET endpoint handling in the full allowed-write-path READ_ONLY diagnostic, then rerun that diagnostic. Prepare no mutation until one safe write path is proven.\",\"output_truncated_in_json\":false,\"previous_exact_result\":{\"capsule_sha256\":\"7f5fc3c3ec8fe515b602898848a521cd6d4df2129973d507343c83f9a3ba635d\",\"command_id\":\"HOMELAB-GITEA-ALLOWED-PUSH-PATH-R9-EXACT-RESULT-STATE-BIND-READ-ONLY-20260806T011000Z\",\"identity_confirmed\":true,\"output_complete\":true,\"output_sha256\":\"fd30c254ca3ce565304bcc80899748c7b05f48cdaaae70246dd2aa9e5e2bd3c9\",\"published_resources_checked\":3,\"runner_document_rc\":0,\"runner_json_sha256\":\"cd501039bfd4450ad36b9fbe90d4d1b07fb05320c4e5e1a1de7a5f630fddee4d\",\"runner_rc\":0,\"runner_text_sha256\":\"09e0362a11679eae5c89447bbcfd1b0010b267856f9e4ad90b42f97321b8ee64\",\"runner_wrapper_matches_document\":true,\"semantic_fields_verified\":[\"changes_made\",\"command_id\",\"command_rc\",\"control_plane_error\",\"found\",\"mutation_outcome\",\"output_complete\",\"output_truncated_in_json\",\"output_truncated_in_runner_json\",\"private_addresses_included\",\"rc\",\"rollback_restored\",\"rollback_started\",\"runner_document_rc\",\"runner_rc\",\"runner_status\",\"runner_wrapper_matches_document\",\"sanitized\",\"secrets_included\",\"status\"],\"slot_directory_count\":12,\"slot_lane\":\"e\"},\"rc\":0,\"rollback_restored\":null,\"rollback_started\":false,\"schema\":\"homelab.gitea-api-405-endpoint-diagnostic.v1\",\"status\":\"OK\"}\n"
+}
diff --git a/runtime/history/HOMELAB-GITEA-R9-API-405-ENDPOINT-DIAGNOSTIC-READ-ONLY-20260806T011500Z.txt b/runtime/history/HOMELAB-GITEA-R9-API-405-ENDPOINT-DIAGNOSTIC-READ-ONLY-20260806T011500Z.txt
new file mode 100644
index 0000000..9b4b1b2
--- /dev/null
+++ b/runtime/history/HOMELAB-GITEA-R9-API-405-ENDPOINT-DIAGNOSTIC-READ-ONLY-20260806T011500Z.txt
@@ -0,0 +1,34 @@
+CHAT_OUTPUT_BEGIN
+COMMAND_ID=HOMELAB-GITEA-R9-API-405-ENDPOINT-DIAGNOSTIC-READ-ONLY-20260806T011500Z
+STATUS=OK
+RC=0
+HOST=pve01
+MODE=verify
+COMPONENT=cluster-knowledge-base-error-system
+REFERENCE_REGISTER_CHECK=OK
+REFERENCE_SHA256=5763f2f8edc75fcf6f3951f8c95896d1cc112ceccb6cf5b64a383f540a4deb8e
+ERROR_REGISTER_CHECK=OK
+ERROR_REGISTER_SHA256=24934a2c7fa5c26f6e828583c4aefac7f143b40c0171736ed7571e617d55ab83
+COMMAND_SHA256=f9a58fe5afa47e62434e6858727118332f3c0c14c6360b61c10264aae4d6e208
+DUPLICATE_FAILED_COMMAND_BLOCKED=false
+EXECUTION_STARTED=true
+CHANGE_DECLARED=false
+RESULT_CONTRACT_VALID=true
+RESULT_CONTRACT_STATUS=NOT_APPLICABLE
+RESULT_CONTRACT_ERROR=NONE
+COMMAND_RC=0
+CHANGES_MADE=false
+ROLLBACK_STARTED=false
+ROLLBACK_RESTORED=null
+MUTATION_OUTCOME=NO_MUTATION
+SANITIZED=yes
+SECRETS_INCLUDED=no
+PRIVATE_ADDRESSES_INCLUDED=no
+RAW_EVIDENCE_SHA256=61a298a66b6e307dd84363f18a534d5990c7e858b49854e7cac54c202250350c
+SANITIZED_OUTPUT_SHA256=61a298a66b6e307dd84363f18a534d5990c7e858b49854e7cac54c202250350c
+OUTPUT_BEGIN
+HOMELAB_RESULT_CONTRACT={"changes_made":false,"command_id":"HOMELAB-GITEA-R9-API-405-ENDPOINT-DIAGNOSTIC-READ-ONLY-20260806T011500Z","command_rc":0,"control_plane_error":null,"mutation_outcome":"NO_MUTATION","output_truncated_in_json":false,"rc":0,"rollback_restored":null,"rollback_started":false,"status":"OK","version":1}
+{"changes_made":false,"command_id":"HOMELAB-GITEA-R9-API-405-ENDPOINT-DIAGNOSTIC-READ-ONLY-20260806T011500Z","command_rc":0,"control_plane_error":null,"diagnosis":{"diagnosis":{"classification":"GITEA_API_GET_ENDPOINT_METHOD_NOT_ALLOWED_PROVEN","credential_values_exposed":false,"http_405_count":1,"http_405_endpoints":["teams"],"proven_endpoint":"teams","request_method":"GET","response_bodies_exposed":false,"transport_failure_count":0,"transport_failure_endpoints":[]},"identity":{"api_auth_mode":"basic","api_identity_verified":true,"candidate_count":1,"credential_source":"git-credentials-file","credential_values_exposed":false,"git_ls_remote_verified":true,"repository_pull_permission_verified":true,"repository_push_permission_verified":true,"selected_alias_source_count":1,"source_detail_sha256":null,"source_path_sha256":"8243365621e06dc272481f7e8bddbc15f93de999624148dbf66b71a0c7dee5cb","username_sha256":"17be8cd40a805524484650e38ba17226d72606f6868226bfc7ddadcd407344a7","valid_credential_set_count":1},"next_step":"Correct only the proven unsupported GET endpoint handling in the full allowed-write-path READ_ONLY diagnostic, then rerun that diagnostic. Prepare no mutation until one safe write path is proven.","probes":[{"body_bytes":548,"body_sha256":"ee83e11097838c0b245bd4b5016be2cefd3166b7a1ddba457ca2075999ea5aea","content_type_sha256":"ce58f2c43b3e44fcde114a5337223939cb05fd032fdc1d01d096014708e5b904","endpoint":"current_user","json_shape":"object","path_sha256":"c9ffce190f1d5c1f64cfc8abc900d97d6ede620346a7ce44a3aa61e67d399711","status":200,"transport_exception":null},{"body_bytes":2280,"body_sha256":"adda1db0b9fc3105dc8bbd18774f3b92f12139613600ac7fd2a561bbf5713e6b","content_type_sha256":"ce58f2c43b3e44fcde114a5337223939cb05fd032fdc1d01d096014708e5b904","endpoint":"repository","json_shape":"object","path_sha256":"c5c14b838aa6657ad7f28ae067526acb8470083e15168ea3f9e63cd0952d7b61","status":200,"transport_exception":null},{"body_bytes":862,"body_sha256":"9259d73f0f6a6674805580f1f9bb623316eaee8c7504636aecfc3c17eaf80dfa","content_type_sha256":"ce58f2c43b3e44fcde114a5337223939cb05fd032fdc1d01d096014708e5b904","endpoint":"main_branch","json_shape":"object","path_sha256":"a4a4e639825e02e836cc51173635b93ffb28679b773123c8319526ec3147c5d0","status":200,"transport_exception":null},{"body_bytes":1015,"body_sha256":"c7c2608d695adeddb59f822cc51ae26916d7885ebedc7e0bb6453924394117c5","content_type_sha256":"ce58f2c43b3e44fcde114a5337223939cb05fd032fdc1d01d096014708e5b904","endpoint":"branch_protection_exact","json_shape":"object","path_sha256":"d5099ab1b952312208c000c94f32d4c4b9b1d5c84a35febdca2116efb1ecd173","status":200,"transport_exception":null},{"body_bytes":1017,"body_sha256":"063eb028bbb24c2e93f71369bd0d6f1ec420eccf996788e441bd5d8a1a4cce83","content_type_sha256":"ce58f2c43b3e44fcde114a5337223939cb05fd032fdc1d01d096014708e5b904","endpoint":"branch_protection_list","json_shape":"array","path_sha256":"5fd14c1a3d505f92404100fae148a80a52c0be9aef873102e003f6d17f738427","status":200,"transport_exception":null},{"body_bytes":598,"body_sha256":"0aa7ab6cd0d0e02bb67203349c3b5c6495df2a3b479805cf2dfacad697fc7abd","content_type_sha256":"ce58f2c43b3e44fcde114a5337223939cb05fd032fdc1d01d096014708e5b904","endpoint":"collaborator_permission","json_shape":"object","path_sha256":"bb33cbd7bf37d153c05ba5dfabff630826eb9fa7497a3968b75ba50cc4b91c40","status":200,"transport_exception":null},{"body_bytes":2,"body_sha256":"4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945","content_type_sha256":"ce58f2c43b3e44fcde114a5337223939cb05fd032fdc1d01d096014708e5b904","endpoint":"deploy_keys","json_shape":"array","path_sha256":"b82598550a75f77dc46834086bea9a41c21a5edaf686002e7f8d514a5c1566ea","status":200,"transport_exception":null},{"body_bytes":2,"body_sha256":"4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945","content_type_sha256":"ce58f2c43b3e44fcde114a5337223939cb05fd032fdc1d01d096014708e5b904","endpoint":"pull_requests","json_shape":"array","path_sha256":"5ad87c8455e15b58dd402f940542e6531b970e9dee5500d0a074cbd5ddf41479","status":200,"transport_exception":null},{"body_bytes":10955,"body_sha256":"e3b8dff8b1a58b55ad9dd37bf6c628af5026b0d7c288f34d6d604e3b4c98802b","content_type_sha256":"ce58f2c43b3e44fcde114a5337223939cb05fd032fdc1d01d096014708e5b904","endpoint":"branches","json_shape":"array","path_sha256":"886118aa7aaa06d4f907594ae1fff9781c97913e3d1b9158946213ee5cd06372","status":200,"transport_exception":null},{"body_bytes":538,"body_sha256":"aef10a9a27871982f8e6451e2578d8843de6c93c835b32d5dd27058214ea4d77","content_type_sha256":"ce58f2c43b3e44fcde114a5337223939cb05fd032fdc1d01d096014708e5b904","endpoint":"actions_workflows","json_shape":"object","path_sha256":"dc2367b736bcc0bbd27eb1b61fce7f37e8e8bf26f37d9f04f5dde07a0e245d3f","status":200,"transport_exception":null},{"body_bytes":696,"body_sha256":"3cd8417345b4d0086683f153984f4368fd05c5e7b1e622a7e5f70699e15229b0","content_type_sha256":"ce58f2c43b3e44fcde114a5337223939cb05fd032fdc1d01d096014708e5b904","endpoint":"collaborators","json_shape":"array","path_sha256":"d598d0b7897ab8a5e55d0006fd70ee991cabf60c81bb68cec8c66deb99ab5aa4","status":200,"transport_exception":null},{"body_bytes":91,"body_sha256":"edaa0e5b66a5d560a724418f607fc9e4b597a4c4c9e869d157b68df03dbf412b","content_type_sha256":"ce58f2c43b3e44fcde114a5337223939cb05fd032fdc1d01d096014708e5b904","endpoint":"teams","json_shape":"object","path_sha256":"80730d87f43707f670d9fd6aa13ead2145119a7618077edab82583506b71cd77","status":405,"transport_exception":null}],"remote_main":"fe1221b06643db3b00a621b0230f92a46a4edc2b","remote_main_matches_expected":true},"error_system_v2_future_record":{"classification":"GITEA_BRANCH_PROTECTION_REJECTS_DIRECT_PUSHER","fingerprint":"40795f946c36fcaaf8413b2b46b1900a5df4771d93aeb24f2a596287df0a8023","id":"GITEA_PROTECTED_MAIN_DIRECT_PUSH_DRY_RUN_FALSE_POSITIVE","negative_control":"dry-run may return rc=0 without exercising the server-side protected-branch mutation decision","normalized_signature":"gitea protected main rejects direct push while git push --dry-run succeeds; dry-run does not prove that the server-side protected-branch pre-receive path will accept a real update","positive_control":"protected main has direct push disabled and the previous real push was rejected","prevention_rule":"A successful git push --dry-run must never be treated as proof that a real update to a protected branch is allowed; the configured branch-protection write path must be proven separately by read-only evidence.","regression_test_required":true,"space":"runtime"},"exact_error":null,"identity_confirmed":true,"mode":"READ_ONLY","mutation_outcome":"NO_MUTATION","next_step":"Correct only the proven unsupported GET endpoint handling in the full allowed-write-path READ_ONLY diagnostic, then rerun that diagnostic. Prepare no mutation until one safe write path is proven.","output_truncated_in_json":false,"previous_exact_result":{"capsule_sha256":"7f5fc3c3ec8fe515b602898848a521cd6d4df2129973d507343c83f9a3ba635d","command_id":"HOMELAB-GITEA-ALLOWED-PUSH-PATH-R9-EXACT-RESULT-STATE-BIND-READ-ONLY-20260806T011000Z","identity_confirmed":true,"output_complete":true,"output_sha256":"fd30c254ca3ce565304bcc80899748c7b05f48cdaaae70246dd2aa9e5e2bd3c9","published_resources_checked":3,"runner_document_rc":0,"runner_json_sha256":"cd501039bfd4450ad36b9fbe90d4d1b07fb05320c4e5e1a1de7a5f630fddee4d","runner_rc":0,"runner_text_sha256":"09e0362a11679eae5c89447bbcfd1b0010b267856f9e4ad90b42f97321b8ee64","runner_wrapper_matches_document":true,"semantic_fields_verified":["changes_made","command_id","command_rc","control_plane_error","found","mutation_outcome","output_complete","output_truncated_in_json","output_truncated_in_runner_json","private_addresses_included","rc","rollback_restored","rollback_started","runner_document_rc","runner_rc","runner_status","runner_wrapper_matches_document","sanitized","secrets_included","status"],"slot_directory_count":12,"slot_lane":"e"},"rc":0,"rollback_restored":null,"rollback_started":false,"schema":"homelab.gitea-api-405-endpoint-diagnostic.v1","status":"OK"}
+
+OUTPUT_END
+CHAT_OUTPUT_END
diff --git a/runtime/latest.json b/runtime/latest.json
index 52cbd06..c0a1371 100644
--- a/runtime/latest.json
+++ b/runtime/latest.json
@@ -1,19 +1,19 @@
 {
   "schema_version": 1,
   "channel": "homelab-runtime",
-  "command_id": "HOMELAB-GITEA-ALLOWED-PUSH-PATH-R9-EXACT-RESULT-STATE-BIND-READ-ONLY-20260806T011000Z",
+  "command_id": "HOMELAB-GITEA-R9-API-405-ENDPOINT-DIAGNOSTIC-READ-ONLY-20260806T011500Z",
   "status": "OK",
   "rc": 0,
   "host": "pve01",
   "mode": "verify",
   "component": "cluster-knowledge-base-error-system",
-  "started_at_utc": "2026-08-06T01:09:31Z",
-  "finished_at_utc": "2026-08-06T01:09:36Z",
+  "started_at_utc": "2026-08-06T01:16:24Z",
+  "finished_at_utc": "2026-08-06T01:16:37Z",
   "reference_register_checked": true,
   "reference_sha256": "5763f2f8edc75fcf6f3951f8c95896d1cc112ceccb6cf5b64a383f540a4deb8e",
   "error_register_checked": true,
   "error_register_sha256": "24934a2c7fa5c26f6e828583c4aefac7f143b40c0171736ed7571e617d55ab83",
-  "command_sha256": "9dcdeb16462922e9c06293746594277b11569e1f618d68b339155dabbcd85a4e",
+  "command_sha256": "f9a58fe5afa47e62434e6858727118332f3c0c14c6360b61c10264aae4d6e208",
   "duplicate_failed_command_blocked": false,
   "block_reason": null,
   "execution_started": true,
@@ -30,9 +30,9 @@
   "secrets_included": false,
   "private_addresses_included": false,
   "raw_evidence_retained_locally": true,
-  "raw_evidence_sha256": "fd30c254ca3ce565304bcc80899748c7b05f48cdaaae70246dd2aa9e5e2bd3c9",
-  "sanitized_output_sha256": "fd30c254ca3ce565304bcc80899748c7b05f48cdaaae70246dd2aa9e5e2bd3c9",
+  "raw_evidence_sha256": "61a298a66b6e307dd84363f18a534d5990c7e858b49854e7cac54c202250350c",
+  "sanitized_output_sha256": "61a298a66b6e307dd84363f18a534d5990c7e858b49854e7cac54c202250350c",
   "output_truncated_in_json": false,
   "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
-  "output": "HOMELAB_RESULT_CONTRACT={\"changes_made\":false,\"command_id\":\"HOMELAB-GITEA-ALLOWED-PUSH-PATH-R9-EXACT-RESULT-STATE-BIND-READ-ONLY-20260806T011000Z\",\"command_rc\":0,\"control_plane_error\":null,\"mutation_outcome\":\"NO_MUTATION\",\"output_truncated_in_json\":false,\"rc\":0,\"rollback_restored\":null,\"rollback_started\":false,\"status\":\"OK\",\"version\":1}\n{\"changes_made\":false,\"command_id\":\"HOMELAB-GITEA-ALLOWED-PUSH-PATH-R9-EXACT-RESULT-STATE-BIND-READ-ONLY-20260806T011000Z\",\"command_rc\":0,\"control_plane_error\":null,\"exact_error\":null,\"identity_confirmed\":true,\"mutation_outcome\":\"NO_MUTATION\",\"next_step\":\"Use the target result only after its identity and all runner fields are reviewed. If the target proved one safe path, prepare the single atomic ten-path transaction through that path.\",\"output_truncated_in_json\":false,\"rc\":0,\"rollback_restored\":null,\"rollback_started\":false,\"schema\":\"homelab.exact-result-state-bind.v5\",\"status\":\"OK\",\"target\":{\"adapter_state_sha256\":\"42bf8ec4ad6a6628aa7a18f0422eb3e01c278a998a304f2dbb6c59cbfbb08f6e\",\"allowed_path_diagnostics\":{\"actions_workflow_count\":null,\"admin_branch_protection_change_capability\":null,\"admin_branch_protection_change_selected\":null,\"candidate_branch_exists\":null,\"documented_automation_write_path\":null,\"dry_run_corroborative_only\":null,\"main_user_can_merge\":null,\"main_user_can_push\":null,\"matching_protection_rule_count\":null,\"merge_styles\":[],\"other_write_capable_collaborator_count\":null,\"owner_admin_direct_push_bypass_proven\":null,\"pull_request_api_readable\":null,\"pull_requests_enabled\":null,\"read_write_deploy_key_count\":null,\"service_account_or_deploy_key_path_selected\":null,\"temp_branch_push_dry_run_allowed\":null,\"workflow_or_bot_path_selected\":null,\"write_capable_deploy_key_available_to_current_transaction\":null,\"write_capable_team_count\":null},\"capsule_sha256\":\"7f493ec3cb98128252e51e8222d534bce36f4085a3967b3a269c4c87c4af8329\",\"changes_made\":false,\"command_id\":\"HOMELAB-GITEA-ALLOWED-PUSH-PATH-DIAGNOSTIC-READ-ONLY-R9-20260806T010500Z\",\"command_rc\":2,\"control_plane_error\":null,\"exact_error\":{\"code\":\"GITEA_API_READ_FAILED\",\"evidence\":{\"status\":405},\"message\":\"Gitea API read failed\"},\"identity\":{\"active\":null,\"api_auth_mode\":\"None\",\"api_identity_verified\":null,\"candidate_count\":null,\"credential_source\":\"None\",\"credential_values_exposed\":null,\"git_ls_remote_verified\":null,\"permission\":null,\"repository_permissions\":{\"admin\":null,\"pull\":null,\"push\":null},\"repository_pull_permission_verified\":null,\"repository_push_permission_verified\":null,\"restricted\":null,\"selected_alias_source_count\":null,\"source_detail_sha256\":null,\"source_path_sha256\":null,\"username_sha256\":null,\"valid_credential_set_count\":null},\"main_protection\":{\"current_user_in_push_whitelist\":null,\"current_user_merge_allowed\":null,\"effective_branch_protection_name_present\":null,\"enable_merge_whitelist\":null,\"enable_push\":null,\"enable_push_whitelist\":null,\"enable_status_check\":null,\"protected\":null,\"protected_file_patterns_present\":null,\"require_signed_commits\":null,\"required_approvals\":null,\"user_can_merge\":null,\"user_can_push\":null},\"mutation_outcome\":\"NO_MUTATION\",\"output_sha256\":\"8f2549fd6ab655d5f17581e81e4e536c63c3a154363dcb26d25f6de2df03905e\",\"output_truncated_in_json\":false,\"previous_exact_result\":{\"capsule_sha256\":\"40b0a483eaa5034980607b36aa5ea927d906a063dff1f4dcb2b83b6d9d557d7f\",\"command_id\":\"HOMELAB-GITEA-ALLOWED-PUSH-PATH-R8-EXACT-RESULT-STATE-BIND-READ-ONLY-20260806T010000Z\",\"identity_confirmed\":true,\"output_complete\":true,\"output_sha256\":\"ae0ed3eefb47cd8bbe0968f320c365a913f4f0f1cc70b8b0eba891b6ab997195\",\"runner_document_rc\":0,\"runner_json_sha256\":\"b69136768b52aa51798ef0a34f4d54ac6cf312acc21395f75c3d69419499a0d4\",\"runner_rc\":0,\"runner_text_sha256\":\"f49c93d36fe0329ad07efc7cabda7696c04b8bfd0ac414bb316755ba08061897\",\"runner_wrapper_matches_document\":true,\"slot_directory_count\":12,\"slot_lane\":\"0\"},\"public_exact_result\":{\"available\":false,\"exact_error\":{\"code\":\"PUBLIC_EXACT_HTTP_ERROR\",\"evidence\":{\"status\":409},\"message\":\"Published exact-result link returned an HTTP error\"},\"lane\":\"1\",\"output_found\":false,\"published_resource_count\":0,\"runner_json_found\":false,\"runner_text_found\":false,\"slot_depth\":11},\"rc\":2,\"remote_main\":null,\"remote_unchanged_since_previous_rejection\":null,\"repository_policy_evidence\":{\"conflicting_direct_main_policy_found\":null,\"explicit_pr_policy_found\":null,\"policy_file_count\":null,\"workflow_count\":null},\"rollback_restored\":null,\"rollback_started\":false,\"runner_document_rc\":null,\"runner_json_sha256\":\"c9f428db01efeb6950d881f2f0f3b5c54c67a750eaa6ff893b22574e6c9b20e7\",\"runner_rc\":null,\"runner_text_sha256\":\"4426d05e6035eb86a0e36a79d53e723f8795ebe138c59ca5af3aa23ed8b26952\",\"runner_wrapper_matches_document\":null,\"single_proven_safe_path\":{\"classification\":null,\"next_atomic_transaction\":\"None\",\"proof\":{},\"proven\":null,\"proven_path_count\":null,\"proven_paths\":[],\"scope_path_count\":null},\"status\":\"ERROR\",\"target_report_identity_confirmed\":true},\"target_command_id\":\"HOMELAB-GITEA-ALLOWED-PUSH-PATH-DIAGNOSTIC-READ-ONLY-R9-20260806T010500Z\"}\n"
+  "output": "HOMELAB_RESULT_CONTRACT={\"changes_made\":false,\"command_id\":\"HOMELAB-GITEA-R9-API-405-ENDPOINT-DIAGNOSTIC-READ-ONLY-20260806T011500Z\",\"command_rc\":0,\"control_plane_error\":null,\"mutation_outcome\":\"NO_MUTATION\",\"output_truncated_in_json\":false,\"rc\":0,\"rollback_restored\":null,\"rollback_started\":false,\"status\":\"OK\",\"version\":1}\n{\"changes_made\":false,\"command_id\":\"HOMELAB-GITEA-R9-API-405-ENDPOINT-DIAGNOSTIC-READ-ONLY-20260806T011500Z\",\"command_rc\":0,\"control_plane_error\":null,\"diagnosis\":{\"diagnosis\":{\"classification\":\"GITEA_API_GET_ENDPOINT_METHOD_NOT_ALLOWED_PROVEN\",\"credential_values_exposed\":false,\"http_405_count\":1,\"http_405_endpoints\":[\"teams\"],\"proven_endpoint\":\"teams\",\"request_method\":\"GET\",\"response_bodies_exposed\":false,\"transport_failure_count\":0,\"transport_failure_endpoints\":[]},\"identity\":{\"api_auth_mode\":\"basic\",\"api_identity_verified\":true,\"candidate_count\":1,\"credential_source\":\"git-credentials-file\",\"credential_values_exposed\":false,\"git_ls_remote_verified\":true,\"repository_pull_permission_verified\":true,\"repository_push_permission_verified\":true,\"selected_alias_source_count\":1,\"source_detail_sha256\":null,\"source_path_sha256\":\"8243365621e06dc272481f7e8bddbc15f93de999624148dbf66b71a0c7dee5cb\",\"username_sha256\":\"17be8cd40a805524484650e38ba17226d72606f6868226bfc7ddadcd407344a7\",\"valid_credential_set_count\":1},\"next_step\":\"Correct only the proven unsupported GET endpoint handling in the full allowed-write-path READ_ONLY diagnostic, then rerun that diagnostic. Prepare no mutation until one safe write path is proven.\",\"probes\":[{\"body_bytes\":548,\"body_sha256\":\"ee83e11097838c0b245bd4b5016be2cefd3166b7a1ddba457ca2075999ea5aea\",\"content_type_sha256\":\"ce58f2c43b3e44fcde114a5337223939cb05fd032fdc1d01d096014708e5b904\",\"endpoint\":\"current_user\",\"json_shape\":\"object\",\"path_sha256\":\"c9ffce190f1d5c1f64cfc8abc900d97d6ede620346a7ce44a3aa61e67d399711\",\"status\":200,\"transport_exception\":null},{\"body_bytes\":2280,\"body_sha256\":\"adda1db0b9fc3105dc8bbd18774f3b92f12139613600ac7fd2a561bbf5713e6b\",\"content_type_sha256\":\"ce58f2c43b3e44fcde114a5337223939cb05fd032fdc1d01d096014708e5b904\",\"endpoint\":\"repository\",\"json_shape\":\"object\",\"path_sha256\":\"c5c14b838aa6657ad7f28ae067526acb8470083e15168ea3f9e63cd0952d7b61\",\"status\":200,\"transport_exception\":null},{\"body_bytes\":862,\"body_sha256\":\"9259d73f0f6a6674805580f1f9bb623316eaee8c7504636aecfc3c17eaf80dfa\",\"content_type_sha256\":\"ce58f2c43b3e44fcde114a5337223939cb05fd032fdc1d01d096014708e5b904\",\"endpoint\":\"main_branch\",\"json_shape\":\"object\",\"path_sha256\":\"a4a4e639825e02e836cc51173635b93ffb28679b773123c8319526ec3147c5d0\",\"status\":200,\"transport_exception\":null},{\"body_bytes\":1015,\"body_sha256\":\"c7c2608d695adeddb59f822cc51ae26916d7885ebedc7e0bb6453924394117c5\",\"content_type_sha256\":\"ce58f2c43b3e44fcde114a5337223939cb05fd032fdc1d01d096014708e5b904\",\"endpoint\":\"branch_protection_exact\",\"json_shape\":\"object\",\"path_sha256\":\"d5099ab1b952312208c000c94f32d4c4b9b1d5c84a35febdca2116efb1ecd173\",\"status\":200,\"transport_exception\":null},{\"body_bytes\":1017,\"body_sha256\":\"063eb028bbb24c2e93f71369bd0d6f1ec420eccf996788e441bd5d8a1a4cce83\",\"content_type_sha256\":\"ce58f2c43b3e44fcde114a5337223939cb05fd032fdc1d01d096014708e5b904\",\"endpoint\":\"branch_protection_list\",\"json_shape\":\"array\",\"path_sha256\":\"5fd14c1a3d505f92404100fae148a80a52c0be9aef873102e003f6d17f738427\",\"status\":200,\"transport_exception\":null},{\"body_bytes\":598,\"body_sha256\":\"0aa7ab6cd0d0e02bb67203349c3b5c6495df2a3b479805cf2dfacad697fc7abd\",\"content_type_sha256\":\"ce58f2c43b3e44fcde114a5337223939cb05fd032fdc1d01d096014708e5b904\",\"endpoint\":\"collaborator_permission\",\"json_shape\":\"object\",\"path_sha256\":\"bb33cbd7bf37d153c05ba5dfabff630826eb9fa7497a3968b75ba50cc4b91c40\",\"status\":200,\"transport_exception\":null},{\"body_bytes\":2,\"body_sha256\":\"4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945\",\"content_type_sha256\":\"ce58f2c43b3e44fcde114a5337223939cb05fd032fdc1d01d096014708e5b904\",\"endpoint\":\"deploy_keys\",\"json_shape\":\"array\",\"path_sha256\":\"b82598550a75f77dc46834086bea9a41c21a5edaf686002e7f8d514a5c1566ea\",\"status\":200,\"transport_exception\":null},{\"body_bytes\":2,\"body_sha256\":\"4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945\",\"content_type_sha256\":\"ce58f2c43b3e44fcde114a5337223939cb05fd032fdc1d01d096014708e5b904\",\"endpoint\":\"pull_requests\",\"json_shape\":\"array\",\"path_sha256\":\"5ad87c8455e15b58dd402f940542e6531b970e9dee5500d0a074cbd5ddf41479\",\"status\":200,\"transport_exception\":null},{\"body_bytes\":10955,\"body_sha256\":\"e3b8dff8b1a58b55ad9dd37bf6c628af5026b0d7c288f34d6d604e3b4c98802b\",\"content_type_sha256\":\"ce58f2c43b3e44fcde114a5337223939cb05fd032fdc1d01d096014708e5b904\",\"endpoint\":\"branches\",\"json_shape\":\"array\",\"path_sha256\":\"886118aa7aaa06d4f907594ae1fff9781c97913e3d1b9158946213ee5cd06372\",\"status\":200,\"transport_exception\":null},{\"body_bytes\":538,\"body_sha256\":\"aef10a9a27871982f8e6451e2578d8843de6c93c835b32d5dd27058214ea4d77\",\"content_type_sha256\":\"ce58f2c43b3e44fcde114a5337223939cb05fd032fdc1d01d096014708e5b904\",\"endpoint\":\"actions_workflows\",\"json_shape\":\"object\",\"path_sha256\":\"dc2367b736bcc0bbd27eb1b61fce7f37e8e8bf26f37d9f04f5dde07a0e245d3f\",\"status\":200,\"transport_exception\":null},{\"body_bytes\":696,\"body_sha256\":\"3cd8417345b4d0086683f153984f4368fd05c5e7b1e622a7e5f70699e15229b0\",\"content_type_sha256\":\"ce58f2c43b3e44fcde114a5337223939cb05fd032fdc1d01d096014708e5b904\",\"endpoint\":\"collaborators\",\"json_shape\":\"array\",\"path_sha256\":\"d598d0b7897ab8a5e55d0006fd70ee991cabf60c81bb68cec8c66deb99ab5aa4\",\"status\":200,\"transport_exception\":null},{\"body_bytes\":91,\"body_sha256\":\"edaa0e5b66a5d560a724418f607fc9e4b597a4c4c9e869d157b68df03dbf412b\",\"content_type_sha256\":\"ce58f2c43b3e44fcde114a5337223939cb05fd032fdc1d01d096014708e5b904\",\"endpoint\":\"teams\",\"json_shape\":\"object\",\"path_sha256\":\"80730d87f43707f670d9fd6aa13ead2145119a7618077edab82583506b71cd77\",\"status\":405,\"transport_exception\":null}],\"remote_main\":\"fe1221b06643db3b00a621b0230f92a46a4edc2b\",\"remote_main_matches_expected\":true},\"error_system_v2_future_record\":{\"classification\":\"GITEA_BRANCH_PROTECTION_REJECTS_DIRECT_PUSHER\",\"fingerprint\":\"40795f946c36fcaaf8413b2b46b1900a5df4771d93aeb24f2a596287df0a8023\",\"id\":\"GITEA_PROTECTED_MAIN_DIRECT_PUSH_DRY_RUN_FALSE_POSITIVE\",\"negative_control\":\"dry-run may return rc=0 without exercising the server-side protected-branch mutation decision\",\"normalized_signature\":\"gitea protected main rejects direct push while git push --dry-run succeeds; dry-run does not prove that the server-side protected-branch pre-receive path will accept a real update\",\"positive_control\":\"protected main has direct push disabled and the previous real push was rejected\",\"prevention_rule\":\"A successful git push --dry-run must never be treated as proof that a real update to a protected branch is allowed; the configured branch-protection write path must be proven separately by read-only evidence.\",\"regression_test_required\":true,\"space\":\"runtime\"},\"exact_error\":null,\"identity_confirmed\":true,\"mode\":\"READ_ONLY\",\"mutation_outcome\":\"NO_MUTATION\",\"next_step\":\"Correct only the proven unsupported GET endpoint handling in the full allowed-write-path READ_ONLY diagnostic, then rerun that diagnostic. Prepare no mutation until one safe write path is proven.\",\"output_truncated_in_json\":false,\"previous_exact_result\":{\"capsule_sha256\":\"7f5fc3c3ec8fe515b602898848a521cd6d4df2129973d507343c83f9a3ba635d\",\"command_id\":\"HOMELAB-GITEA-ALLOWED-PUSH-PATH-R9-EXACT-RESULT-STATE-BIND-READ-ONLY-20260806T011000Z\",\"identity_confirmed\":true,\"output_complete\":true,\"output_sha256\":\"fd30c254ca3ce565304bcc80899748c7b05f48cdaaae70246dd2aa9e5e2bd3c9\",\"published_resources_checked\":3,\"runner_document_rc\":0,\"runner_json_sha256\":\"cd501039bfd4450ad36b9fbe90d4d1b07fb05320c4e5e1a1de7a5f630fddee4d\",\"runner_rc\":0,\"runner_text_sha256\":\"09e0362a11679eae5c89447bbcfd1b0010b267856f9e4ad90b42f97321b8ee64\",\"runner_wrapper_matches_document\":true,\"semantic_fields_verified\":[\"changes_made\",\"command_id\",\"command_rc\",\"control_plane_error\",\"found\",\"mutation_outcome\",\"output_complete\",\"output_truncated_in_json\",\"output_truncated_in_runner_json\",\"private_addresses_included\",\"rc\",\"rollback_restored\",\"rollback_started\",\"runner_document_rc\",\"runner_rc\",\"runner_status\",\"runner_wrapper_matches_document\",\"sanitized\",\"secrets_included\",\"status\"],\"slot_directory_count\":12,\"slot_lane\":\"e\"},\"rc\":0,\"rollback_restored\":null,\"rollback_started\":false,\"schema\":\"homelab.gitea-api-405-endpoint-diagnostic.v1\",\"status\":\"OK\"}\n"
 }
diff --git a/runtime/latest.txt b/runtime/latest.txt
index 5139b80..9b4b1b2 100644
--- a/runtime/latest.txt
+++ b/runtime/latest.txt
@@ -1,5 +1,5 @@
 CHAT_OUTPUT_BEGIN
-COMMAND_ID=HOMELAB-GITEA-ALLOWED-PUSH-PATH-R9-EXACT-RESULT-STATE-BIND-READ-ONLY-20260806T011000Z
+COMMAND_ID=HOMELAB-GITEA-R9-API-405-ENDPOINT-DIAGNOSTIC-READ-ONLY-20260806T011500Z
 STATUS=OK
 RC=0
 HOST=pve01
@@ -9,7 +9,7 @@ REFERENCE_REGISTER_CHECK=OK
 REFERENCE_SHA256=5763f2f8edc75fcf6f3951f8c95896d1cc112ceccb6cf5b64a383f540a4deb8e
 ERROR_REGISTER_CHECK=OK
 ERROR_REGISTER_SHA256=24934a2c7fa5c26f6e828583c4aefac7f143b40c0171736ed7571e617d55ab83
-COMMAND_SHA256=9dcdeb16462922e9c06293746594277b11569e1f618d68b339155dabbcd85a4e
+COMMAND_SHA256=f9a58fe5afa47e62434e6858727118332f3c0c14c6360b61c10264aae4d6e208
 DUPLICATE_FAILED_COMMAND_BLOCKED=false
 EXECUTION_STARTED=true
 CHANGE_DECLARED=false
@@ -24,11 +24,11 @@ MUTATION_OUTCOME=NO_MUTATION
 SANITIZED=yes
 SECRETS_INCLUDED=no
 PRIVATE_ADDRESSES_INCLUDED=no
-RAW_EVIDENCE_SHA256=fd30c254ca3ce565304bcc80899748c7b05f48cdaaae70246dd2aa9e5e2bd3c9
-SANITIZED_OUTPUT_SHA256=fd30c254ca3ce565304bcc80899748c7b05f48cdaaae70246dd2aa9e5e2bd3c9
+RAW_EVIDENCE_SHA256=61a298a66b6e307dd84363f18a534d5990c7e858b49854e7cac54c202250350c
+SANITIZED_OUTPUT_SHA256=61a298a66b6e307dd84363f18a534d5990c7e858b49854e7cac54c202250350c
 OUTPUT_BEGIN
-HOMELAB_RESULT_CONTRACT={"changes_made":false,"command_id":"HOMELAB-GITEA-ALLOWED-PUSH-PATH-R9-EXACT-RESULT-STATE-BIND-READ-ONLY-20260806T011000Z","command_rc":0,"control_plane_error":null,"mutation_outcome":"NO_MUTATION","output_truncated_in_json":false,"rc":0,"rollback_restored":null,"rollback_started":false,"status":"OK","version":1}
-{"changes_made":false,"command_id":"HOMELAB-GITEA-ALLOWED-PUSH-PATH-R9-EXACT-RESULT-STATE-BIND-READ-ONLY-20260806T011000Z","command_rc":0,"control_plane_error":null,"exact_error":null,"identity_confirmed":true,"mutation_outcome":"NO_MUTATION","next_step":"Use the target result only after its identity and all runner fields are reviewed. If the target proved one safe path, prepare the single atomic ten-path transaction through that path.","output_truncated_in_json":false,"rc":0,"rollback_restored":null,"rollback_started":false,"schema":"homelab.exact-result-state-bind.v5","status":"OK","target":{"adapter_state_sha256":"42bf8ec4ad6a6628aa7a18f0422eb3e01c278a998a304f2dbb6c59cbfbb08f6e","allowed_path_diagnostics":{"actions_workflow_count":null,"admin_branch_protection_change_capability":null,"admin_branch_protection_change_selected":null,"candidate_branch_exists":null,"documented_automation_write_path":null,"dry_run_corroborative_only":null,"main_user_can_merge":null,"main_user_can_push":null,"matching_protection_rule_count":null,"merge_styles":[],"other_write_capable_collaborator_count":null,"owner_admin_direct_push_bypass_proven":null,"pull_request_api_readable":null,"pull_requests_enabled":null,"read_write_deploy_key_count":null,"service_account_or_deploy_key_path_selected":null,"temp_branch_push_dry_run_allowed":null,"workflow_or_bot_path_selected":null,"write_capable_deploy_key_available_to_current_transaction":null,"write_capable_team_count":null},"capsule_sha256":"7f493ec3cb98128252e51e8222d534bce36f4085a3967b3a269c4c87c4af8329","changes_made":false,"command_id":"HOMELAB-GITEA-ALLOWED-PUSH-PATH-DIAGNOSTIC-READ-ONLY-R9-20260806T010500Z","command_rc":2,"control_plane_error":null,"exact_error":{"code":"GITEA_API_READ_FAILED","evidence":{"status":405},"message":"Gitea API read failed"},"identity":{"active":null,"api_auth_mode":"None","api_identity_verified":null,"candidate_count":null,"credential_source":"None","credential_values_exposed":null,"git_ls_remote_verified":null,"permission":null,"repository_permissions":{"admin":null,"pull":null,"push":null},"repository_pull_permission_verified":null,"repository_push_permission_verified":null,"restricted":null,"selected_alias_source_count":null,"source_detail_sha256":null,"source_path_sha256":null,"username_sha256":null,"valid_credential_set_count":null},"main_protection":{"current_user_in_push_whitelist":null,"current_user_merge_allowed":null,"effective_branch_protection_name_present":null,"enable_merge_whitelist":null,"enable_push":null,"enable_push_whitelist":null,"enable_status_check":null,"protected":null,"protected_file_patterns_present":null,"require_signed_commits":null,"required_approvals":null,"user_can_merge":null,"user_can_push":null},"mutation_outcome":"NO_MUTATION","output_sha256":"8f2549fd6ab655d5f17581e81e4e536c63c3a154363dcb26d25f6de2df03905e","output_truncated_in_json":false,"previous_exact_result":{"capsule_sha256":"40b0a483eaa5034980607b36aa5ea927d906a063dff1f4dcb2b83b6d9d557d7f","command_id":"HOMELAB-GITEA-ALLOWED-PUSH-PATH-R8-EXACT-RESULT-STATE-BIND-READ-ONLY-20260806T010000Z","identity_confirmed":true,"output_complete":true,"output_sha256":"ae0ed3eefb47cd8bbe0968f320c365a913f4f0f1cc70b8b0eba891b6ab997195","runner_document_rc":0,"runner_json_sha256":"b69136768b52aa51798ef0a34f4d54ac6cf312acc21395f75c3d69419499a0d4","runner_rc":0,"runner_text_sha256":"f49c93d36fe0329ad07efc7cabda7696c04b8bfd0ac414bb316755ba08061897","runner_wrapper_matches_document":true,"slot_directory_count":12,"slot_lane":"0"},"public_exact_result":{"available":false,"exact_error":{"code":"PUBLIC_EXACT_HTTP_ERROR","evidence":{"status":409},"message":"Published exact-result link returned an HTTP error"},"lane":"1","output_found":false,"published_resource_count":0,"runner_json_found":false,"runner_text_found":false,"slot_depth":11},"rc":2,"remote_main":null,"remote_unchanged_since_previous_rejection":null,"repository_policy_evidence":{"conflicting_direct_main_policy_found":null,"explicit_pr_policy_found":null,"policy_file_count":null,"workflow_count":null},"rollback_restored":null,"rollback_started":false,"runner_document_rc":null,"runner_json_sha256":"c9f428db01efeb6950d881f2f0f3b5c54c67a750eaa6ff893b22574e6c9b20e7","runner_rc":null,"runner_text_sha256":"4426d05e6035eb86a0e36a79d53e723f8795ebe138c59ca5af3aa23ed8b26952","runner_wrapper_matches_document":null,"single_proven_safe_path":{"classification":null,"next_atomic_transaction":"None","proof":{},"proven":null,"proven_path_count":null,"proven_paths":[],"scope_path_count":null},"status":"ERROR","target_report_identity_confirmed":true},"target_command_id":"HOMELAB-GITEA-ALLOWED-PUSH-PATH-DIAGNOSTIC-READ-ONLY-R9-20260806T010500Z"}
+HOMELAB_RESULT_CONTRACT={"changes_made":false,"command_id":"HOMELAB-GITEA-R9-API-405-ENDPOINT-DIAGNOSTIC-READ-ONLY-20260806T011500Z","command_rc":0,"control_plane_error":null,"mutation_outcome":"NO_MUTATION","output_truncated_in_json":false,"rc":0,"rollback_restored":null,"rollback_started":false,"status":"OK","version":1}
+{"changes_made":false,"command_id":"HOMELAB-GITEA-R9-API-405-ENDPOINT-DIAGNOSTIC-READ-ONLY-20260806T011500Z","command_rc":0,"control_plane_error":null,"diagnosis":{"diagnosis":{"classification":"GITEA_API_GET_ENDPOINT_METHOD_NOT_ALLOWED_PROVEN","credential_values_exposed":false,"http_405_count":1,"http_405_endpoints":["teams"],"proven_endpoint":"teams","request_method":"GET","response_bodies_exposed":false,"transport_failure_count":0,"transport_failure_endpoints":[]},"identity":{"api_auth_mode":"basic","api_identity_verified":true,"candidate_count":1,"credential_source":"git-credentials-file","credential_values_exposed":false,"git_ls_remote_verified":true,"repository_pull_permission_verified":true,"repository_push_permission_verified":true,"selected_alias_source_count":1,"source_detail_sha256":null,"source_path_sha256":"8243365621e06dc272481f7e8bddbc15f93de999624148dbf66b71a0c7dee5cb","username_sha256":"17be8cd40a805524484650e38ba17226d72606f6868226bfc7ddadcd407344a7","valid_credential_set_count":1},"next_step":"Correct only the proven unsupported GET endpoint handling in the full allowed-write-path READ_ONLY diagnostic, then rerun that diagnostic. Prepare no mutation until one safe write path is proven.","probes":[{"body_bytes":548,"body_sha256":"ee83e11097838c0b245bd4b5016be2cefd3166b7a1ddba457ca2075999ea5aea","content_type_sha256":"ce58f2c43b3e44fcde114a5337223939cb05fd032fdc1d01d096014708e5b904","endpoint":"current_user","json_shape":"object","path_sha256":"c9ffce190f1d5c1f64cfc8abc900d97d6ede620346a7ce44a3aa61e67d399711","status":200,"transport_exception":null},{"body_bytes":2280,"body_sha256":"adda1db0b9fc3105dc8bbd18774f3b92f12139613600ac7fd2a561bbf5713e6b","content_type_sha256":"ce58f2c43b3e44fcde114a5337223939cb05fd032fdc1d01d096014708e5b904","endpoint":"repository","json_shape":"object","path_sha256":"c5c14b838aa6657ad7f28ae067526acb8470083e15168ea3f9e63cd0952d7b61","status":200,"transport_exception":null},{"body_bytes":862,"body_sha256":"9259d73f0f6a6674805580f1f9bb623316eaee8c7504636aecfc3c17eaf80dfa","content_type_sha256":"ce58f2c43b3e44fcde114a5337223939cb05fd032fdc1d01d096014708e5b904","endpoint":"main_branch","json_shape":"object","path_sha256":"a4a4e639825e02e836cc51173635b93ffb28679b773123c8319526ec3147c5d0","status":200,"transport_exception":null},{"body_bytes":1015,"body_sha256":"c7c2608d695adeddb59f822cc51ae26916d7885ebedc7e0bb6453924394117c5","content_type_sha256":"ce58f2c43b3e44fcde114a5337223939cb05fd032fdc1d01d096014708e5b904","endpoint":"branch_protection_exact","json_shape":"object","path_sha256":"d5099ab1b952312208c000c94f32d4c4b9b1d5c84a35febdca2116efb1ecd173","status":200,"transport_exception":null},{"body_bytes":1017,"body_sha256":"063eb028bbb24c2e93f71369bd0d6f1ec420eccf996788e441bd5d8a1a4cce83","content_type_sha256":"ce58f2c43b3e44fcde114a5337223939cb05fd032fdc1d01d096014708e5b904","endpoint":"branch_protection_list","json_shape":"array","path_sha256":"5fd14c1a3d505f92404100fae148a80a52c0be9aef873102e003f6d17f738427","status":200,"transport_exception":null},{"body_bytes":598,"body_sha256":"0aa7ab6cd0d0e02bb67203349c3b5c6495df2a3b479805cf2dfacad697fc7abd","content_type_sha256":"ce58f2c43b3e44fcde114a5337223939cb05fd032fdc1d01d096014708e5b904","endpoint":"collaborator_permission","json_shape":"object","path_sha256":"bb33cbd7bf37d153c05ba5dfabff630826eb9fa7497a3968b75ba50cc4b91c40","status":200,"transport_exception":null},{"body_bytes":2,"body_sha256":"4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945","content_type_sha256":"ce58f2c43b3e44fcde114a5337223939cb05fd032fdc1d01d096014708e5b904","endpoint":"deploy_keys","json_shape":"array","path_sha256":"b82598550a75f77dc46834086bea9a41c21a5edaf686002e7f8d514a5c1566ea","status":200,"transport_exception":null},{"body_bytes":2,"body_sha256":"4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945","content_type_sha256":"ce58f2c43b3e44fcde114a5337223939cb05fd032fdc1d01d096014708e5b904","endpoint":"pull_requests","json_shape":"array","path_sha256":"5ad87c8455e15b58dd402f940542e6531b970e9dee5500d0a074cbd5ddf41479","status":200,"transport_exception":null},{"body_bytes":10955,"body_sha256":"e3b8dff8b1a58b55ad9dd37bf6c628af5026b0d7c288f34d6d604e3b4c98802b","content_type_sha256":"ce58f2c43b3e44fcde114a5337223939cb05fd032fdc1d01d096014708e5b904","endpoint":"branches","json_shape":"array","path_sha256":"886118aa7aaa06d4f907594ae1fff9781c97913e3d1b9158946213ee5cd06372","status":200,"transport_exception":null},{"body_bytes":538,"body_sha256":"aef10a9a27871982f8e6451e2578d8843de6c93c835b32d5dd27058214ea4d77","content_type_sha256":"ce58f2c43b3e44fcde114a5337223939cb05fd032fdc1d01d096014708e5b904","endpoint":"actions_workflows","json_shape":"object","path_sha256":"dc2367b736bcc0bbd27eb1b61fce7f37e8e8bf26f37d9f04f5dde07a0e245d3f","status":200,"transport_exception":null},{"body_bytes":696,"body_sha256":"3cd8417345b4d0086683f153984f4368fd05c5e7b1e622a7e5f70699e15229b0","content_type_sha256":"ce58f2c43b3e44fcde114a5337223939cb05fd032fdc1d01d096014708e5b904","endpoint":"collaborators","json_shape":"array","path_sha256":"d598d0b7897ab8a5e55d0006fd70ee991cabf60c81bb68cec8c66deb99ab5aa4","status":200,"transport_exception":null},{"body_bytes":91,"body_sha256":"edaa0e5b66a5d560a724418f607fc9e4b597a4c4c9e869d157b68df03dbf412b","content_type_sha256":"ce58f2c43b3e44fcde114a5337223939cb05fd032fdc1d01d096014708e5b904","endpoint":"teams","json_shape":"object","path_sha256":"80730d87f43707f670d9fd6aa13ead2145119a7618077edab82583506b71cd77","status":405,"transport_exception":null}],"remote_main":"fe1221b06643db3b00a621b0230f92a46a4edc2b","remote_main_matches_expected":true},"error_system_v2_future_record":{"classification":"GITEA_BRANCH_PROTECTION_REJECTS_DIRECT_PUSHER","fingerprint":"40795f946c36fcaaf8413b2b46b1900a5df4771d93aeb24f2a596287df0a8023","id":"GITEA_PROTECTED_MAIN_DIRECT_PUSH_DRY_RUN_FALSE_POSITIVE","negative_control":"dry-run may return rc=0 without exercising the server-side protected-branch mutation decision","normalized_signature":"gitea protected main rejects direct push while git push --dry-run succeeds; dry-run does not prove that the server-side protected-branch pre-receive path will accept a real update","positive_control":"protected main has direct push disabled and the previous real push was rejected","prevention_rule":"A successful git push --dry-run must never be treated as proof that a real update to a protected branch is allowed; the configured branch-protection write path must be proven separately by read-only evidence.","regression_test_required":true,"space":"runtime"},"exact_error":null,"identity_confirmed":true,"mode":"READ_ONLY","mutation_outcome":"NO_MUTATION","next_step":"Correct only the proven unsupported GET endpoint handling in the full allowed-write-path READ_ONLY diagnostic, then rerun that diagnostic. Prepare no mutation until one safe write path is proven.","output_truncated_in_json":false,"previous_exact_result":{"capsule_sha256":"7f5fc3c3ec8fe515b602898848a521cd6d4df2129973d507343c83f9a3ba635d","command_id":"HOMELAB-GITEA-ALLOWED-PUSH-PATH-R9-EXACT-RESULT-STATE-BIND-READ-ONLY-20260806T011000Z","identity_confirmed":true,"output_complete":true,"output_sha256":"fd30c254ca3ce565304bcc80899748c7b05f48cdaaae70246dd2aa9e5e2bd3c9","published_resources_checked":3,"runner_document_rc":0,"runner_json_sha256":"cd501039bfd4450ad36b9fbe90d4d1b07fb05320c4e5e1a1de7a5f630fddee4d","runner_rc":0,"runner_text_sha256":"09e0362a11679eae5c89447bbcfd1b0010b267856f9e4ad90b42f97321b8ee64","runner_wrapper_matches_document":true,"semantic_fields_verified":["changes_made","command_id","command_rc","control_plane_error","found","mutation_outcome","output_complete","output_truncated_in_json","output_truncated_in_runner_json","private_addresses_included","rc","rollback_restored","rollback_started","runner_document_rc","runner_rc","runner_status","runner_wrapper_matches_document","sanitized","secrets_included","status"],"slot_directory_count":12,"slot_lane":"e"},"rc":0,"rollback_restored":null,"rollback_started":false,"schema":"homelab.gitea-api-405-endpoint-diagnostic.v1","status":"OK"}
 
 OUTPUT_END
 CHAT_OUTPUT_END