{
  "schema_version": 1,
  "channel": "homelab-runtime",
  "command_id": "CLUSTER-REFERENCE-PUBLISHER-CONTRACT-AUDIT-171",
  "status": "OK",
  "rc": 0,
  "host": "pve01",
  "mode": "read-only",
  "component": "cluster-audit",
  "started_at_utc": "2026-07-22T10:25:15Z",
  "finished_at_utc": "2026-07-22T10:25:15Z",
  "reference_register_checked": true,
  "reference_sha256": "5763f2f8edc75fcf6f3951f8c95896d1cc112ceccb6cf5b64a383f540a4deb8e",
  "error_register_checked": true,
  "error_register_sha256": "08b3a769b8e38eaa1acec915352fb328180d70caa7ff6cd9d1ec0da426262752",
  "command_sha256": "1299fe30eb30386fec901e120ab525ece490edc5eca767d9216466ecd225bef5",
  "duplicate_failed_command_blocked": false,
  "block_reason": null,
  "execution_started": true,
  "changes_made": false,
  "sanitized": true,
  "secrets_included": false,
  "private_addresses_included": false,
  "raw_evidence_retained_locally": true,
  "raw_evidence_sha256": "ced96ca03c186b7a4b64cc4939add95121ad329963b7fddde6c5fcde8c47940f",
  "sanitized_output_sha256": "ced96ca03c186b7a4b64cc4939add95121ad329963b7fddde6c5fcde8c47940f",
  "output_truncated_in_json": false,
  "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
  "output": "PREVIOUS_RESULT=VERIFIED\n=== OPERATIONS_PUBLISH_CONTEXT ===\n1-# Operations\n2-\n3-List: homelab-reference list\n4-Read: homelab-reference get SECTION ID --layer effective\n5-Add: homelab-reference add SECTION JSON\n6-Edit: homelab-reference edit SECTION ID --set key=value\n7-Remove: homelab-reference remove SECTION ID\n8-Validate: homelab-reference validate\n9-Merge: homelab-reference merge\n10-Refresh: homelab-reference-refresh\n11:Publish: homelab-reference-publish\n12-\n13-Immutable runtime history for the exact COMMAND_ID is authoritative. latest.json is not authoritative.\n=== ACTIVE_CODE_REFERENCES ===\n=== REFRESH_RELEVANT_LINES ===\n5:S=json.loads((R/\"manifest.json\").read_text())[\"sections\"]\n34: f=int(json.loads((R/\"manifest.json\").read_text()).get(\"freshness_seconds\",{}).get(s,3600));z=(t+datetime.timedelta(seconds=f)).isoformat()\n131: st=load(\"state\",\"current\") if False else json.loads((R/\"state/current.json\").read_text());st.update({\"schema_version\":2,\"status\":\"AUTO_REFRESH_READY\",\"updated_at\":t.isoformat(),\"last_snapshot\":str(snap),\"observed_counts\":cnt,\"effective_counts\":eff,\"public_index\":str(R/\"public/index.json\"),\"collector\":str(pathlib.Path(__file__))});atom(R/\"state/current.json\",st)\n=== CLI_RELEVANT_LINES ===\n43:    manifest = json.loads((ROOT / \"manifest.json\").read_text(encoding=\"utf-8\"))\n44:    return manifest.get(\"sections\", [])\n65:def validate_section(layer, section):\n105:def cmd_status(args):\n106:    state_path = ROOT / \"state\" / \"current.json\"\n108:    print(\"status=\" + str(state.get(\"status\", \"UNKNOWN\")))\n120:        print(str(record.get(\"id\")) + \"\\t\" + str(record.get(\"name\", \"\")) + \"\\t\" + str(record.get(\"status\", \"\")))\n176:def cmd_validate(args):\n182:            errors.extend(validate_section(layer, section))\n205:p = sub.add_parser(\"status\"); p.set_defaults(func=cmd_status)\n211:p = sub.add_parser(\"validate\"); p.add_argument(\"section\", nargs=\"?\"); p.add_argument(\"--layer\", choices=LAYERS); p.set_defaults(func=cmd_validate)\n=== UNIT_FILES ===\n# /etc/systemd/system/homelab-reference-refresh.service\n[Unit]\nDescription=Refresh homelab cluster reference\nAfter=network-online.target pve-cluster.service\nWants=network-online.target\n\n[Service]\nType=oneshot\nExecStart=/usr/local/sbin/homelab-reference-refresh\nUser=root\nGroup=root\nNice=10\nIOSchedulingClass=best-effort\nIOSchedulingPriority=7\nNoNewPrivileges=true\nPrivateTmp=true\nProtectSystem=strict\nReadWritePaths=/etc/homelab/reference /var/backups/homelab-reference\nProtectHome=read-only\n\n# /etc/systemd/system/homelab-reference-refresh.timer\n[Unit]\nDescription=Periodic homelab reference refresh\n\n[Timer]\nOnBootSec=10min\nOnUnitActiveSec=30min\nRandomizedDelaySec=5min\nPersistent=true\nUnit=homelab-reference-refresh.service\n\n[Install]\nWantedBy=timers.target\n=== MANIFEST_CONTRACT ===\n2:  \"schema_version\": 2,\n4:  \"updated_at\": \"2026-07-22T08:12:10+00:00\",\n=== STATE_CONTRACT ===\n2:  \"schema_version\": 2,\n3:  \"status\": \"AUTO_REFRESH_READY\",\n4:  \"updated_at\": \"2026-07-22T10:01:14+00:00\",\nREFERENCE_CHECK=OK\nERROR_REGISTER_CHECK=OK\nSECRET_PRINTED=NO\nPUBLISHER_CONTRACT_AUDIT=COMPLETE\n"
}