diff --git a/runtime/history/SUPPORT-260923-SPB-TLS-BRIDGE-ROLLBACK-FORENSIC-9148R3.json b/runtime/history/SUPPORT-260923-SPB-TLS-BRIDGE-ROLLBACK-FORENSIC-9148R3.json
new file mode 100644
index 00000000..af17260e
--- /dev/null
+++ b/runtime/history/SUPPORT-260923-SPB-TLS-BRIDGE-ROLLBACK-FORENSIC-9148R3.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": 1,
+  "channel": "homelab-runtime",
+  "command_id": "SUPPORT-260923-SPB-TLS-BRIDGE-ROLLBACK-FORENSIC-9148R3",
+  "status": "OK",
+  "rc": 0,
+  "host": "pve01",
+  "mode": "read-only",
+  "component": "spb-tls-bridge-rollback-forensic",
+  "started_at_utc": "2026-09-22T23:34:41Z",
+  "finished_at_utc": "2026-09-22T23:34:43Z",
+  "reference_register_checked": true,
+  "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66",
+  "error_register_checked": true,
+  "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0",
+  "command_sha256": "766f778cc85fe56f12697a2fbcd40231b703dd541f781e5c1c46f696c6a3bcb0",
+  "duplicate_failed_command_blocked": false,
+  "block_reason": null,
+  "execution_started": true,
+  "change_declared": false,
+  "result_contract_valid": true,
+  "result_contract_status": null,
+  "result_contract_error": null,
+  "command_rc": 0,
+  "changes_made": false,
+  "rollback_started": false,
+  "rollback_restored": null,
+  "mutation_outcome": "NO_MUTATION",
+  "sanitized": true,
+  "secrets_included": false,
+  "private_addresses_included": false,
+  "raw_evidence_retained_locally": true,
+  "raw_evidence_sha256": "ece9cb0d4bc33cf99ace42a4dee149640d12eb979f36fefc3d2ce08d126717fb",
+  "sanitized_output_sha256": "ece9cb0d4bc33cf99ace42a4dee149640d12eb979f36fefc3d2ce08d126717fb",
+  "output_truncated_in_json": false,
+  "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
+  "output": "SPB9148_FORENSIC={\"data_mount_found\":true,\"bridge_exists\":false,\"vhosts\":{\"991201.conf\":{\"exists\":false,\"size\":null},\"991202.conf\":{\"exists\":false,\"size\":null},\"991203.conf\":{\"exists\":false,\"size\":null}},\"nginx_test_rc\":0,\"route_eth0\":true,\"table7120_wt0_default\":false,\"data_mount_hash\":\"ec0ac67820f88633\",\"nginx_test_stderr_sha\":\"9cb221b6993277a1\",\"decision\":\"ROLLBACK_CLEAN_BASELINE_OK\"}\nTASK_COMPLETE=true\nTASK_RESULT=PASS_SPB_TLS_BRIDGE_ROLLBACK_FORENSIC\nDECISION=ROLLBACK_CLEAN_BASELINE_OK\n"
+}
diff --git a/runtime/history/SUPPORT-260923-SPB-TLS-BRIDGE-ROLLBACK-FORENSIC-9148R3.txt b/runtime/history/SUPPORT-260923-SPB-TLS-BRIDGE-ROLLBACK-FORENSIC-9148R3.txt
new file mode 100644
index 00000000..c1e14afb
--- /dev/null
+++ b/runtime/history/SUPPORT-260923-SPB-TLS-BRIDGE-ROLLBACK-FORENSIC-9148R3.txt
@@ -0,0 +1,36 @@
+CHAT_OUTPUT_BEGIN
+COMMAND_ID=SUPPORT-260923-SPB-TLS-BRIDGE-ROLLBACK-FORENSIC-9148R3
+STATUS=OK
+RC=0
+HOST=pve01
+MODE=read-only
+COMPONENT=spb-tls-bridge-rollback-forensic
+REFERENCE_REGISTER_CHECK=OK
+REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
+ERROR_REGISTER_CHECK=OK
+ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
+COMMAND_SHA256=766f778cc85fe56f12697a2fbcd40231b703dd541f781e5c1c46f696c6a3bcb0
+DUPLICATE_FAILED_COMMAND_BLOCKED=false
+EXECUTION_STARTED=true
+CHANGE_DECLARED=false
+RESULT_CONTRACT_VALID=true
+RESULT_CONTRACT_STATUS=NOT_APPLICABLE
+RESULT_CONTRACT_ERROR=NONE
+COMMAND_RC=0
+CHANGES_MADE=false
+ROLLBACK_STARTED=false
+ROLLBACK_RESTORED=null
+MUTATION_OUTCOME=NO_MUTATION
+SANITIZED=yes
+SECRETS_INCLUDED=no
+PRIVATE_ADDRESSES_INCLUDED=no
+RAW_EVIDENCE_SHA256=ece9cb0d4bc33cf99ace42a4dee149640d12eb979f36fefc3d2ce08d126717fb
+SANITIZED_OUTPUT_SHA256=ece9cb0d4bc33cf99ace42a4dee149640d12eb979f36fefc3d2ce08d126717fb
+OUTPUT_BEGIN
+SPB9148_FORENSIC={"data_mount_found":true,"bridge_exists":false,"vhosts":{"991201.conf":{"exists":false,"size":null},"991202.conf":{"exists":false,"size":null},"991203.conf":{"exists":false,"size":null}},"nginx_test_rc":0,"route_eth0":true,"table7120_wt0_default":false,"data_mount_hash":"ec0ac67820f88633","nginx_test_stderr_sha":"9cb221b6993277a1","decision":"ROLLBACK_CLEAN_BASELINE_OK"}
+TASK_COMPLETE=true
+TASK_RESULT=PASS_SPB_TLS_BRIDGE_ROLLBACK_FORENSIC
+DECISION=ROLLBACK_CLEAN_BASELINE_OK
+
+OUTPUT_END
+CHAT_OUTPUT_END
diff --git a/runtime/latest.json b/runtime/latest.json
index 2b9829df..af17260e 100644
--- a/runtime/latest.json
+++ b/runtime/latest.json
@@ -1,27 +1,27 @@
 {
   "schema_version": 1,
   "channel": "homelab-runtime",
-  "command_id": "SUPPORT-260923-SPB-TLS-BRIDGE-EXEC-9147R3",
-  "status": "FAIL",
-  "rc": 72,
+  "command_id": "SUPPORT-260923-SPB-TLS-BRIDGE-ROLLBACK-FORENSIC-9148R3",
+  "status": "OK",
+  "rc": 0,
   "host": "pve01",
-  "mode": "change",
-  "component": "spb-tls-bridge-to-home",
-  "started_at_utc": "2026-09-22T23:17:18Z",
-  "finished_at_utc": "2026-09-22T23:17:20Z",
+  "mode": "read-only",
+  "component": "spb-tls-bridge-rollback-forensic",
+  "started_at_utc": "2026-09-22T23:34:41Z",
+  "finished_at_utc": "2026-09-22T23:34:43Z",
   "reference_register_checked": true,
   "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66",
   "error_register_checked": true,
   "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0",
-  "command_sha256": "051c00e2b8b582977e6b85e45d66d591bfd9447f28a3af165045f6fe3748371b",
+  "command_sha256": "766f778cc85fe56f12697a2fbcd40231b703dd541f781e5c1c46f696c6a3bcb0",
   "duplicate_failed_command_blocked": false,
   "block_reason": null,
   "execution_started": true,
-  "change_declared": true,
+  "change_declared": false,
   "result_contract_valid": true,
-  "result_contract_status": "FAIL",
+  "result_contract_status": null,
   "result_contract_error": null,
-  "command_rc": 72,
+  "command_rc": 0,
   "changes_made": false,
   "rollback_started": false,
   "rollback_restored": null,
@@ -30,9 +30,9 @@
   "secrets_included": false,
   "private_addresses_included": false,
   "raw_evidence_retained_locally": true,
-  "raw_evidence_sha256": "57a649f0317ba43229a17dac9a86c4bea8d36d4ee9718ed98369c189bdffc181",
-  "sanitized_output_sha256": "57a649f0317ba43229a17dac9a86c4bea8d36d4ee9718ed98369c189bdffc181",
+  "raw_evidence_sha256": "ece9cb0d4bc33cf99ace42a4dee149640d12eb979f36fefc3d2ce08d126717fb",
+  "sanitized_output_sha256": "ece9cb0d4bc33cf99ace42a4dee149640d12eb979f36fefc3d2ce08d126717fb",
   "output_truncated_in_json": false,
   "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
-  "output": "SPB_TLS_BRIDGE_TRANSPORT={\"pve03_rc\":0,\"guest_rc\":60,\"stdout_sha\":\"cb4bc77ce1ba71d6\",\"stderr_sha\":null}\nTASK_COMPLETE=true\nTASK_RESULT=FAIL_SPB_TLS_BRIDGE_NO_RESULT\nDECISION=HOLD_SPB_ON\nHOMELAB_RESULT_CONTRACT={\"version\":1,\"command_id\":\"SUPPORT-260923-SPB-TLS-BRIDGE-EXEC-9147R3\",\"status\":\"FAIL\",\"changes_made\":false,\"rollback_started\":false,\"rollback_restored\":null}\n"
+  "output": "SPB9148_FORENSIC={\"data_mount_found\":true,\"bridge_exists\":false,\"vhosts\":{\"991201.conf\":{\"exists\":false,\"size\":null},\"991202.conf\":{\"exists\":false,\"size\":null},\"991203.conf\":{\"exists\":false,\"size\":null}},\"nginx_test_rc\":0,\"route_eth0\":true,\"table7120_wt0_default\":false,\"data_mount_hash\":\"ec0ac67820f88633\",\"nginx_test_stderr_sha\":\"9cb221b6993277a1\",\"decision\":\"ROLLBACK_CLEAN_BASELINE_OK\"}\nTASK_COMPLETE=true\nTASK_RESULT=PASS_SPB_TLS_BRIDGE_ROLLBACK_FORENSIC\nDECISION=ROLLBACK_CLEAN_BASELINE_OK\n"
 }
diff --git a/runtime/latest.txt b/runtime/latest.txt
index fc0e5bdf..c1e14afb 100644
--- a/runtime/latest.txt
+++ b/runtime/latest.txt
@@ -1,22 +1,22 @@
 CHAT_OUTPUT_BEGIN
-COMMAND_ID=SUPPORT-260923-SPB-TLS-BRIDGE-EXEC-9147R3
-STATUS=FAIL
-RC=72
+COMMAND_ID=SUPPORT-260923-SPB-TLS-BRIDGE-ROLLBACK-FORENSIC-9148R3
+STATUS=OK
+RC=0
 HOST=pve01
-MODE=change
-COMPONENT=spb-tls-bridge-to-home
+MODE=read-only
+COMPONENT=spb-tls-bridge-rollback-forensic
 REFERENCE_REGISTER_CHECK=OK
 REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
 ERROR_REGISTER_CHECK=OK
 ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
-COMMAND_SHA256=051c00e2b8b582977e6b85e45d66d591bfd9447f28a3af165045f6fe3748371b
+COMMAND_SHA256=766f778cc85fe56f12697a2fbcd40231b703dd541f781e5c1c46f696c6a3bcb0
 DUPLICATE_FAILED_COMMAND_BLOCKED=false
 EXECUTION_STARTED=true
-CHANGE_DECLARED=true
+CHANGE_DECLARED=false
 RESULT_CONTRACT_VALID=true
-RESULT_CONTRACT_STATUS=FAIL
+RESULT_CONTRACT_STATUS=NOT_APPLICABLE
 RESULT_CONTRACT_ERROR=NONE
-COMMAND_RC=72
+COMMAND_RC=0
 CHANGES_MADE=false
 ROLLBACK_STARTED=false
 ROLLBACK_RESTORED=null
@@ -24,14 +24,13 @@ MUTATION_OUTCOME=NO_MUTATION
 SANITIZED=yes
 SECRETS_INCLUDED=no
 PRIVATE_ADDRESSES_INCLUDED=no
-RAW_EVIDENCE_SHA256=57a649f0317ba43229a17dac9a86c4bea8d36d4ee9718ed98369c189bdffc181
-SANITIZED_OUTPUT_SHA256=57a649f0317ba43229a17dac9a86c4bea8d36d4ee9718ed98369c189bdffc181
+RAW_EVIDENCE_SHA256=ece9cb0d4bc33cf99ace42a4dee149640d12eb979f36fefc3d2ce08d126717fb
+SANITIZED_OUTPUT_SHA256=ece9cb0d4bc33cf99ace42a4dee149640d12eb979f36fefc3d2ce08d126717fb
 OUTPUT_BEGIN
-SPB_TLS_BRIDGE_TRANSPORT={"pve03_rc":0,"guest_rc":60,"stdout_sha":"cb4bc77ce1ba71d6","stderr_sha":null}
+SPB9148_FORENSIC={"data_mount_found":true,"bridge_exists":false,"vhosts":{"991201.conf":{"exists":false,"size":null},"991202.conf":{"exists":false,"size":null},"991203.conf":{"exists":false,"size":null}},"nginx_test_rc":0,"route_eth0":true,"table7120_wt0_default":false,"data_mount_hash":"ec0ac67820f88633","nginx_test_stderr_sha":"9cb221b6993277a1","decision":"ROLLBACK_CLEAN_BASELINE_OK"}
 TASK_COMPLETE=true
-TASK_RESULT=FAIL_SPB_TLS_BRIDGE_NO_RESULT
-DECISION=HOLD_SPB_ON
-HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"SUPPORT-260923-SPB-TLS-BRIDGE-EXEC-9147R3","status":"FAIL","changes_made":false,"rollback_started":false,"rollback_restored":null}
+TASK_RESULT=PASS_SPB_TLS_BRIDGE_ROLLBACK_FORENSIC
+DECISION=ROLLBACK_CLEAN_BASELINE_OK
 
 OUTPUT_END
 CHAT_OUTPUT_END