diff --git a/runtime/history/SUPPORT-260923-SPB-TLS-BRIDGE-NPMPLUS-RUNTIME-RCA-9196R1.json b/runtime/history/SUPPORT-260923-SPB-TLS-BRIDGE-NPMPLUS-RUNTIME-RCA-9196R1.json
new file mode 100644
index 00000000..991e8c8d
--- /dev/null
+++ b/runtime/history/SUPPORT-260923-SPB-TLS-BRIDGE-NPMPLUS-RUNTIME-RCA-9196R1.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": 1,
+  "channel": "homelab-runtime",
+  "command_id": "SUPPORT-260923-SPB-TLS-BRIDGE-NPMPLUS-RUNTIME-RCA-9196R1",
+  "status": "OK",
+  "rc": 0,
+  "host": "pve01",
+  "mode": "read-only",
+  "component": "spb-tls-bridge-npmplus-runtime-rca",
+  "started_at_utc": "2026-09-23T12:47:52Z",
+  "finished_at_utc": "2026-09-23T12:47:55Z",
+  "reference_register_checked": true,
+  "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66",
+  "error_register_checked": true,
+  "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0",
+  "command_sha256": "ddb8ebb208b8194c670dbb45bda053cae7d0a615dc00c22ef8b7eb110a91ca2f",
+  "duplicate_failed_command_blocked": false,
+  "block_reason": null,
+  "execution_started": true,
+  "change_declared": false,
+  "result_contract_valid": true,
+  "result_contract_status": null,
+  "result_contract_error": null,
+  "command_rc": 0,
+  "changes_made": false,
+  "rollback_started": false,
+  "rollback_restored": null,
+  "mutation_outcome": "NO_MUTATION",
+  "sanitized": true,
+  "secrets_included": false,
+  "private_addresses_included": false,
+  "raw_evidence_retained_locally": true,
+  "raw_evidence_sha256": "4b9b007c3d0a9273577ab848f1ac5a4c6bc925795eb52941a4ff505b2cc7abec",
+  "sanitized_output_sha256": "4b9b007c3d0a9273577ab848f1ac5a4c6bc925795eb52941a4ff505b2cc7abec",
+  "output_truncated_in_json": false,
+  "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
+  "output": "RCA9196_BEGIN=true\nMUTATION_BOUNDARY=READ_ONLY_VM130_RUNTIME_RCA;NO_PRODUCTION_WRITE;NO_SPB_WRITE;NO_DNS_WRITE;NO_NGINX_RELOAD\nVM130_QGA_TRANSPORT_RC=0\nVM130_QGA_STDERR_SHA16=e3b0c44298fc1c14\nVM130_QGA_EXITCODE=0\nVM130_GUEST_STDERR_SHA16=e3b0c44298fc1c14\nRCA9196={\"baseline\":{\"nginx_test_rc\":0,\"stderr_sha16\":\"9cb221b6993277a1\"},\"classification\":\"LIVE_CONFIG_DIFFERS_FROM_IMAGE\",\"container\":{\"cmd\":null,\"entrypoint\":[\"tini\",\"--\",\"entrypoint.sh\"],\"env_count\":12,\"env_names\":[\"ACME_PROFILE\",\"AUTH_REQUEST_AUTHENTIK_UPSTREAM\",\"COOKIE_SECRET\",\"DISABLE_H3_QUIC\",\"DISABLE_IPV6\",\"INITIAL_ADMIN_EMAIL\",\"INITIAL_ADMIN_PASSWORD\",\"IPV4_BINDING\",\"NODE_ENV\",\"NPM_IPV4_BINDING\",\"PATH\",\"TZ\"],\"image_sha16\":\"d16df105013397a1\",\"user\":\"\"},\"diff\":{\"image_line18\":\"  ssl_certificate ;\",\"live_equals_image\":false,\"live_line18\":\"  ssl_certificate /data/tls/dummycert.pem;\"},\"image\":{\"lines_1_35\":[{\"line\":1,\"text\":\"upstream npmplus {\"},{\"line\":2,\"text\":\"  server unix:/run/npmplus.sock;\"},{\"line\":3,\"text\":\"}\"},{\"line\":4,\"text\":\"\"},{\"line\":5,\"text\":\"server {\"},{\"line\":6,\"text\":\"  server_name \\\"\\\";\"},{\"line\":7,\"text\":\"  listen <IP_REDACTED>:81 ssl;\"},{\"line\":8,\"text\":\"  listen [::]:81 ssl;\"},{\"line\":9,\"text\":\"  ssl_reject_handshake on;\"},{\"line\":10,\"text\":\"  return 444;\"},{\"line\":11,\"text\":\"}\"},{\"line\":12,\"text\":\"\"},{\"line\":13,\"text\":\"server {\"},{\"line\":14,\"text\":\"  listen <IP_REDACTED>:81 ssl bind reuseport deferred multipath so_keepalive=on default_server;\"},{\"line\":15,\"text\":\"  listen [::]:81 ssl bind reuseport deferred multipath so_keepalive=on default_server;\"},{\"line\":16,\"text\":\"\"},{\"line\":17,\"text\":\"  server_name _;\"},{\"line\":18,\"text\":\"  ssl_certificate ;\"},{\"line\":19,\"text\":\"  ssl_certificate_key ;\"},{\"line\":20,\"text\":\"  #ssl_stapling on;\"},{\"line\":21,\"text\":\"  #ssl_stapling_verify on;\"},{\"line\":22,\"text\":\"  #ssl_stapling_file ;\"},{\"line\":23,\"text\":\"  #ssl_certificate_compression off;\"},{\"line\":24,\"text\":\"\"},{\"line\":25,\"text\":\"  if ($scheme = \\\"http\\\") {\"},{\"line\":26,\"text\":\"    return 301 <URL_REDACTED>\"},{\"line\":27,\"text\":\"  }\"},{\"line\":28,\"text\":\"  if ($http_x_forwarded_proto = \\\"http\\\") {\"},{\"line\":29,\"text\":\"    return 301 <URL_REDACTED>\"},{\"line\":30,\"text\":\"  }\"},{\"line\":31,\"text\":\"\"},{\"line\":32,\"text\":\"  client_max_body_size 1m;\"},{\"line\":33,\"text\":\"  more_set_headers \\\"X-Frame-Options: DENY\\\";\"},{\"line\":34,\"text\":\"  more_set_headers \\\"Referrer-Policy: no-referrer\\\";\"},{\"line\":35,\"text\":\"  more_set_headers \\\"Cross-Origin-Opener-Policy: same-origin\\\";\"}],\"rc\":0,\"sha16\":\"cfaf1d6ee20a39b1\",\"size\":3673,\"stderr_safe\":[],\"stderr_sha16\":\"e3b0c44298fc1c14\"},\"live\":{\"lines_1_35\":[{\"line\":1,\"text\":\"upstream npmplus {\"},{\"line\":2,\"text\":\"  server unix:/run/npmplus.sock;\"},{\"line\":3,\"text\":\"}\"},{\"line\":4,\"text\":\"\"},{\"line\":5,\"text\":\"server {\"},{\"line\":6,\"text\":\"  server_name \\\"\\\";\"},{\"line\":7,\"text\":\"  listen <IP_REDACTED>:81 ssl;\"},{\"line\":8,\"text\":\"  #listen [::]:81 ssl;\"},{\"line\":9,\"text\":\"  ssl_reject_handshake on;\"},{\"line\":10,\"text\":\"  return 444;\"},{\"line\":11,\"text\":\"}\"},{\"line\":12,\"text\":\"\"},{\"line\":13,\"text\":\"server {\"},{\"line\":14,\"text\":\"  listen <IP_REDACTED>:81 ssl bind reuseport deferred so_keepalive=on default_server;\"},{\"line\":15,\"text\":\"  #listen [::]:81 ssl bind reuseport deferred so_keepalive=on default_server;\"},{\"line\":16,\"text\":\"\"},{\"line\":17,\"text\":\"  server_name _;\"},{\"line\":18,\"text\":\"  ssl_certificate /data/tls/dummycert.pem;\"},{\"line\":19,\"text\":\"  ssl_certificate_key /data/tls/dummykey.pem;\"},{\"line\":20,\"text\":\"  #ssl_stapling on;\"},{\"line\":21,\"text\":\"  #ssl_stapling_verify on;\"},{\"line\":22,\"text\":\"  #ssl_stapling_file ;\"},{\"line\":23,\"text\":\"  #ssl_certificate_compression off;\"},{\"line\":24,\"text\":\"\"},{\"line\":25,\"text\":\"  if ($scheme = \\\"http\\\") {\"},{\"line\":26,\"text\":\"    return 301 <URL_REDACTED>\"},{\"line\":27,\"text\":\"  }\"},{\"line\":28,\"text\":\"  if ($http_x_forwarded_proto = \\\"http\\\") {\"},{\"line\":29,\"text\":\"    return 301 <URL_REDACTED>\"},{\"line\":30,\"text\":\"  }\"},{\"line\":31,\"text\":\"\"},{\"line\":32,\"text\":\"  client_max_body_size 1m;\"},{\"line\":33,\"text\":\"  more_set_headers \\\"X-Frame-Options: DENY\\\";\"},{\"line\":34,\"text\":\"  more_set_headers \\\"Referrer-Policy: no-referrer\\\";\"},{\"line\":35,\"text\":\"  more_set_headers \\\"Cross-Origin-Opener-Policy: same-origin\\\";\"}],\"rc\":0,\"sha16\":\"507fa874e9632e71\",\"size\":3704,\"stderr_sha16\":\"e3b0c44298fc1c14\"},\"same_env_direct_nginx\":{\"rc\":1,\"stderr_safe\":[\"nginx: [emerg] open() \\\"/data/custom_nginx/root.conf\\\" failed (2: No such file or directory) in /usr/local/nginx/conf/nginx.conf:20\",\"nginx: configuration file /usr/local/nginx/conf/nginx.conf test failed\"],\"stderr_sha16\":\"ae9c0a07f6c00888\"}}\nRCA9196_CLASSIFICATION=LIVE_CONFIG_DIFFERS_FROM_IMAGE\nTASK_COMPLETE=true\nTASK_RESULT=PASS_SPB_TLS_BRIDGE_NPMPLUS_RUNTIME_RCA\nDECISION=READ_EXACT_9196_THEN_BUILD_RUNTIME_FAITHFUL_NGINX_TEST\nNEXT_GATE=EXACT_9196_LIVE_VS_IMAGE_NPMPLUS_CONF\nHOMELAB_RESULT_CONTRACT={\"version\":1,\"command_id\":\"SUPPORT-260923-SPB-TLS-BRIDGE-NPMPLUS-RUNTIME-RCA-9196R1\",\"status\":\"OK\",\"changes_made\":false,\"rollback_started\":false,\"rollback_restored\":null}\n"
+}
diff --git a/runtime/history/SUPPORT-260923-SPB-TLS-BRIDGE-NPMPLUS-RUNTIME-RCA-9196R1.txt b/runtime/history/SUPPORT-260923-SPB-TLS-BRIDGE-NPMPLUS-RUNTIME-RCA-9196R1.txt
new file mode 100644
index 00000000..845d58fa
--- /dev/null
+++ b/runtime/history/SUPPORT-260923-SPB-TLS-BRIDGE-NPMPLUS-RUNTIME-RCA-9196R1.txt
@@ -0,0 +1,45 @@
+CHAT_OUTPUT_BEGIN
+COMMAND_ID=SUPPORT-260923-SPB-TLS-BRIDGE-NPMPLUS-RUNTIME-RCA-9196R1
+STATUS=OK
+RC=0
+HOST=pve01
+MODE=read-only
+COMPONENT=spb-tls-bridge-npmplus-runtime-rca
+REFERENCE_REGISTER_CHECK=OK
+REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
+ERROR_REGISTER_CHECK=OK
+ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
+COMMAND_SHA256=ddb8ebb208b8194c670dbb45bda053cae7d0a615dc00c22ef8b7eb110a91ca2f
+DUPLICATE_FAILED_COMMAND_BLOCKED=false
+EXECUTION_STARTED=true
+CHANGE_DECLARED=false
+RESULT_CONTRACT_VALID=true
+RESULT_CONTRACT_STATUS=NOT_APPLICABLE
+RESULT_CONTRACT_ERROR=NONE
+COMMAND_RC=0
+CHANGES_MADE=false
+ROLLBACK_STARTED=false
+ROLLBACK_RESTORED=null
+MUTATION_OUTCOME=NO_MUTATION
+SANITIZED=yes
+SECRETS_INCLUDED=no
+PRIVATE_ADDRESSES_INCLUDED=no
+RAW_EVIDENCE_SHA256=4b9b007c3d0a9273577ab848f1ac5a4c6bc925795eb52941a4ff505b2cc7abec
+SANITIZED_OUTPUT_SHA256=4b9b007c3d0a9273577ab848f1ac5a4c6bc925795eb52941a4ff505b2cc7abec
+OUTPUT_BEGIN
+RCA9196_BEGIN=true
+MUTATION_BOUNDARY=READ_ONLY_VM130_RUNTIME_RCA;NO_PRODUCTION_WRITE;NO_SPB_WRITE;NO_DNS_WRITE;NO_NGINX_RELOAD
+VM130_QGA_TRANSPORT_RC=0
+VM130_QGA_STDERR_SHA16=e3b0c44298fc1c14
+VM130_QGA_EXITCODE=0
+VM130_GUEST_STDERR_SHA16=e3b0c44298fc1c14
+RCA9196={"baseline":{"nginx_test_rc":0,"stderr_sha16":"9cb221b6993277a1"},"classification":"LIVE_CONFIG_DIFFERS_FROM_IMAGE","container":{"cmd":null,"entrypoint":["tini","--","entrypoint.sh"],"env_count":12,"env_names":["ACME_PROFILE","AUTH_REQUEST_AUTHENTIK_UPSTREAM","COOKIE_SECRET","DISABLE_H3_QUIC","DISABLE_IPV6","INITIAL_ADMIN_EMAIL","INITIAL_ADMIN_PASSWORD","IPV4_BINDING","NODE_ENV","NPM_IPV4_BINDING","PATH","TZ"],"image_sha16":"d16df105013397a1","user":""},"diff":{"image_line18":"  ssl_certificate ;","live_equals_image":false,"live_line18":"  ssl_certificate /data/tls/dummycert.pem;"},"image":{"lines_1_35":[{"line":1,"text":"upstream npmplus {"},{"line":2,"text":"  server unix:/run/npmplus.sock;"},{"line":3,"text":"}"},{"line":4,"text":""},{"line":5,"text":"server {"},{"line":6,"text":"  server_name \"\";"},{"line":7,"text":"  listen <IP_REDACTED>:81 ssl;"},{"line":8,"text":"  listen [::]:81 ssl;"},{"line":9,"text":"  ssl_reject_handshake on;"},{"line":10,"text":"  return 444;"},{"line":11,"text":"}"},{"line":12,"text":""},{"line":13,"text":"server {"},{"line":14,"text":"  listen <IP_REDACTED>:81 ssl bind reuseport deferred multipath so_keepalive=on default_server;"},{"line":15,"text":"  listen [::]:81 ssl bind reuseport deferred multipath so_keepalive=on default_server;"},{"line":16,"text":""},{"line":17,"text":"  server_name _;"},{"line":18,"text":"  ssl_certificate ;"},{"line":19,"text":"  ssl_certificate_key ;"},{"line":20,"text":"  #ssl_stapling on;"},{"line":21,"text":"  #ssl_stapling_verify on;"},{"line":22,"text":"  #ssl_stapling_file ;"},{"line":23,"text":"  #ssl_certificate_compression off;"},{"line":24,"text":""},{"line":25,"text":"  if ($scheme = \"http\") {"},{"line":26,"text":"    return 301 <URL_REDACTED>"},{"line":27,"text":"  }"},{"line":28,"text":"  if ($http_x_forwarded_proto = \"http\") {"},{"line":29,"text":"    return 301 <URL_REDACTED>"},{"line":30,"text":"  }"},{"line":31,"text":""},{"line":32,"text":"  client_max_body_size 1m;"},{"line":33,"text":"  more_set_headers \"X-Frame-Options: DENY\";"},{"line":34,"text":"  more_set_headers \"Referrer-Policy: no-referrer\";"},{"line":35,"text":"  more_set_headers \"Cross-Origin-Opener-Policy: same-origin\";"}],"rc":0,"sha16":"cfaf1d6ee20a39b1","size":3673,"stderr_safe":[],"stderr_sha16":"e3b0c44298fc1c14"},"live":{"lines_1_35":[{"line":1,"text":"upstream npmplus {"},{"line":2,"text":"  server unix:/run/npmplus.sock;"},{"line":3,"text":"}"},{"line":4,"text":""},{"line":5,"text":"server {"},{"line":6,"text":"  server_name \"\";"},{"line":7,"text":"  listen <IP_REDACTED>:81 ssl;"},{"line":8,"text":"  #listen [::]:81 ssl;"},{"line":9,"text":"  ssl_reject_handshake on;"},{"line":10,"text":"  return 444;"},{"line":11,"text":"}"},{"line":12,"text":""},{"line":13,"text":"server {"},{"line":14,"text":"  listen <IP_REDACTED>:81 ssl bind reuseport deferred so_keepalive=on default_server;"},{"line":15,"text":"  #listen [::]:81 ssl bind reuseport deferred so_keepalive=on default_server;"},{"line":16,"text":""},{"line":17,"text":"  server_name _;"},{"line":18,"text":"  ssl_certificate /data/tls/dummycert.pem;"},{"line":19,"text":"  ssl_certificate_key /data/tls/dummykey.pem;"},{"line":20,"text":"  #ssl_stapling on;"},{"line":21,"text":"  #ssl_stapling_verify on;"},{"line":22,"text":"  #ssl_stapling_file ;"},{"line":23,"text":"  #ssl_certificate_compression off;"},{"line":24,"text":""},{"line":25,"text":"  if ($scheme = \"http\") {"},{"line":26,"text":"    return 301 <URL_REDACTED>"},{"line":27,"text":"  }"},{"line":28,"text":"  if ($http_x_forwarded_proto = \"http\") {"},{"line":29,"text":"    return 301 <URL_REDACTED>"},{"line":30,"text":"  }"},{"line":31,"text":""},{"line":32,"text":"  client_max_body_size 1m;"},{"line":33,"text":"  more_set_headers \"X-Frame-Options: DENY\";"},{"line":34,"text":"  more_set_headers \"Referrer-Policy: no-referrer\";"},{"line":35,"text":"  more_set_headers \"Cross-Origin-Opener-Policy: same-origin\";"}],"rc":0,"sha16":"507fa874e9632e71","size":3704,"stderr_sha16":"e3b0c44298fc1c14"},"same_env_direct_nginx":{"rc":1,"stderr_safe":["nginx: [emerg] open() \"/data/custom_nginx/root.conf\" failed (2: No such file or directory) in /usr/local/nginx/conf/nginx.conf:20","nginx: configuration file /usr/local/nginx/conf/nginx.conf test failed"],"stderr_sha16":"ae9c0a07f6c00888"}}
+RCA9196_CLASSIFICATION=LIVE_CONFIG_DIFFERS_FROM_IMAGE
+TASK_COMPLETE=true
+TASK_RESULT=PASS_SPB_TLS_BRIDGE_NPMPLUS_RUNTIME_RCA
+DECISION=READ_EXACT_9196_THEN_BUILD_RUNTIME_FAITHFUL_NGINX_TEST
+NEXT_GATE=EXACT_9196_LIVE_VS_IMAGE_NPMPLUS_CONF
+HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"SUPPORT-260923-SPB-TLS-BRIDGE-NPMPLUS-RUNTIME-RCA-9196R1","status":"OK","changes_made":false,"rollback_started":false,"rollback_restored":null}
+
+OUTPUT_END
+CHAT_OUTPUT_END
diff --git a/runtime/latest.json b/runtime/latest.json
index eeab9c30..991e8c8d 100644
--- a/runtime/latest.json
+++ b/runtime/latest.json
@@ -1,19 +1,19 @@
 {
   "schema_version": 1,
   "channel": "homelab-runtime",
-  "command_id": "SUPPORT-260923-SKLADCHIK-MONITOR-RC1-EXACT-RCA-948R1",
-  "status": "FAIL",
-  "rc": 1,
+  "command_id": "SUPPORT-260923-SPB-TLS-BRIDGE-NPMPLUS-RUNTIME-RCA-9196R1",
+  "status": "OK",
+  "rc": 0,
   "host": "pve01",
   "mode": "read-only",
-  "component": "skladchik-monitor-rc1-exact-rca",
-  "started_at_utc": "2026-09-23T12:45:28Z",
-  "finished_at_utc": "2026-09-23T12:45:28Z",
+  "component": "spb-tls-bridge-npmplus-runtime-rca",
+  "started_at_utc": "2026-09-23T12:47:52Z",
+  "finished_at_utc": "2026-09-23T12:47:55Z",
   "reference_register_checked": true,
   "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66",
   "error_register_checked": true,
   "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0",
-  "command_sha256": "8ab34797effe733e32894f5ba8bcb89b8645c79808281a8cee7c352ed8205ed9",
+  "command_sha256": "ddb8ebb208b8194c670dbb45bda053cae7d0a615dc00c22ef8b7eb110a91ca2f",
   "duplicate_failed_command_blocked": false,
   "block_reason": null,
   "execution_started": true,
@@ -21,7 +21,7 @@
   "result_contract_valid": true,
   "result_contract_status": null,
   "result_contract_error": null,
-  "command_rc": 1,
+  "command_rc": 0,
   "changes_made": false,
   "rollback_started": false,
   "rollback_restored": null,
@@ -30,9 +30,9 @@
   "secrets_included": false,
   "private_addresses_included": false,
   "raw_evidence_retained_locally": true,
-  "raw_evidence_sha256": "221856faec31cc86a9b80d61df5f310a2c755abde35069b7cb1362461b621797",
-  "sanitized_output_sha256": "221856faec31cc86a9b80d61df5f310a2c755abde35069b7cb1362461b621797",
+  "raw_evidence_sha256": "4b9b007c3d0a9273577ab848f1ac5a4c6bc925795eb52941a4ff505b2cc7abec",
+  "sanitized_output_sha256": "4b9b007c3d0a9273577ab848f1ac5a4c6bc925795eb52941a4ff505b2cc7abec",
   "output_truncated_in_json": false,
   "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
-  "output": "SKLADCHIK948_BEGIN=true\nCOMMAND_ID=SUPPORT-260923-SKLADCHIK-MONITOR-RC1-EXACT-RCA-948R1\nMODE=read-only\nCOMPONENT=skladchik-monitor-rc1-exact-rca\nPREDECESSOR_947=SSH_CONTRACT_PARSE_FAILED_NO_MUTATION\nMUTATION_BOUNDARY=NONE_READ_ONLY\nEDGE_PARSE_OK=true\nKNOWN_HOSTS_PARSE_OK=true\nKNOWN_HOSTS_EXISTS=true\nEDGE_RCA_RC=2\nEDGE_RCA_STDERR_PRESENT=true\nEDGE_STDERR=bash: -c: line 1: syntax error near unexpected token `zlib.decompress'\nEDGE_STDERR=bash: -c: line 1: `sudo -n python3 -c import base64,zlib;exec(zlib.decompress(base64.b64decode('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\nCHANGES_MADE_BY_948=false\nROLLBACK_STARTED=false\nROLLBACK_RESTORED=null\nHOMELAB_RESULT_CONTRACT={\"version\":1,\"command_id\":\"SUPPORT-260923-SKLADCHIK-MONITOR-RC1-EXACT-RCA-948R1\",\"status\":\"FAIL\",\"changes_made\":false,\"rollback_started\":false,\"rollback_restored\":null}\nSKLADCHIK948_END=true\n"
+  "output": "RCA9196_BEGIN=true\nMUTATION_BOUNDARY=READ_ONLY_VM130_RUNTIME_RCA;NO_PRODUCTION_WRITE;NO_SPB_WRITE;NO_DNS_WRITE;NO_NGINX_RELOAD\nVM130_QGA_TRANSPORT_RC=0\nVM130_QGA_STDERR_SHA16=e3b0c44298fc1c14\nVM130_QGA_EXITCODE=0\nVM130_GUEST_STDERR_SHA16=e3b0c44298fc1c14\nRCA9196={\"baseline\":{\"nginx_test_rc\":0,\"stderr_sha16\":\"9cb221b6993277a1\"},\"classification\":\"LIVE_CONFIG_DIFFERS_FROM_IMAGE\",\"container\":{\"cmd\":null,\"entrypoint\":[\"tini\",\"--\",\"entrypoint.sh\"],\"env_count\":12,\"env_names\":[\"ACME_PROFILE\",\"AUTH_REQUEST_AUTHENTIK_UPSTREAM\",\"COOKIE_SECRET\",\"DISABLE_H3_QUIC\",\"DISABLE_IPV6\",\"INITIAL_ADMIN_EMAIL\",\"INITIAL_ADMIN_PASSWORD\",\"IPV4_BINDING\",\"NODE_ENV\",\"NPM_IPV4_BINDING\",\"PATH\",\"TZ\"],\"image_sha16\":\"d16df105013397a1\",\"user\":\"\"},\"diff\":{\"image_line18\":\"  ssl_certificate ;\",\"live_equals_image\":false,\"live_line18\":\"  ssl_certificate /data/tls/dummycert.pem;\"},\"image\":{\"lines_1_35\":[{\"line\":1,\"text\":\"upstream npmplus {\"},{\"line\":2,\"text\":\"  server unix:/run/npmplus.sock;\"},{\"line\":3,\"text\":\"}\"},{\"line\":4,\"text\":\"\"},{\"line\":5,\"text\":\"server {\"},{\"line\":6,\"text\":\"  server_name \\\"\\\";\"},{\"line\":7,\"text\":\"  listen <IP_REDACTED>:81 ssl;\"},{\"line\":8,\"text\":\"  listen [::]:81 ssl;\"},{\"line\":9,\"text\":\"  ssl_reject_handshake on;\"},{\"line\":10,\"text\":\"  return 444;\"},{\"line\":11,\"text\":\"}\"},{\"line\":12,\"text\":\"\"},{\"line\":13,\"text\":\"server {\"},{\"line\":14,\"text\":\"  listen <IP_REDACTED>:81 ssl bind reuseport deferred multipath so_keepalive=on default_server;\"},{\"line\":15,\"text\":\"  listen [::]:81 ssl bind reuseport deferred multipath so_keepalive=on default_server;\"},{\"line\":16,\"text\":\"\"},{\"line\":17,\"text\":\"  server_name _;\"},{\"line\":18,\"text\":\"  ssl_certificate ;\"},{\"line\":19,\"text\":\"  ssl_certificate_key ;\"},{\"line\":20,\"text\":\"  #ssl_stapling on;\"},{\"line\":21,\"text\":\"  #ssl_stapling_verify on;\"},{\"line\":22,\"text\":\"  #ssl_stapling_file ;\"},{\"line\":23,\"text\":\"  #ssl_certificate_compression off;\"},{\"line\":24,\"text\":\"\"},{\"line\":25,\"text\":\"  if ($scheme = \\\"http\\\") {\"},{\"line\":26,\"text\":\"    return 301 <URL_REDACTED>\"},{\"line\":27,\"text\":\"  }\"},{\"line\":28,\"text\":\"  if ($http_x_forwarded_proto = \\\"http\\\") {\"},{\"line\":29,\"text\":\"    return 301 <URL_REDACTED>\"},{\"line\":30,\"text\":\"  }\"},{\"line\":31,\"text\":\"\"},{\"line\":32,\"text\":\"  client_max_body_size 1m;\"},{\"line\":33,\"text\":\"  more_set_headers \\\"X-Frame-Options: DENY\\\";\"},{\"line\":34,\"text\":\"  more_set_headers \\\"Referrer-Policy: no-referrer\\\";\"},{\"line\":35,\"text\":\"  more_set_headers \\\"Cross-Origin-Opener-Policy: same-origin\\\";\"}],\"rc\":0,\"sha16\":\"cfaf1d6ee20a39b1\",\"size\":3673,\"stderr_safe\":[],\"stderr_sha16\":\"e3b0c44298fc1c14\"},\"live\":{\"lines_1_35\":[{\"line\":1,\"text\":\"upstream npmplus {\"},{\"line\":2,\"text\":\"  server unix:/run/npmplus.sock;\"},{\"line\":3,\"text\":\"}\"},{\"line\":4,\"text\":\"\"},{\"line\":5,\"text\":\"server {\"},{\"line\":6,\"text\":\"  server_name \\\"\\\";\"},{\"line\":7,\"text\":\"  listen <IP_REDACTED>:81 ssl;\"},{\"line\":8,\"text\":\"  #listen [::]:81 ssl;\"},{\"line\":9,\"text\":\"  ssl_reject_handshake on;\"},{\"line\":10,\"text\":\"  return 444;\"},{\"line\":11,\"text\":\"}\"},{\"line\":12,\"text\":\"\"},{\"line\":13,\"text\":\"server {\"},{\"line\":14,\"text\":\"  listen <IP_REDACTED>:81 ssl bind reuseport deferred so_keepalive=on default_server;\"},{\"line\":15,\"text\":\"  #listen [::]:81 ssl bind reuseport deferred so_keepalive=on default_server;\"},{\"line\":16,\"text\":\"\"},{\"line\":17,\"text\":\"  server_name _;\"},{\"line\":18,\"text\":\"  ssl_certificate /data/tls/dummycert.pem;\"},{\"line\":19,\"text\":\"  ssl_certificate_key /data/tls/dummykey.pem;\"},{\"line\":20,\"text\":\"  #ssl_stapling on;\"},{\"line\":21,\"text\":\"  #ssl_stapling_verify on;\"},{\"line\":22,\"text\":\"  #ssl_stapling_file ;\"},{\"line\":23,\"text\":\"  #ssl_certificate_compression off;\"},{\"line\":24,\"text\":\"\"},{\"line\":25,\"text\":\"  if ($scheme = \\\"http\\\") {\"},{\"line\":26,\"text\":\"    return 301 <URL_REDACTED>\"},{\"line\":27,\"text\":\"  }\"},{\"line\":28,\"text\":\"  if ($http_x_forwarded_proto = \\\"http\\\") {\"},{\"line\":29,\"text\":\"    return 301 <URL_REDACTED>\"},{\"line\":30,\"text\":\"  }\"},{\"line\":31,\"text\":\"\"},{\"line\":32,\"text\":\"  client_max_body_size 1m;\"},{\"line\":33,\"text\":\"  more_set_headers \\\"X-Frame-Options: DENY\\\";\"},{\"line\":34,\"text\":\"  more_set_headers \\\"Referrer-Policy: no-referrer\\\";\"},{\"line\":35,\"text\":\"  more_set_headers \\\"Cross-Origin-Opener-Policy: same-origin\\\";\"}],\"rc\":0,\"sha16\":\"507fa874e9632e71\",\"size\":3704,\"stderr_sha16\":\"e3b0c44298fc1c14\"},\"same_env_direct_nginx\":{\"rc\":1,\"stderr_safe\":[\"nginx: [emerg] open() \\\"/data/custom_nginx/root.conf\\\" failed (2: No such file or directory) in /usr/local/nginx/conf/nginx.conf:20\",\"nginx: configuration file /usr/local/nginx/conf/nginx.conf test failed\"],\"stderr_sha16\":\"ae9c0a07f6c00888\"}}\nRCA9196_CLASSIFICATION=LIVE_CONFIG_DIFFERS_FROM_IMAGE\nTASK_COMPLETE=true\nTASK_RESULT=PASS_SPB_TLS_BRIDGE_NPMPLUS_RUNTIME_RCA\nDECISION=READ_EXACT_9196_THEN_BUILD_RUNTIME_FAITHFUL_NGINX_TEST\nNEXT_GATE=EXACT_9196_LIVE_VS_IMAGE_NPMPLUS_CONF\nHOMELAB_RESULT_CONTRACT={\"version\":1,\"command_id\":\"SUPPORT-260923-SPB-TLS-BRIDGE-NPMPLUS-RUNTIME-RCA-9196R1\",\"status\":\"OK\",\"changes_made\":false,\"rollback_started\":false,\"rollback_restored\":null}\n"
 }
diff --git a/runtime/latest.txt b/runtime/latest.txt
index 6d46321e..845d58fa 100644
--- a/runtime/latest.txt
+++ b/runtime/latest.txt
@@ -1,22 +1,22 @@
 CHAT_OUTPUT_BEGIN
-COMMAND_ID=SUPPORT-260923-SKLADCHIK-MONITOR-RC1-EXACT-RCA-948R1
-STATUS=FAIL
-RC=1
+COMMAND_ID=SUPPORT-260923-SPB-TLS-BRIDGE-NPMPLUS-RUNTIME-RCA-9196R1
+STATUS=OK
+RC=0
 HOST=pve01
 MODE=read-only
-COMPONENT=skladchik-monitor-rc1-exact-rca
+COMPONENT=spb-tls-bridge-npmplus-runtime-rca
 REFERENCE_REGISTER_CHECK=OK
 REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
 ERROR_REGISTER_CHECK=OK
 ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
-COMMAND_SHA256=8ab34797effe733e32894f5ba8bcb89b8645c79808281a8cee7c352ed8205ed9
+COMMAND_SHA256=ddb8ebb208b8194c670dbb45bda053cae7d0a615dc00c22ef8b7eb110a91ca2f
 DUPLICATE_FAILED_COMMAND_BLOCKED=false
 EXECUTION_STARTED=true
 CHANGE_DECLARED=false
 RESULT_CONTRACT_VALID=true
 RESULT_CONTRACT_STATUS=NOT_APPLICABLE
 RESULT_CONTRACT_ERROR=NONE
-COMMAND_RC=1
+COMMAND_RC=0
 CHANGES_MADE=false
 ROLLBACK_STARTED=false
 ROLLBACK_RESTORED=null
@@ -24,27 +24,22 @@ MUTATION_OUTCOME=NO_MUTATION
 SANITIZED=yes
 SECRETS_INCLUDED=no
 PRIVATE_ADDRESSES_INCLUDED=no
-RAW_EVIDENCE_SHA256=221856faec31cc86a9b80d61df5f310a2c755abde35069b7cb1362461b621797
-SANITIZED_OUTPUT_SHA256=221856faec31cc86a9b80d61df5f310a2c755abde35069b7cb1362461b621797
+RAW_EVIDENCE_SHA256=4b9b007c3d0a9273577ab848f1ac5a4c6bc925795eb52941a4ff505b2cc7abec
+SANITIZED_OUTPUT_SHA256=4b9b007c3d0a9273577ab848f1ac5a4c6bc925795eb52941a4ff505b2cc7abec
 OUTPUT_BEGIN
-SKLADCHIK948_BEGIN=true
-COMMAND_ID=SUPPORT-260923-SKLADCHIK-MONITOR-RC1-EXACT-RCA-948R1
-MODE=read-only
-COMPONENT=skladchik-monitor-rc1-exact-rca
-PREDECESSOR_947=SSH_CONTRACT_PARSE_FAILED_NO_MUTATION
-MUTATION_BOUNDARY=NONE_READ_ONLY
-EDGE_PARSE_OK=true
-KNOWN_HOSTS_PARSE_OK=true
-KNOWN_HOSTS_EXISTS=true
-EDGE_RCA_RC=2
-EDGE_RCA_STDERR_PRESENT=true
-EDGE_STDERR=bash: -c: line 1: syntax error near unexpected token `zlib.decompress'
-EDGE_STDERR=bash: -c: line 1: `sudo -n python3 -c import base64,zlib;exec(zlib.decompress(base64.b64decode('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
-CHANGES_MADE_BY_948=false
-ROLLBACK_STARTED=false
-ROLLBACK_RESTORED=null
-HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"SUPPORT-260923-SKLADCHIK-MONITOR-RC1-EXACT-RCA-948R1","status":"FAIL","changes_made":false,"rollback_started":false,"rollback_restored":null}
-SKLADCHIK948_END=true
+RCA9196_BEGIN=true
+MUTATION_BOUNDARY=READ_ONLY_VM130_RUNTIME_RCA;NO_PRODUCTION_WRITE;NO_SPB_WRITE;NO_DNS_WRITE;NO_NGINX_RELOAD
+VM130_QGA_TRANSPORT_RC=0
+VM130_QGA_STDERR_SHA16=e3b0c44298fc1c14
+VM130_QGA_EXITCODE=0
+VM130_GUEST_STDERR_SHA16=e3b0c44298fc1c14
+RCA9196={"baseline":{"nginx_test_rc":0,"stderr_sha16":"9cb221b6993277a1"},"classification":"LIVE_CONFIG_DIFFERS_FROM_IMAGE","container":{"cmd":null,"entrypoint":["tini","--","entrypoint.sh"],"env_count":12,"env_names":["ACME_PROFILE","AUTH_REQUEST_AUTHENTIK_UPSTREAM","COOKIE_SECRET","DISABLE_H3_QUIC","DISABLE_IPV6","INITIAL_ADMIN_EMAIL","INITIAL_ADMIN_PASSWORD","IPV4_BINDING","NODE_ENV","NPM_IPV4_BINDING","PATH","TZ"],"image_sha16":"d16df105013397a1","user":""},"diff":{"image_line18":"  ssl_certificate ;","live_equals_image":false,"live_line18":"  ssl_certificate /data/tls/dummycert.pem;"},"image":{"lines_1_35":[{"line":1,"text":"upstream npmplus {"},{"line":2,"text":"  server unix:/run/npmplus.sock;"},{"line":3,"text":"}"},{"line":4,"text":""},{"line":5,"text":"server {"},{"line":6,"text":"  server_name \"\";"},{"line":7,"text":"  listen <IP_REDACTED>:81 ssl;"},{"line":8,"text":"  listen [::]:81 ssl;"},{"line":9,"text":"  ssl_reject_handshake on;"},{"line":10,"text":"  return 444;"},{"line":11,"text":"}"},{"line":12,"text":""},{"line":13,"text":"server {"},{"line":14,"text":"  listen <IP_REDACTED>:81 ssl bind reuseport deferred multipath so_keepalive=on default_server;"},{"line":15,"text":"  listen [::]:81 ssl bind reuseport deferred multipath so_keepalive=on default_server;"},{"line":16,"text":""},{"line":17,"text":"  server_name _;"},{"line":18,"text":"  ssl_certificate ;"},{"line":19,"text":"  ssl_certificate_key ;"},{"line":20,"text":"  #ssl_stapling on;"},{"line":21,"text":"  #ssl_stapling_verify on;"},{"line":22,"text":"  #ssl_stapling_file ;"},{"line":23,"text":"  #ssl_certificate_compression off;"},{"line":24,"text":""},{"line":25,"text":"  if ($scheme = \"http\") {"},{"line":26,"text":"    return 301 <URL_REDACTED>"},{"line":27,"text":"  }"},{"line":28,"text":"  if ($http_x_forwarded_proto = \"http\") {"},{"line":29,"text":"    return 301 <URL_REDACTED>"},{"line":30,"text":"  }"},{"line":31,"text":""},{"line":32,"text":"  client_max_body_size 1m;"},{"line":33,"text":"  more_set_headers \"X-Frame-Options: DENY\";"},{"line":34,"text":"  more_set_headers \"Referrer-Policy: no-referrer\";"},{"line":35,"text":"  more_set_headers \"Cross-Origin-Opener-Policy: same-origin\";"}],"rc":0,"sha16":"cfaf1d6ee20a39b1","size":3673,"stderr_safe":[],"stderr_sha16":"e3b0c44298fc1c14"},"live":{"lines_1_35":[{"line":1,"text":"upstream npmplus {"},{"line":2,"text":"  server unix:/run/npmplus.sock;"},{"line":3,"text":"}"},{"line":4,"text":""},{"line":5,"text":"server {"},{"line":6,"text":"  server_name \"\";"},{"line":7,"text":"  listen <IP_REDACTED>:81 ssl;"},{"line":8,"text":"  #listen [::]:81 ssl;"},{"line":9,"text":"  ssl_reject_handshake on;"},{"line":10,"text":"  return 444;"},{"line":11,"text":"}"},{"line":12,"text":""},{"line":13,"text":"server {"},{"line":14,"text":"  listen <IP_REDACTED>:81 ssl bind reuseport deferred so_keepalive=on default_server;"},{"line":15,"text":"  #listen [::]:81 ssl bind reuseport deferred so_keepalive=on default_server;"},{"line":16,"text":""},{"line":17,"text":"  server_name _;"},{"line":18,"text":"  ssl_certificate /data/tls/dummycert.pem;"},{"line":19,"text":"  ssl_certificate_key /data/tls/dummykey.pem;"},{"line":20,"text":"  #ssl_stapling on;"},{"line":21,"text":"  #ssl_stapling_verify on;"},{"line":22,"text":"  #ssl_stapling_file ;"},{"line":23,"text":"  #ssl_certificate_compression off;"},{"line":24,"text":""},{"line":25,"text":"  if ($scheme = \"http\") {"},{"line":26,"text":"    return 301 <URL_REDACTED>"},{"line":27,"text":"  }"},{"line":28,"text":"  if ($http_x_forwarded_proto = \"http\") {"},{"line":29,"text":"    return 301 <URL_REDACTED>"},{"line":30,"text":"  }"},{"line":31,"text":""},{"line":32,"text":"  client_max_body_size 1m;"},{"line":33,"text":"  more_set_headers \"X-Frame-Options: DENY\";"},{"line":34,"text":"  more_set_headers \"Referrer-Policy: no-referrer\";"},{"line":35,"text":"  more_set_headers \"Cross-Origin-Opener-Policy: same-origin\";"}],"rc":0,"sha16":"507fa874e9632e71","size":3704,"stderr_sha16":"e3b0c44298fc1c14"},"same_env_direct_nginx":{"rc":1,"stderr_safe":["nginx: [emerg] open() \"/data/custom_nginx/root.conf\" failed (2: No such file or directory) in /usr/local/nginx/conf/nginx.conf:20","nginx: configuration file /usr/local/nginx/conf/nginx.conf test failed"],"stderr_sha16":"ae9c0a07f6c00888"}}
+RCA9196_CLASSIFICATION=LIVE_CONFIG_DIFFERS_FROM_IMAGE
+TASK_COMPLETE=true
+TASK_RESULT=PASS_SPB_TLS_BRIDGE_NPMPLUS_RUNTIME_RCA
+DECISION=READ_EXACT_9196_THEN_BUILD_RUNTIME_FAITHFUL_NGINX_TEST
+NEXT_GATE=EXACT_9196_LIVE_VS_IMAGE_NPMPLUS_CONF
+HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"SUPPORT-260923-SPB-TLS-BRIDGE-NPMPLUS-RUNTIME-RCA-9196R1","status":"OK","changes_made":false,"rollback_started":false,"rollback_restored":null}
 
 OUTPUT_END
 CHAT_OUTPUT_END