diff --git a/runtime/history/WORKFLOW-CONTRACT-001.json b/runtime/history/WORKFLOW-CONTRACT-001.json
new file mode 100644
index 0000000..9ed7494
--- /dev/null
+++ b/runtime/history/WORKFLOW-CONTRACT-001.json
@@ -0,0 +1,30 @@
+{
+  "schema_version": 1,
+  "channel": "homelab-runtime",
+  "command_id": "WORKFLOW-CONTRACT-001",
+  "status": "OK",
+  "rc": 0,
+  "host": "pve01",
+  "mode": "change",
+  "component": "assistant-workflow",
+  "started_at_utc": "2026-07-21T07:37:02Z",
+  "finished_at_utc": "2026-07-21T07:37:02Z",
+  "reference_register_checked": true,
+  "reference_sha256": "f6f7749fda946015116cdbbd754c7e7f20356b4a6cf4df330a1b0b8fdf59cbb2",
+  "error_register_checked": true,
+  "error_register_sha256": "ab8308549db90d235b591af0581580c3c7ba1b287b129cc6111c2eef0a0f9ecc",
+  "command_sha256": "5ca7615b38ba58f4819ab92f64d6feee728dc15431fe2161f6fa98fc9941d8c5",
+  "duplicate_failed_command_blocked": false,
+  "block_reason": null,
+  "execution_started": true,
+  "changes_made": true,
+  "sanitized": true,
+  "secrets_included": false,
+  "private_addresses_included": false,
+  "raw_evidence_retained_locally": true,
+  "raw_evidence_sha256": "9260806b4d201b9f2e10aabe71b30cf5c58876f0199ac6de0594807f1d1d8967",
+  "sanitized_output_sha256": "9260806b4d201b9f2e10aabe71b30cf5c58876f0199ac6de0594807f1d1d8967",
+  "output_truncated_in_json": false,
+  "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
+  "output": "WORKFLOW_CONTRACT_VERSION=2\nCONFIRMATION_TOKENS=BACKSLASH_OR_COMMA\nCONFIRMATION_MEANING=COMMAND_FINISHED_READ_IMMUTABLE_HISTORY_AND_CONTINUE\nMANUAL_OUTPUT_COPY=FORBIDDEN\nFILE_UPLOADS=NOT_REQUIRED\nCOMMAND_DISPLAY=COLLAPSED_SPOILER\nCOMMANDS_PER_STEP=ONE\nCOMMAND_STYLE=SHORT_TRANSPARENT_NO_HEREDOC_NO_BASE64\nRESULT_SOURCE=IMMUTABLE_HISTORY_BY_COMMAND_ID\nLATEST_JSON_AUTHORITATIVE=false\nBEFORE_COMMAND=LOAD_BOOTSTRAP_ERROR_INDEX_PREVIOUS_RESULT\nAFTER_FAILURE=ANALYZE_PUBLISHED_RESULT_BEFORE_NEXT_COMMAND\nNO_REPEAT=EXACT_FAILED_COMMAND_HASH\nNEW_CHAT_INPUT=BOOTSTRAP_URL_ONLY\nASSISTANT_MUST_CHECK_HISTORY_BEFORE_CLAIMING_RESULT_MISSING=true\n"
+}
diff --git a/runtime/history/WORKFLOW-CONTRACT-001.txt b/runtime/history/WORKFLOW-CONTRACT-001.txt
new file mode 100644
index 0000000..0c5cf5c
--- /dev/null
+++ b/runtime/history/WORKFLOW-CONTRACT-001.txt
@@ -0,0 +1,39 @@
+CHAT_OUTPUT_BEGIN
+COMMAND_ID=WORKFLOW-CONTRACT-001
+STATUS=OK
+RC=0
+HOST=pve01
+MODE=change
+COMPONENT=assistant-workflow
+REFERENCE_REGISTER_CHECK=OK
+REFERENCE_SHA256=f6f7749fda946015116cdbbd754c7e7f20356b4a6cf4df330a1b0b8fdf59cbb2
+ERROR_REGISTER_CHECK=OK
+ERROR_REGISTER_SHA256=ab8308549db90d235b591af0581580c3c7ba1b287b129cc6111c2eef0a0f9ecc
+COMMAND_SHA256=5ca7615b38ba58f4819ab92f64d6feee728dc15431fe2161f6fa98fc9941d8c5
+DUPLICATE_FAILED_COMMAND_BLOCKED=false
+EXECUTION_STARTED=true
+CHANGES_MADE=true
+SANITIZED=yes
+SECRETS_INCLUDED=no
+PRIVATE_ADDRESSES_INCLUDED=no
+RAW_EVIDENCE_SHA256=9260806b4d201b9f2e10aabe71b30cf5c58876f0199ac6de0594807f1d1d8967
+SANITIZED_OUTPUT_SHA256=9260806b4d201b9f2e10aabe71b30cf5c58876f0199ac6de0594807f1d1d8967
+OUTPUT_BEGIN
+WORKFLOW_CONTRACT_VERSION=2
+CONFIRMATION_TOKENS=BACKSLASH_OR_COMMA
+CONFIRMATION_MEANING=COMMAND_FINISHED_READ_IMMUTABLE_HISTORY_AND_CONTINUE
+MANUAL_OUTPUT_COPY=FORBIDDEN
+FILE_UPLOADS=NOT_REQUIRED
+COMMAND_DISPLAY=COLLAPSED_SPOILER
+COMMANDS_PER_STEP=ONE
+COMMAND_STYLE=SHORT_TRANSPARENT_NO_HEREDOC_NO_BASE64
+RESULT_SOURCE=IMMUTABLE_HISTORY_BY_COMMAND_ID
+LATEST_JSON_AUTHORITATIVE=false
+BEFORE_COMMAND=LOAD_BOOTSTRAP_ERROR_INDEX_PREVIOUS_RESULT
+AFTER_FAILURE=ANALYZE_PUBLISHED_RESULT_BEFORE_NEXT_COMMAND
+NO_REPEAT=EXACT_FAILED_COMMAND_HASH
+NEW_CHAT_INPUT=BOOTSTRAP_URL_ONLY
+ASSISTANT_MUST_CHECK_HISTORY_BEFORE_CLAIMING_RESULT_MISSING=true
+
+OUTPUT_END
+CHAT_OUTPUT_END
diff --git a/runtime/latest.json b/runtime/latest.json
index cad0c4b..9ed7494 100644
--- a/runtime/latest.json
+++ b/runtime/latest.json
@@ -1,30 +1,30 @@
 {
   "schema_version": 1,
   "channel": "homelab-runtime",
-  "command_id": "ERRORS-INDEX-FILECHECK-005",
+  "command_id": "WORKFLOW-CONTRACT-001",
   "status": "OK",
   "rc": 0,
   "host": "pve01",
-  "mode": "read-only",
-  "component": "error-ledger",
-  "started_at_utc": "2026-07-21T07:24:47Z",
-  "finished_at_utc": "2026-07-21T07:24:47Z",
+  "mode": "change",
+  "component": "assistant-workflow",
+  "started_at_utc": "2026-07-21T07:37:02Z",
+  "finished_at_utc": "2026-07-21T07:37:02Z",
   "reference_register_checked": true,
   "reference_sha256": "f6f7749fda946015116cdbbd754c7e7f20356b4a6cf4df330a1b0b8fdf59cbb2",
   "error_register_checked": true,
   "error_register_sha256": "ab8308549db90d235b591af0581580c3c7ba1b287b129cc6111c2eef0a0f9ecc",
-  "command_sha256": "6f3a510fd735ca36265ce9c39adba1ccad8e714899657a3198742663ff7db3ff",
+  "command_sha256": "5ca7615b38ba58f4819ab92f64d6feee728dc15431fe2161f6fa98fc9941d8c5",
   "duplicate_failed_command_blocked": false,
   "block_reason": null,
   "execution_started": true,
-  "changes_made": false,
+  "changes_made": true,
   "sanitized": true,
   "secrets_included": false,
   "private_addresses_included": false,
   "raw_evidence_retained_locally": true,
-  "raw_evidence_sha256": "0c6d94e336179aa04de5c6566c9d7e11ddb085929882adb164e09ee3242f1528",
-  "sanitized_output_sha256": "0c6d94e336179aa04de5c6566c9d7e11ddb085929882adb164e09ee3242f1528",
+  "raw_evidence_sha256": "9260806b4d201b9f2e10aabe71b30cf5c58876f0199ac6de0594807f1d1d8967",
+  "sanitized_output_sha256": "9260806b4d201b9f2e10aabe71b30cf5c58876f0199ac6de0594807f1d1d8967",
   "output_truncated_in_json": false,
   "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
-  "output": "SCRIPT_PRESENT=yes SIZE=8573 MODE=644 OWNER=root:root MTIME=2026-07-21 10:22:12.700414778 +0300\nPYTHON_SYNTAX=OK\n"
+  "output": "WORKFLOW_CONTRACT_VERSION=2\nCONFIRMATION_TOKENS=BACKSLASH_OR_COMMA\nCONFIRMATION_MEANING=COMMAND_FINISHED_READ_IMMUTABLE_HISTORY_AND_CONTINUE\nMANUAL_OUTPUT_COPY=FORBIDDEN\nFILE_UPLOADS=NOT_REQUIRED\nCOMMAND_DISPLAY=COLLAPSED_SPOILER\nCOMMANDS_PER_STEP=ONE\nCOMMAND_STYLE=SHORT_TRANSPARENT_NO_HEREDOC_NO_BASE64\nRESULT_SOURCE=IMMUTABLE_HISTORY_BY_COMMAND_ID\nLATEST_JSON_AUTHORITATIVE=false\nBEFORE_COMMAND=LOAD_BOOTSTRAP_ERROR_INDEX_PREVIOUS_RESULT\nAFTER_FAILURE=ANALYZE_PUBLISHED_RESULT_BEFORE_NEXT_COMMAND\nNO_REPEAT=EXACT_FAILED_COMMAND_HASH\nNEW_CHAT_INPUT=BOOTSTRAP_URL_ONLY\nASSISTANT_MUST_CHECK_HISTORY_BEFORE_CLAIMING_RESULT_MISSING=true\n"
 }
diff --git a/runtime/latest.txt b/runtime/latest.txt
index 5221694..0c5cf5c 100644
--- a/runtime/latest.txt
+++ b/runtime/latest.txt
@@ -1,26 +1,39 @@
 CHAT_OUTPUT_BEGIN
-COMMAND_ID=ERRORS-INDEX-FILECHECK-005
+COMMAND_ID=WORKFLOW-CONTRACT-001
 STATUS=OK
 RC=0
 HOST=pve01
-MODE=read-only
-COMPONENT=error-ledger
+MODE=change
+COMPONENT=assistant-workflow
 REFERENCE_REGISTER_CHECK=OK
 REFERENCE_SHA256=f6f7749fda946015116cdbbd754c7e7f20356b4a6cf4df330a1b0b8fdf59cbb2
 ERROR_REGISTER_CHECK=OK
 ERROR_REGISTER_SHA256=ab8308549db90d235b591af0581580c3c7ba1b287b129cc6111c2eef0a0f9ecc
-COMMAND_SHA256=6f3a510fd735ca36265ce9c39adba1ccad8e714899657a3198742663ff7db3ff
+COMMAND_SHA256=5ca7615b38ba58f4819ab92f64d6feee728dc15431fe2161f6fa98fc9941d8c5
 DUPLICATE_FAILED_COMMAND_BLOCKED=false
 EXECUTION_STARTED=true
-CHANGES_MADE=false
+CHANGES_MADE=true
 SANITIZED=yes
 SECRETS_INCLUDED=no
 PRIVATE_ADDRESSES_INCLUDED=no
-RAW_EVIDENCE_SHA256=0c6d94e336179aa04de5c6566c9d7e11ddb085929882adb164e09ee3242f1528
-SANITIZED_OUTPUT_SHA256=0c6d94e336179aa04de5c6566c9d7e11ddb085929882adb164e09ee3242f1528
+RAW_EVIDENCE_SHA256=9260806b4d201b9f2e10aabe71b30cf5c58876f0199ac6de0594807f1d1d8967
+SANITIZED_OUTPUT_SHA256=9260806b4d201b9f2e10aabe71b30cf5c58876f0199ac6de0594807f1d1d8967
 OUTPUT_BEGIN
-SCRIPT_PRESENT=yes SIZE=8573 MODE=644 OWNER=root:root MTIME=2026-07-21 10:22:12.700414778 +0300
-PYTHON_SYNTAX=OK
+WORKFLOW_CONTRACT_VERSION=2
+CONFIRMATION_TOKENS=BACKSLASH_OR_COMMA
+CONFIRMATION_MEANING=COMMAND_FINISHED_READ_IMMUTABLE_HISTORY_AND_CONTINUE
+MANUAL_OUTPUT_COPY=FORBIDDEN
+FILE_UPLOADS=NOT_REQUIRED
+COMMAND_DISPLAY=COLLAPSED_SPOILER
+COMMANDS_PER_STEP=ONE
+COMMAND_STYLE=SHORT_TRANSPARENT_NO_HEREDOC_NO_BASE64
+RESULT_SOURCE=IMMUTABLE_HISTORY_BY_COMMAND_ID
+LATEST_JSON_AUTHORITATIVE=false
+BEFORE_COMMAND=LOAD_BOOTSTRAP_ERROR_INDEX_PREVIOUS_RESULT
+AFTER_FAILURE=ANALYZE_PUBLISHED_RESULT_BEFORE_NEXT_COMMAND
+NO_REPEAT=EXACT_FAILED_COMMAND_HASH
+NEW_CHAT_INPUT=BOOTSTRAP_URL_ONLY
+ASSISTANT_MUST_CHECK_HISTORY_BEFORE_CLAIMING_RESULT_MISSING=true
 
 OUTPUT_END
 CHAT_OUTPUT_END