diff --git a/runtime/history/GITEA-CLI-CAPABILITIES-004.json b/runtime/history/GITEA-CLI-CAPABILITIES-004.json
new file mode 100644
index 0000000..497ddc9
--- /dev/null
+++ b/runtime/history/GITEA-CLI-CAPABILITIES-004.json
@@ -0,0 +1,30 @@
+{
+  "schema_version": 1,
+  "channel": "homelab-runtime",
+  "command_id": "GITEA-CLI-CAPABILITIES-004",
+  "status": "FAIL",
+  "rc": 1,
+  "host": "pve01",
+  "mode": "read-only",
+  "component": "gitea-runtime",
+  "started_at_utc": "2026-07-21T08:14:52Z",
+  "finished_at_utc": "2026-07-21T08:14:52Z",
+  "reference_register_checked": true,
+  "reference_sha256": "f6f7749fda946015116cdbbd754c7e7f20356b4a6cf4df330a1b0b8fdf59cbb2",
+  "error_register_checked": true,
+  "error_register_sha256": "ab8308549db90d235b591af0581580c3c7ba1b287b129cc6111c2eef0a0f9ecc",
+  "command_sha256": "2cd6c4d28c8f646d8063105fca80b2f80d38c6a5db3a3eb76869de326b12d2d6",
+  "duplicate_failed_command_blocked": false,
+  "block_reason": null,
+  "execution_started": true,
+  "changes_made": false,
+  "sanitized": true,
+  "secrets_included": false,
+  "private_addresses_included": false,
+  "raw_evidence_retained_locally": true,
+  "raw_evidence_sha256": "d8bf627bdaa83c01d37507ddc4eec6766482bac07bad1e3e800f2e60da3f007e",
+  "sanitized_output_sha256": "d8bf627bdaa83c01d37507ddc4eec6766482bac07bad1e3e800f2e60da3f007e",
+  "output_truncated_in_json": false,
+  "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
+  "output": "2026/07/21 08:14:52 modules/setting/setting.go:196:mustNotRunAsRoot() [F] Gitea is not supposed to be run as root. If you need to use privileged TCP ports please instead use `setcap` and the `cap_net_bind_service` permission.\n"
+}
diff --git a/runtime/history/GITEA-CLI-CAPABILITIES-004.txt b/runtime/history/GITEA-CLI-CAPABILITIES-004.txt
new file mode 100644
index 0000000..115b866
--- /dev/null
+++ b/runtime/history/GITEA-CLI-CAPABILITIES-004.txt
@@ -0,0 +1,25 @@
+CHAT_OUTPUT_BEGIN
+COMMAND_ID=GITEA-CLI-CAPABILITIES-004
+STATUS=FAIL
+RC=1
+HOST=pve01
+MODE=read-only
+COMPONENT=gitea-runtime
+REFERENCE_REGISTER_CHECK=OK
+REFERENCE_SHA256=f6f7749fda946015116cdbbd754c7e7f20356b4a6cf4df330a1b0b8fdf59cbb2
+ERROR_REGISTER_CHECK=OK
+ERROR_REGISTER_SHA256=ab8308549db90d235b591af0581580c3c7ba1b287b129cc6111c2eef0a0f9ecc
+COMMAND_SHA256=2cd6c4d28c8f646d8063105fca80b2f80d38c6a5db3a3eb76869de326b12d2d6
+DUPLICATE_FAILED_COMMAND_BLOCKED=false
+EXECUTION_STARTED=true
+CHANGES_MADE=false
+SANITIZED=yes
+SECRETS_INCLUDED=no
+PRIVATE_ADDRESSES_INCLUDED=no
+RAW_EVIDENCE_SHA256=d8bf627bdaa83c01d37507ddc4eec6766482bac07bad1e3e800f2e60da3f007e
+SANITIZED_OUTPUT_SHA256=d8bf627bdaa83c01d37507ddc4eec6766482bac07bad1e3e800f2e60da3f007e
+OUTPUT_BEGIN
+2026/07/21 08:14:52 modules/setting/setting.go:196:mustNotRunAsRoot() [F] Gitea is not supposed to be run as root. If you need to use privileged TCP ports please instead use `setcap` and the `cap_net_bind_service` permission.
+
+OUTPUT_END
+CHAT_OUTPUT_END
diff --git a/runtime/latest.json b/runtime/latest.json
index 5611981..497ddc9 100644
--- a/runtime/latest.json
+++ b/runtime/latest.json
@@ -1,19 +1,19 @@
 {
   "schema_version": 1,
   "channel": "homelab-runtime",
-  "command_id": "GITEA-TOKEN-CLI-HELP-003",
+  "command_id": "GITEA-CLI-CAPABILITIES-004",
   "status": "FAIL",
   "rc": 1,
   "host": "pve01",
   "mode": "read-only",
   "component": "gitea-runtime",
-  "started_at_utc": "2026-07-21T08:13:32Z",
-  "finished_at_utc": "2026-07-21T08:13:32Z",
+  "started_at_utc": "2026-07-21T08:14:52Z",
+  "finished_at_utc": "2026-07-21T08:14:52Z",
   "reference_register_checked": true,
   "reference_sha256": "f6f7749fda946015116cdbbd754c7e7f20356b4a6cf4df330a1b0b8fdf59cbb2",
   "error_register_checked": true,
   "error_register_sha256": "ab8308549db90d235b591af0581580c3c7ba1b287b129cc6111c2eef0a0f9ecc",
-  "command_sha256": "f1d0f967eed6490ad822944a42108c82dc4b59c9fd2557d8c64624dcb6853cd4",
+  "command_sha256": "2cd6c4d28c8f646d8063105fca80b2f80d38c6a5db3a3eb76869de326b12d2d6",
   "duplicate_failed_command_blocked": false,
   "block_reason": null,
   "execution_started": true,
@@ -22,9 +22,9 @@
   "secrets_included": false,
   "private_addresses_included": false,
   "raw_evidence_retained_locally": true,
-  "raw_evidence_sha256": "c3adc69afada3688f3c80b2d5ca5e03c2edefd04bb04601e5d21ce9116409cb7",
-  "sanitized_output_sha256": "c3adc69afada3688f3c80b2d5ca5e03c2edefd04bb04601e5d21ce9116409cb7",
+  "raw_evidence_sha256": "d8bf627bdaa83c01d37507ddc4eec6766482bac07bad1e3e800f2e60da3f007e",
+  "sanitized_output_sha256": "d8bf627bdaa83c01d37507ddc4eec6766482bac07bad1e3e800f2e60da3f007e",
   "output_truncated_in_json": false,
   "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
-  "output": "2026/07/21 08:13:32 modules/setting/setting.go:196:mustNotRunAsRoot() [F] Gitea is not supposed to be run as root. If you need to use privileged TCP ports please instead use `setcap` and the `cap_net_bind_service` permission.\n"
+  "output": "2026/07/21 08:14:52 modules/setting/setting.go:196:mustNotRunAsRoot() [F] Gitea is not supposed to be run as root. If you need to use privileged TCP ports please instead use `setcap` and the `cap_net_bind_service` permission.\n"
 }
diff --git a/runtime/latest.txt b/runtime/latest.txt
index a4e5aa0..115b866 100644
--- a/runtime/latest.txt
+++ b/runtime/latest.txt
@@ -1,5 +1,5 @@
 CHAT_OUTPUT_BEGIN
-COMMAND_ID=GITEA-TOKEN-CLI-HELP-003
+COMMAND_ID=GITEA-CLI-CAPABILITIES-004
 STATUS=FAIL
 RC=1
 HOST=pve01
@@ -9,17 +9,17 @@ REFERENCE_REGISTER_CHECK=OK
 REFERENCE_SHA256=f6f7749fda946015116cdbbd754c7e7f20356b4a6cf4df330a1b0b8fdf59cbb2
 ERROR_REGISTER_CHECK=OK
 ERROR_REGISTER_SHA256=ab8308549db90d235b591af0581580c3c7ba1b287b129cc6111c2eef0a0f9ecc
-COMMAND_SHA256=f1d0f967eed6490ad822944a42108c82dc4b59c9fd2557d8c64624dcb6853cd4
+COMMAND_SHA256=2cd6c4d28c8f646d8063105fca80b2f80d38c6a5db3a3eb76869de326b12d2d6
 DUPLICATE_FAILED_COMMAND_BLOCKED=false
 EXECUTION_STARTED=true
 CHANGES_MADE=false
 SANITIZED=yes
 SECRETS_INCLUDED=no
 PRIVATE_ADDRESSES_INCLUDED=no
-RAW_EVIDENCE_SHA256=c3adc69afada3688f3c80b2d5ca5e03c2edefd04bb04601e5d21ce9116409cb7
-SANITIZED_OUTPUT_SHA256=c3adc69afada3688f3c80b2d5ca5e03c2edefd04bb04601e5d21ce9116409cb7
+RAW_EVIDENCE_SHA256=d8bf627bdaa83c01d37507ddc4eec6766482bac07bad1e3e800f2e60da3f007e
+SANITIZED_OUTPUT_SHA256=d8bf627bdaa83c01d37507ddc4eec6766482bac07bad1e3e800f2e60da3f007e
 OUTPUT_BEGIN
-2026/07/21 08:13:32 modules/setting/setting.go:196:mustNotRunAsRoot() [F] Gitea is not supposed to be run as root. If you need to use privileged TCP ports please instead use `setcap` and the `cap_net_bind_service` permission.
+2026/07/21 08:14:52 modules/setting/setting.go:196:mustNotRunAsRoot() [F] Gitea is not supposed to be run as root. If you need to use privileged TCP ports please instead use `setcap` and the `cap_net_bind_service` permission.
 
 OUTPUT_END
 CHAT_OUTPUT_END