diff --git a/runtime/history/HOMELAB-BOOTSTRAP-CANDIDATE-PRIVACY-AUDIT-408.json b/runtime/history/HOMELAB-BOOTSTRAP-CANDIDATE-PRIVACY-AUDIT-408.json
new file mode 100644
index 0000000..4cc987e
--- /dev/null
+++ b/runtime/history/HOMELAB-BOOTSTRAP-CANDIDATE-PRIVACY-AUDIT-408.json
@@ -0,0 +1,30 @@
+{
+  "schema_version": 1,
+  "channel": "homelab-runtime",
+  "command_id": "HOMELAB-BOOTSTRAP-CANDIDATE-PRIVACY-AUDIT-408",
+  "status": "OK",
+  "rc": 0,
+  "host": "pve01",
+  "mode": "read-only",
+  "component": "cluster-audit",
+  "started_at_utc": "2026-07-24T07:41:44Z",
+  "finished_at_utc": "2026-07-24T07:41:44Z",
+  "reference_register_checked": true,
+  "reference_sha256": "5763f2f8edc75fcf6f3951f8c95896d1cc112ceccb6cf5b64a383f540a4deb8e",
+  "error_register_checked": true,
+  "error_register_sha256": "08b3a769b8e38eaa1acec915352fb328180d70caa7ff6cd9d1ec0da426262752",
+  "command_sha256": "67368e234a3d2839fe4ca3f7a45a5e8d4d47a5c0f8d216539f2221bb68403216",
+  "duplicate_failed_command_blocked": false,
+  "block_reason": null,
+  "execution_started": true,
+  "changes_made": false,
+  "sanitized": true,
+  "secrets_included": false,
+  "private_addresses_included": false,
+  "raw_evidence_retained_locally": true,
+  "raw_evidence_sha256": "bbf344b702505664a4039dfc3bf42168943b9c48750bf79d3916d33aaa6563bf",
+  "sanitized_output_sha256": "bbf344b702505664a4039dfc3bf42168943b9c48750bf79d3916d33aaa6563bf",
+  "output_truncated_in_json": false,
+  "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
+  "output": "DETAIL=CANDIDATE_BYTES=462349\nDETAIL=CANDIDATE_SHA256=7be8012c619c01d5770417d3a26ca82c7cd14935ed5cf10fd7cb6e2fa687c82f\nDETAIL=PRIVACY_PATTERN_PRIVATE_KEY_BLOCK_COUNT=0\nDETAIL=PRIVACY_PATTERN_RAW_AUTH_HEADER_COUNT=0\nDETAIL=PRIVACY_PATTERN_RAW_COOKIE_HEADER_COUNT=0\nDETAIL=PRIVACY_PATTERN_RAW_SECRET_ASSIGNMENT_COUNT=0\nDETAIL=PRIVACY_PATTERN_RAW_SKLADCHIK_COOKIE_COUNT=0\nDETAIL=PRIVACY_PATTERN_READER_CAPABILITY_COUNT=0\nDETAIL=PRIVACY_PATTERN_URL_SECRET_PARAMETER_COUNT=0\nDECISION=CANDIDATE_PRIVACY_PASS\nDETAIL=SECRET_VALUES_OUTPUT=NONE\nDETAIL=PUBLIC_BOOTSTRAP_CHANGED=NO\nDETAIL=BOOTSTRAP_CANDIDATE_PRIVACY_AUDIT=PASS\nCHANGES_MADE=NO\n"
+}
diff --git a/runtime/history/HOMELAB-BOOTSTRAP-CANDIDATE-PRIVACY-AUDIT-408.txt b/runtime/history/HOMELAB-BOOTSTRAP-CANDIDATE-PRIVACY-AUDIT-408.txt
new file mode 100644
index 0000000..dc407d4
--- /dev/null
+++ b/runtime/history/HOMELAB-BOOTSTRAP-CANDIDATE-PRIVACY-AUDIT-408.txt
@@ -0,0 +1,38 @@
+CHAT_OUTPUT_BEGIN
+COMMAND_ID=HOMELAB-BOOTSTRAP-CANDIDATE-PRIVACY-AUDIT-408
+STATUS=OK
+RC=0
+HOST=pve01
+MODE=read-only
+COMPONENT=cluster-audit
+REFERENCE_REGISTER_CHECK=OK
+REFERENCE_SHA256=5763f2f8edc75fcf6f3951f8c95896d1cc112ceccb6cf5b64a383f540a4deb8e
+ERROR_REGISTER_CHECK=OK
+ERROR_REGISTER_SHA256=08b3a769b8e38eaa1acec915352fb328180d70caa7ff6cd9d1ec0da426262752
+COMMAND_SHA256=67368e234a3d2839fe4ca3f7a45a5e8d4d47a5c0f8d216539f2221bb68403216
+DUPLICATE_FAILED_COMMAND_BLOCKED=false
+EXECUTION_STARTED=true
+CHANGES_MADE=false
+SANITIZED=yes
+SECRETS_INCLUDED=no
+PRIVATE_ADDRESSES_INCLUDED=no
+RAW_EVIDENCE_SHA256=bbf344b702505664a4039dfc3bf42168943b9c48750bf79d3916d33aaa6563bf
+SANITIZED_OUTPUT_SHA256=bbf344b702505664a4039dfc3bf42168943b9c48750bf79d3916d33aaa6563bf
+OUTPUT_BEGIN
+DETAIL=CANDIDATE_BYTES=462349
+DETAIL=CANDIDATE_SHA256=7be8012c619c01d5770417d3a26ca82c7cd14935ed5cf10fd7cb6e2fa687c82f
+DETAIL=PRIVACY_PATTERN_PRIVATE_KEY_BLOCK_COUNT=0
+DETAIL=PRIVACY_PATTERN_RAW_AUTH_HEADER_COUNT=0
+DETAIL=PRIVACY_PATTERN_RAW_COOKIE_HEADER_COUNT=0
+DETAIL=PRIVACY_PATTERN_RAW_SECRET_ASSIGNMENT_COUNT=0
+DETAIL=PRIVACY_PATTERN_RAW_SKLADCHIK_COOKIE_COUNT=0
+DETAIL=PRIVACY_PATTERN_READER_CAPABILITY_COUNT=0
+DETAIL=PRIVACY_PATTERN_URL_SECRET_PARAMETER_COUNT=0
+DECISION=CANDIDATE_PRIVACY_PASS
+DETAIL=SECRET_VALUES_OUTPUT=NONE
+DETAIL=PUBLIC_BOOTSTRAP_CHANGED=NO
+DETAIL=BOOTSTRAP_CANDIDATE_PRIVACY_AUDIT=PASS
+CHANGES_MADE=NO
+
+OUTPUT_END
+CHAT_OUTPUT_END
diff --git a/runtime/latest.json b/runtime/latest.json
index 58cbc9b..4cc987e 100644
--- a/runtime/latest.json
+++ b/runtime/latest.json
@@ -1,30 +1,30 @@
 {
   "schema_version": 1,
   "channel": "homelab-runtime",
-  "command_id": "HOMELAB-BOOTSTRAP-BUNDLE-CANDIDATE-CREATE-407",
+  "command_id": "HOMELAB-BOOTSTRAP-CANDIDATE-PRIVACY-AUDIT-408",
   "status": "OK",
   "rc": 0,
   "host": "pve01",
-  "mode": "change",
+  "mode": "read-only",
   "component": "cluster-audit",
-  "started_at_utc": "2026-07-24T07:28:41Z",
-  "finished_at_utc": "2026-07-24T07:28:41Z",
+  "started_at_utc": "2026-07-24T07:41:44Z",
+  "finished_at_utc": "2026-07-24T07:41:44Z",
   "reference_register_checked": true,
   "reference_sha256": "5763f2f8edc75fcf6f3951f8c95896d1cc112ceccb6cf5b64a383f540a4deb8e",
   "error_register_checked": true,
   "error_register_sha256": "08b3a769b8e38eaa1acec915352fb328180d70caa7ff6cd9d1ec0da426262752",
-  "command_sha256": "fafc939a2479a7a489da4151e2a7ecec1ec8ed218b3d55f1d8ef32e2006853ab",
+  "command_sha256": "67368e234a3d2839fe4ca3f7a45a5e8d4d47a5c0f8d216539f2221bb68403216",
   "duplicate_failed_command_blocked": false,
   "block_reason": null,
   "execution_started": true,
-  "changes_made": true,
+  "changes_made": false,
   "sanitized": true,
   "secrets_included": false,
   "private_addresses_included": false,
   "raw_evidence_retained_locally": true,
-  "raw_evidence_sha256": "b40e47d633bb49a715fcb2c43d3fa89c0cbd439702535ee845940b7e9dea3fde",
-  "sanitized_output_sha256": "b40e47d633bb49a715fcb2c43d3fa89c0cbd439702535ee845940b7e9dea3fde",
+  "raw_evidence_sha256": "bbf344b702505664a4039dfc3bf42168943b9c48750bf79d3916d33aaa6563bf",
+  "sanitized_output_sha256": "bbf344b702505664a4039dfc3bf42168943b9c48750bf79d3916d33aaa6563bf",
   "output_truncated_in_json": false,
   "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
-  "output": "DETAIL=CANDIDATE_PATH=/var/lib/homelab-bootstrap-bundle/candidate.json\nDETAIL=CANDIDATE_BYTES=462349\nDETAIL=CANDIDATE_SHA256=7be8012c619c01d5770417d3a26ca82c7cd14935ed5cf10fd7cb6e2fa687c82f\nDETAIL=PUBLIC_BOOTSTRAP_CHANGED=NO\nDETAIL=BOOTSTRAP_BUNDLE_CANDIDATE_CREATE=PASS\nCHANGES_MADE=YES\n"
+  "output": "DETAIL=CANDIDATE_BYTES=462349\nDETAIL=CANDIDATE_SHA256=7be8012c619c01d5770417d3a26ca82c7cd14935ed5cf10fd7cb6e2fa687c82f\nDETAIL=PRIVACY_PATTERN_PRIVATE_KEY_BLOCK_COUNT=0\nDETAIL=PRIVACY_PATTERN_RAW_AUTH_HEADER_COUNT=0\nDETAIL=PRIVACY_PATTERN_RAW_COOKIE_HEADER_COUNT=0\nDETAIL=PRIVACY_PATTERN_RAW_SECRET_ASSIGNMENT_COUNT=0\nDETAIL=PRIVACY_PATTERN_RAW_SKLADCHIK_COOKIE_COUNT=0\nDETAIL=PRIVACY_PATTERN_READER_CAPABILITY_COUNT=0\nDETAIL=PRIVACY_PATTERN_URL_SECRET_PARAMETER_COUNT=0\nDECISION=CANDIDATE_PRIVACY_PASS\nDETAIL=SECRET_VALUES_OUTPUT=NONE\nDETAIL=PUBLIC_BOOTSTRAP_CHANGED=NO\nDETAIL=BOOTSTRAP_CANDIDATE_PRIVACY_AUDIT=PASS\nCHANGES_MADE=NO\n"
 }
diff --git a/runtime/latest.txt b/runtime/latest.txt
index 5efe700..dc407d4 100644
--- a/runtime/latest.txt
+++ b/runtime/latest.txt
@@ -1,30 +1,38 @@
 CHAT_OUTPUT_BEGIN
-COMMAND_ID=HOMELAB-BOOTSTRAP-BUNDLE-CANDIDATE-CREATE-407
+COMMAND_ID=HOMELAB-BOOTSTRAP-CANDIDATE-PRIVACY-AUDIT-408
 STATUS=OK
 RC=0
 HOST=pve01
-MODE=change
+MODE=read-only
 COMPONENT=cluster-audit
 REFERENCE_REGISTER_CHECK=OK
 REFERENCE_SHA256=5763f2f8edc75fcf6f3951f8c95896d1cc112ceccb6cf5b64a383f540a4deb8e
 ERROR_REGISTER_CHECK=OK
 ERROR_REGISTER_SHA256=08b3a769b8e38eaa1acec915352fb328180d70caa7ff6cd9d1ec0da426262752
-COMMAND_SHA256=fafc939a2479a7a489da4151e2a7ecec1ec8ed218b3d55f1d8ef32e2006853ab
+COMMAND_SHA256=67368e234a3d2839fe4ca3f7a45a5e8d4d47a5c0f8d216539f2221bb68403216
 DUPLICATE_FAILED_COMMAND_BLOCKED=false
 EXECUTION_STARTED=true
-CHANGES_MADE=true
+CHANGES_MADE=false
 SANITIZED=yes
 SECRETS_INCLUDED=no
 PRIVATE_ADDRESSES_INCLUDED=no
-RAW_EVIDENCE_SHA256=b40e47d633bb49a715fcb2c43d3fa89c0cbd439702535ee845940b7e9dea3fde
-SANITIZED_OUTPUT_SHA256=b40e47d633bb49a715fcb2c43d3fa89c0cbd439702535ee845940b7e9dea3fde
+RAW_EVIDENCE_SHA256=bbf344b702505664a4039dfc3bf42168943b9c48750bf79d3916d33aaa6563bf
+SANITIZED_OUTPUT_SHA256=bbf344b702505664a4039dfc3bf42168943b9c48750bf79d3916d33aaa6563bf
 OUTPUT_BEGIN
-DETAIL=CANDIDATE_PATH=/var/lib/homelab-bootstrap-bundle/candidate.json
 DETAIL=CANDIDATE_BYTES=462349
 DETAIL=CANDIDATE_SHA256=7be8012c619c01d5770417d3a26ca82c7cd14935ed5cf10fd7cb6e2fa687c82f
+DETAIL=PRIVACY_PATTERN_PRIVATE_KEY_BLOCK_COUNT=0
+DETAIL=PRIVACY_PATTERN_RAW_AUTH_HEADER_COUNT=0
+DETAIL=PRIVACY_PATTERN_RAW_COOKIE_HEADER_COUNT=0
+DETAIL=PRIVACY_PATTERN_RAW_SECRET_ASSIGNMENT_COUNT=0
+DETAIL=PRIVACY_PATTERN_RAW_SKLADCHIK_COOKIE_COUNT=0
+DETAIL=PRIVACY_PATTERN_READER_CAPABILITY_COUNT=0
+DETAIL=PRIVACY_PATTERN_URL_SECRET_PARAMETER_COUNT=0
+DECISION=CANDIDATE_PRIVACY_PASS
+DETAIL=SECRET_VALUES_OUTPUT=NONE
 DETAIL=PUBLIC_BOOTSTRAP_CHANGED=NO
-DETAIL=BOOTSTRAP_BUNDLE_CANDIDATE_CREATE=PASS
-CHANGES_MADE=YES
+DETAIL=BOOTSTRAP_CANDIDATE_PRIVACY_AUDIT=PASS
+CHANGES_MADE=NO
 
 OUTPUT_END
 CHAT_OUTPUT_END