diff --git a/runtime/history/SUPPORT-260928-USA-HOST-TCP-PROXY-BYPASS-RCA-99066R1.json b/runtime/history/SUPPORT-260928-USA-HOST-TCP-PROXY-BYPASS-RCA-99066R1.json
new file mode 100644
index 00000000..542dd8fd
--- /dev/null
+++ b/runtime/history/SUPPORT-260928-USA-HOST-TCP-PROXY-BYPASS-RCA-99066R1.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": 1,
+  "channel": "homelab-runtime",
+  "command_id": "SUPPORT-260928-USA-HOST-TCP-PROXY-BYPASS-RCA-99066R1",
+  "status": "FAIL",
+  "rc": 23,
+  "host": "pve01",
+  "mode": "change",
+  "component": "usa-host-tcp-proxy-bypass-rca",
+  "started_at_utc": "2026-09-28T15:36:08Z",
+  "finished_at_utc": "2026-09-28T15:39:51Z",
+  "reference_register_checked": true,
+  "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66",
+  "error_register_checked": true,
+  "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0",
+  "command_sha256": "0dc8c08bbc42cb780097a6df13f9e7978b21f0bf9ac44f88f327526e6621fa6b",
+  "duplicate_failed_command_blocked": false,
+  "block_reason": null,
+  "execution_started": true,
+  "change_declared": true,
+  "result_contract_valid": true,
+  "result_contract_status": "FAIL",
+  "result_contract_error": null,
+  "command_rc": 23,
+  "changes_made": false,
+  "rollback_started": false,
+  "rollback_restored": null,
+  "mutation_outcome": "NO_MUTATION",
+  "sanitized": true,
+  "secrets_included": false,
+  "private_addresses_included": false,
+  "raw_evidence_retained_locally": true,
+  "raw_evidence_sha256": "1097e4d36bad179a9981d56f0552349dc96436c17107d7ca4abcbbce9de779b2",
+  "sanitized_output_sha256": "1097e4d36bad179a9981d56f0552349dc96436c17107d7ca4abcbbce9de779b2",
+  "output_truncated_in_json": false,
+  "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
+  "output": "USA_HOST_TCP_PROXY_BYPASS_RCA=V1\nMODE=change\nMUTATION_BOUNDARY=TEMP_SOURCE_SCOPED_NAT_REDIRECT_AND_LOOPBACK_TCP_PROXY\nTOPOLOGY_SOURCE=MOSCOW_PVE01\nTOPOLOGY_DESTINATION=USA_NETBIRD_VPS\nREFERENCE_SOURCE=MOLDOVA_RELAY\nTEMP_PROXY_PORT=19443\nFAILSAFE_SECONDS=90\nPVE01_OPERATOR_KEY_FINGERPRINT=SHA256:wipXiBB3cpAwyWap9LcB185WjEEmDxtRJsI/UuMVAp0\nPVE01_OPERATOR_KEY_MATCH=true\nUSA_HOSTKEY_SCAN_ATTEMPTS=1\nUSA_HOSTKEY_FINGERPRINT=SHA256:805Q9eh/fePUci42dfY58I6q0lFiiPHn0/M+mckypmE\nUSA_HOSTKEY_MATCH=true\nRELAY_HOSTKEY_SCAN_ATTEMPTS=1\nRELAY_HOSTKEY_FINGERPRINT=SHA256:DXJGwunC5tEVvnC3nRxyayTN8FXmyJcVgf+Oa6udQsY\nRELAY_HOSTKEY_MATCH=true\nUSA_CONTROLMASTER_ATTEMPTS=24\nUSA_CONTROLMASTER_ESTABLISHED=false\nDECISION=HOLD_USA_DIRECT_SSH_CONTROLMASTER_UNAVAILABLE\nNEXT_GATE=N0VNC_SOURCE_SCOPED_PROXY_BYPASS_RCA\nHOMELAB_RESULT_CONTRACT={\"version\":1,\"command_id\":\"SUPPORT-260928-USA-HOST-TCP-PROXY-BYPASS-RCA-99066R1\",\"status\":\"FAIL\",\"changes_made\":false,\"rollback_started\":false,\"rollback_restored\":null}\n"
+}
diff --git a/runtime/history/SUPPORT-260928-USA-HOST-TCP-PROXY-BYPASS-RCA-99066R1.txt b/runtime/history/SUPPORT-260928-USA-HOST-TCP-PROXY-BYPASS-RCA-99066R1.txt
new file mode 100644
index 00000000..e530af20
--- /dev/null
+++ b/runtime/history/SUPPORT-260928-USA-HOST-TCP-PROXY-BYPASS-RCA-99066R1.txt
@@ -0,0 +1,53 @@
+CHAT_OUTPUT_BEGIN
+COMMAND_ID=SUPPORT-260928-USA-HOST-TCP-PROXY-BYPASS-RCA-99066R1
+STATUS=FAIL
+RC=23
+HOST=pve01
+MODE=change
+COMPONENT=usa-host-tcp-proxy-bypass-rca
+REFERENCE_REGISTER_CHECK=OK
+REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
+ERROR_REGISTER_CHECK=OK
+ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
+COMMAND_SHA256=0dc8c08bbc42cb780097a6df13f9e7978b21f0bf9ac44f88f327526e6621fa6b
+DUPLICATE_FAILED_COMMAND_BLOCKED=false
+EXECUTION_STARTED=true
+CHANGE_DECLARED=true
+RESULT_CONTRACT_VALID=true
+RESULT_CONTRACT_STATUS=FAIL
+RESULT_CONTRACT_ERROR=NONE
+COMMAND_RC=23
+CHANGES_MADE=false
+ROLLBACK_STARTED=false
+ROLLBACK_RESTORED=null
+MUTATION_OUTCOME=NO_MUTATION
+SANITIZED=yes
+SECRETS_INCLUDED=no
+PRIVATE_ADDRESSES_INCLUDED=no
+RAW_EVIDENCE_SHA256=1097e4d36bad179a9981d56f0552349dc96436c17107d7ca4abcbbce9de779b2
+SANITIZED_OUTPUT_SHA256=1097e4d36bad179a9981d56f0552349dc96436c17107d7ca4abcbbce9de779b2
+OUTPUT_BEGIN
+USA_HOST_TCP_PROXY_BYPASS_RCA=V1
+MODE=change
+MUTATION_BOUNDARY=TEMP_SOURCE_SCOPED_NAT_REDIRECT_AND_LOOPBACK_TCP_PROXY
+TOPOLOGY_SOURCE=MOSCOW_PVE01
+TOPOLOGY_DESTINATION=USA_NETBIRD_VPS
+REFERENCE_SOURCE=MOLDOVA_RELAY
+TEMP_PROXY_PORT=19443
+FAILSAFE_SECONDS=90
+PVE01_OPERATOR_KEY_FINGERPRINT=SHA256:wipXiBB3cpAwyWap9LcB185WjEEmDxtRJsI/UuMVAp0
+PVE01_OPERATOR_KEY_MATCH=true
+USA_HOSTKEY_SCAN_ATTEMPTS=1
+USA_HOSTKEY_FINGERPRINT=SHA256:805Q9eh/fePUci42dfY58I6q0lFiiPHn0/M+mckypmE
+USA_HOSTKEY_MATCH=true
+RELAY_HOSTKEY_SCAN_ATTEMPTS=1
+RELAY_HOSTKEY_FINGERPRINT=SHA256:DXJGwunC5tEVvnC3nRxyayTN8FXmyJcVgf+Oa6udQsY
+RELAY_HOSTKEY_MATCH=true
+USA_CONTROLMASTER_ATTEMPTS=24
+USA_CONTROLMASTER_ESTABLISHED=false
+DECISION=HOLD_USA_DIRECT_SSH_CONTROLMASTER_UNAVAILABLE
+NEXT_GATE=N0VNC_SOURCE_SCOPED_PROXY_BYPASS_RCA
+HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"SUPPORT-260928-USA-HOST-TCP-PROXY-BYPASS-RCA-99066R1","status":"FAIL","changes_made":false,"rollback_started":false,"rollback_restored":null}
+
+OUTPUT_END
+CHAT_OUTPUT_END
diff --git a/runtime/latest.json b/runtime/latest.json
index 9d50dc1b..542dd8fd 100644
--- a/runtime/latest.json
+++ b/runtime/latest.json
@@ -1,19 +1,19 @@
 {
   "schema_version": 1,
   "channel": "homelab-runtime",
-  "command_id": "SUPPORT-260928-USA-TRAEFIK-PATCH-RECONCILE-99065R1",
+  "command_id": "SUPPORT-260928-USA-HOST-TCP-PROXY-BYPASS-RCA-99066R1",
   "status": "FAIL",
   "rc": 23,
   "host": "pve01",
   "mode": "change",
-  "component": "usa-traefik-patch-reconcile",
-  "started_at_utc": "2026-09-28T15:25:43Z",
-  "finished_at_utc": "2026-09-28T15:26:24Z",
+  "component": "usa-host-tcp-proxy-bypass-rca",
+  "started_at_utc": "2026-09-28T15:36:08Z",
+  "finished_at_utc": "2026-09-28T15:39:51Z",
   "reference_register_checked": true,
   "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66",
   "error_register_checked": true,
   "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0",
-  "command_sha256": "f5866b4e121e48a9971bb12af42a1b6dc266fc3e6a1fa5898cd20766d203fe21",
+  "command_sha256": "0dc8c08bbc42cb780097a6df13f9e7978b21f0bf9ac44f88f327526e6621fa6b",
   "duplicate_failed_command_blocked": false,
   "block_reason": null,
   "execution_started": true,
@@ -30,9 +30,9 @@
   "secrets_included": false,
   "private_addresses_included": false,
   "raw_evidence_retained_locally": true,
-  "raw_evidence_sha256": "3801a276a930eb408caa13bf82c85f922ecc4b42fbd2148fab1b4a43a6944e0c",
-  "sanitized_output_sha256": "3801a276a930eb408caa13bf82c85f922ecc4b42fbd2148fab1b4a43a6944e0c",
+  "raw_evidence_sha256": "1097e4d36bad179a9981d56f0552349dc96436c17107d7ca4abcbbce9de779b2",
+  "sanitized_output_sha256": "1097e4d36bad179a9981d56f0552349dc96436c17107d7ca4abcbbce9de779b2",
   "output_truncated_in_json": false,
   "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
-  "output": "USA_TRAEFIK_PATCH_RECONCILE=V1\nMODE=change\nMUTATION_BOUNDARY=PHASE_SPLIT_TRAEFIK_ONLY\nTARGET_TRAEFIK_VERSION=3.6.25\nTOPOLOGY_SOURCE=MOSCOW_PVE01\nTOPOLOGY_DESTINATION=USA_NETBIRD_VPS\nPVE01_OPERATOR_KEY_FINGERPRINT=SHA256:wipXiBB3cpAwyWap9LcB185WjEEmDxtRJsI/UuMVAp0\nPVE01_OPERATOR_KEY_MATCH=true\nUSA_HOSTKEY_FINGERPRINT=SHA256:805Q9eh/fePUci42dfY58I6q0lFiiPHn0/M+mckypmE\nUSA_HOSTKEY_MATCH=true\nRELAY_HOSTKEY_FINGERPRINT=SHA256:DXJGwunC5tEVvnC3nRxyayTN8FXmyJcVgf+Oa6udQsY\nRELAY_HOSTKEY_MATCH=true\nUSA_DIRECT_AUTH_PROBE_RC=255\nDECISION=HOLD_USA_DIRECT_SSH_AUTH_UNSTABLE\nNEXT_GATE=REGAIN_DIRECT_USA_SSH_BEFORE_MUTATION\nHOMELAB_RESULT_CONTRACT={\"version\":1,\"command_id\":\"SUPPORT-260928-USA-TRAEFIK-PATCH-RECONCILE-99065R1\",\"status\":\"FAIL\",\"changes_made\":false,\"rollback_started\":false,\"rollback_restored\":null}\n"
+  "output": "USA_HOST_TCP_PROXY_BYPASS_RCA=V1\nMODE=change\nMUTATION_BOUNDARY=TEMP_SOURCE_SCOPED_NAT_REDIRECT_AND_LOOPBACK_TCP_PROXY\nTOPOLOGY_SOURCE=MOSCOW_PVE01\nTOPOLOGY_DESTINATION=USA_NETBIRD_VPS\nREFERENCE_SOURCE=MOLDOVA_RELAY\nTEMP_PROXY_PORT=19443\nFAILSAFE_SECONDS=90\nPVE01_OPERATOR_KEY_FINGERPRINT=SHA256:wipXiBB3cpAwyWap9LcB185WjEEmDxtRJsI/UuMVAp0\nPVE01_OPERATOR_KEY_MATCH=true\nUSA_HOSTKEY_SCAN_ATTEMPTS=1\nUSA_HOSTKEY_FINGERPRINT=SHA256:805Q9eh/fePUci42dfY58I6q0lFiiPHn0/M+mckypmE\nUSA_HOSTKEY_MATCH=true\nRELAY_HOSTKEY_SCAN_ATTEMPTS=1\nRELAY_HOSTKEY_FINGERPRINT=SHA256:DXJGwunC5tEVvnC3nRxyayTN8FXmyJcVgf+Oa6udQsY\nRELAY_HOSTKEY_MATCH=true\nUSA_CONTROLMASTER_ATTEMPTS=24\nUSA_CONTROLMASTER_ESTABLISHED=false\nDECISION=HOLD_USA_DIRECT_SSH_CONTROLMASTER_UNAVAILABLE\nNEXT_GATE=N0VNC_SOURCE_SCOPED_PROXY_BYPASS_RCA\nHOMELAB_RESULT_CONTRACT={\"version\":1,\"command_id\":\"SUPPORT-260928-USA-HOST-TCP-PROXY-BYPASS-RCA-99066R1\",\"status\":\"FAIL\",\"changes_made\":false,\"rollback_started\":false,\"rollback_restored\":null}\n"
 }
diff --git a/runtime/latest.txt b/runtime/latest.txt
index 62ef0ba8..e530af20 100644
--- a/runtime/latest.txt
+++ b/runtime/latest.txt
@@ -1,15 +1,15 @@
 CHAT_OUTPUT_BEGIN
-COMMAND_ID=SUPPORT-260928-USA-TRAEFIK-PATCH-RECONCILE-99065R1
+COMMAND_ID=SUPPORT-260928-USA-HOST-TCP-PROXY-BYPASS-RCA-99066R1
 STATUS=FAIL
 RC=23
 HOST=pve01
 MODE=change
-COMPONENT=usa-traefik-patch-reconcile
+COMPONENT=usa-host-tcp-proxy-bypass-rca
 REFERENCE_REGISTER_CHECK=OK
 REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
 ERROR_REGISTER_CHECK=OK
 ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
-COMMAND_SHA256=f5866b4e121e48a9971bb12af42a1b6dc266fc3e6a1fa5898cd20766d203fe21
+COMMAND_SHA256=0dc8c08bbc42cb780097a6df13f9e7978b21f0bf9ac44f88f327526e6621fa6b
 DUPLICATE_FAILED_COMMAND_BLOCKED=false
 EXECUTION_STARTED=true
 CHANGE_DECLARED=true
@@ -24,25 +24,30 @@ MUTATION_OUTCOME=NO_MUTATION
 SANITIZED=yes
 SECRETS_INCLUDED=no
 PRIVATE_ADDRESSES_INCLUDED=no
-RAW_EVIDENCE_SHA256=3801a276a930eb408caa13bf82c85f922ecc4b42fbd2148fab1b4a43a6944e0c
-SANITIZED_OUTPUT_SHA256=3801a276a930eb408caa13bf82c85f922ecc4b42fbd2148fab1b4a43a6944e0c
+RAW_EVIDENCE_SHA256=1097e4d36bad179a9981d56f0552349dc96436c17107d7ca4abcbbce9de779b2
+SANITIZED_OUTPUT_SHA256=1097e4d36bad179a9981d56f0552349dc96436c17107d7ca4abcbbce9de779b2
 OUTPUT_BEGIN
-USA_TRAEFIK_PATCH_RECONCILE=V1
+USA_HOST_TCP_PROXY_BYPASS_RCA=V1
 MODE=change
-MUTATION_BOUNDARY=PHASE_SPLIT_TRAEFIK_ONLY
-TARGET_TRAEFIK_VERSION=3.6.25
+MUTATION_BOUNDARY=TEMP_SOURCE_SCOPED_NAT_REDIRECT_AND_LOOPBACK_TCP_PROXY
 TOPOLOGY_SOURCE=MOSCOW_PVE01
 TOPOLOGY_DESTINATION=USA_NETBIRD_VPS
+REFERENCE_SOURCE=MOLDOVA_RELAY
+TEMP_PROXY_PORT=19443
+FAILSAFE_SECONDS=90
 PVE01_OPERATOR_KEY_FINGERPRINT=SHA256:wipXiBB3cpAwyWap9LcB185WjEEmDxtRJsI/UuMVAp0
 PVE01_OPERATOR_KEY_MATCH=true
+USA_HOSTKEY_SCAN_ATTEMPTS=1
 USA_HOSTKEY_FINGERPRINT=SHA256:805Q9eh/fePUci42dfY58I6q0lFiiPHn0/M+mckypmE
 USA_HOSTKEY_MATCH=true
+RELAY_HOSTKEY_SCAN_ATTEMPTS=1
 RELAY_HOSTKEY_FINGERPRINT=SHA256:DXJGwunC5tEVvnC3nRxyayTN8FXmyJcVgf+Oa6udQsY
 RELAY_HOSTKEY_MATCH=true
-USA_DIRECT_AUTH_PROBE_RC=255
-DECISION=HOLD_USA_DIRECT_SSH_AUTH_UNSTABLE
-NEXT_GATE=REGAIN_DIRECT_USA_SSH_BEFORE_MUTATION
-HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"SUPPORT-260928-USA-TRAEFIK-PATCH-RECONCILE-99065R1","status":"FAIL","changes_made":false,"rollback_started":false,"rollback_restored":null}
+USA_CONTROLMASTER_ATTEMPTS=24
+USA_CONTROLMASTER_ESTABLISHED=false
+DECISION=HOLD_USA_DIRECT_SSH_CONTROLMASTER_UNAVAILABLE
+NEXT_GATE=N0VNC_SOURCE_SCOPED_PROXY_BYPASS_RCA
+HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"SUPPORT-260928-USA-HOST-TCP-PROXY-BYPASS-RCA-99066R1","status":"FAIL","changes_made":false,"rollback_started":false,"rollback_restored":null}
 
 OUTPUT_END
 CHAT_OUTPUT_END