runtime: publish SUPPORT-260923-SPB-TLS-BRIDGE-DNS-DPAPI-HELPER-RCA-9172R1

runtime/history/SUPPORT-260923-SPB-TLS-BRIDGE-DNS-DPAPI-HELPER-RCA-9172R1.json

@@ -0,0 +1,38 @@
+{
+  "schema_version": 1,
+  "channel": "homelab-runtime",
+  "command_id": "SUPPORT-260923-SPB-TLS-BRIDGE-DNS-DPAPI-HELPER-RCA-9172R1",
+  "status": "OK",
+  "rc": 0,
+  "host": "pve01",
+  "mode": "read-only",
+  "component": "spb-tls-bridge-dns-dpapi-helper-rca",
+  "started_at_utc": "2026-09-23T04:06:36Z",
+  "finished_at_utc": "2026-09-23T04:06:36Z",
+  "reference_register_checked": true,
+  "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66",
+  "error_register_checked": true,
+  "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0",
+  "command_sha256": "826d0279e196f524f02aa9dbc3949ec857d97dadc210082285c940d65c71d9e4",
+  "duplicate_failed_command_blocked": false,
+  "block_reason": null,
+  "execution_started": true,
+  "change_declared": false,
+  "result_contract_valid": true,
+  "result_contract_status": null,
+  "result_contract_error": null,
+  "command_rc": 0,
+  "changes_made": false,
+  "rollback_started": false,
+  "rollback_restored": null,
+  "mutation_outcome": "NO_MUTATION",
+  "sanitized": true,
+  "secrets_included": false,
+  "private_addresses_included": false,
+  "raw_evidence_retained_locally": true,
+  "raw_evidence_sha256": "7208b7ce158a887e31267811c642d771259da36987499cedda1202fca5978cf4",
+  "sanitized_output_sha256": "7208b7ce158a887e31267811c642d771259da36987499cedda1202fca5978cf4",
+  "output_truncated_in_json": false,
+  "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
+  "output": "DNS_DPAPI_HELPER_RCA_BEGIN=true\nPREDECESSOR=SUPPORT-260923-SPB-TLS-BRIDGE-PUTTY-ENDPOINT-RCA-9171R1\nPREDECESSOR_STATUS=OK\nPREDECESSOR_CHANGES_MADE=false\nROLLBACK_FORENSIC_9148R3=ROLLBACK_CLEAN_BASELINE_OK\nBRIDGE_AUTHORITY=SUPPORT-260923-SPB-TLS-BRIDGE-EXEC-9164R1\nBRIDGE_AUTHORITY_ROOT_ARRAY_SELECTED=true\nBRIDGE_AUTHORITY_GUEST_RC=1\nPASSWORD_CACHE_REQUIREMENT=WINDOWS_DPAPI_REQUIRED\nMUTATION_BOUNDARY=READ_ONLY_DNS_PINNED_SPB_IDENTITY_DPAPI_SUDO_HELPER_SOURCE;NO_SPB_WRITE;NO_VM130_WRITE;NO_DNS_WRITE;NO_CERT_WRITE;NO_NGINX_WRITE\nDNS_A_CANDIDATE_COUNT=1\nDNS_A_CANDIDATE_SHA16=6d6149f42864ce03\nSPB_PINNED_PROBE_01=HOST_SHA16:6d6149f42864ce03|RC:125|STDERR_SHA16:4089e96b9e0dcd8b\nUNIQUE_PINNED_SPB_MATCH_COUNT=0\nDPAPI_NAME_FILTER_FILE_COUNT=275\nDPAPI_DECRYPTABLE_CANDIDATE=PATH_SHA16:b8eafdb29540ea01|NAME_SHA16:46e753f93ecebd6d|METHOD:SECURESTRING_DPAPI\nDPAPI_DECRYPTABLE_CANDIDATE_COUNT=1\nDPAPI_SUDO_VALIDATION_RC=NOT_RUN_NON_UNIQUE_GATE\nDPAPI_SUDO_VALID_COUNT=0\nSPB_HELPER_READ_PERFORMED=false\nDNS_DPAPI_HELPER_RCA_DECISION=PINNED_SPB_ENDPOINT_NOT_UNIQUE\nDNS_DPAPI_HELPER_RCA_COMPLETE=true\nCHANGES_MADE=NO\nTASK_COMPLETE=true\nTASK_RESULT=PASS_SPB_TLS_BRIDGE_DNS_DPAPI_HELPER_RCA\nDECISION=READ_EXACT_9172_THEN_FIX_ONLY_PROVEN_POSTGUARD_BLOCKER\nNEXT_GATE=EXACT_9172_HELPER_SOURCE_OR_PRECISE_BLOCKER\nHOMELAB_RESULT_CONTRACT={\"version\":1,\"command_id\":\"SUPPORT-260923-SPB-TLS-BRIDGE-DNS-DPAPI-HELPER-RCA-9172R1\",\"status\":\"OK\",\"changes_made\":false,\"rollback_started\":false,\"rollback_restored\":null}\n"
+}

runtime/history/SUPPORT-260923-SPB-TLS-BRIDGE-DNS-DPAPI-HELPER-RCA-9172R1.txt

@@ -0,0 +1,60 @@
+CHAT_OUTPUT_BEGIN
+COMMAND_ID=SUPPORT-260923-SPB-TLS-BRIDGE-DNS-DPAPI-HELPER-RCA-9172R1
+STATUS=OK
+RC=0
+HOST=pve01
+MODE=read-only
+COMPONENT=spb-tls-bridge-dns-dpapi-helper-rca
+REFERENCE_REGISTER_CHECK=OK
+REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
+ERROR_REGISTER_CHECK=OK
+ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
+COMMAND_SHA256=826d0279e196f524f02aa9dbc3949ec857d97dadc210082285c940d65c71d9e4
+DUPLICATE_FAILED_COMMAND_BLOCKED=false
+EXECUTION_STARTED=true
+CHANGE_DECLARED=false
+RESULT_CONTRACT_VALID=true
+RESULT_CONTRACT_STATUS=NOT_APPLICABLE
+RESULT_CONTRACT_ERROR=NONE
+COMMAND_RC=0
+CHANGES_MADE=false
+ROLLBACK_STARTED=false
+ROLLBACK_RESTORED=null
+MUTATION_OUTCOME=NO_MUTATION
+SANITIZED=yes
+SECRETS_INCLUDED=no
+PRIVATE_ADDRESSES_INCLUDED=no
+RAW_EVIDENCE_SHA256=7208b7ce158a887e31267811c642d771259da36987499cedda1202fca5978cf4
+SANITIZED_OUTPUT_SHA256=7208b7ce158a887e31267811c642d771259da36987499cedda1202fca5978cf4
+OUTPUT_BEGIN
+DNS_DPAPI_HELPER_RCA_BEGIN=true
+PREDECESSOR=SUPPORT-260923-SPB-TLS-BRIDGE-PUTTY-ENDPOINT-RCA-9171R1
+PREDECESSOR_STATUS=OK
+PREDECESSOR_CHANGES_MADE=false
+ROLLBACK_FORENSIC_9148R3=ROLLBACK_CLEAN_BASELINE_OK
+BRIDGE_AUTHORITY=SUPPORT-260923-SPB-TLS-BRIDGE-EXEC-9164R1
+BRIDGE_AUTHORITY_ROOT_ARRAY_SELECTED=true
+BRIDGE_AUTHORITY_GUEST_RC=1
+PASSWORD_CACHE_REQUIREMENT=WINDOWS_DPAPI_REQUIRED
+MUTATION_BOUNDARY=READ_ONLY_DNS_PINNED_SPB_IDENTITY_DPAPI_SUDO_HELPER_SOURCE;NO_SPB_WRITE;NO_VM130_WRITE;NO_DNS_WRITE;NO_CERT_WRITE;NO_NGINX_WRITE
+DNS_A_CANDIDATE_COUNT=1
+DNS_A_CANDIDATE_SHA16=6d6149f42864ce03
+SPB_PINNED_PROBE_01=HOST_SHA16:6d6149f42864ce03|RC:125|STDERR_SHA16:4089e96b9e0dcd8b
+UNIQUE_PINNED_SPB_MATCH_COUNT=0
+DPAPI_NAME_FILTER_FILE_COUNT=275
+DPAPI_DECRYPTABLE_CANDIDATE=PATH_SHA16:b8eafdb29540ea01|NAME_SHA16:46e753f93ecebd6d|METHOD:SECURESTRING_DPAPI
+DPAPI_DECRYPTABLE_CANDIDATE_COUNT=1
+DPAPI_SUDO_VALIDATION_RC=NOT_RUN_NON_UNIQUE_GATE
+DPAPI_SUDO_VALID_COUNT=0
+SPB_HELPER_READ_PERFORMED=false
+DNS_DPAPI_HELPER_RCA_DECISION=PINNED_SPB_ENDPOINT_NOT_UNIQUE
+DNS_DPAPI_HELPER_RCA_COMPLETE=true
+CHANGES_MADE=NO
+TASK_COMPLETE=true
+TASK_RESULT=PASS_SPB_TLS_BRIDGE_DNS_DPAPI_HELPER_RCA
+DECISION=READ_EXACT_9172_THEN_FIX_ONLY_PROVEN_POSTGUARD_BLOCKER
+NEXT_GATE=EXACT_9172_HELPER_SOURCE_OR_PRECISE_BLOCKER
+HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"SUPPORT-260923-SPB-TLS-BRIDGE-DNS-DPAPI-HELPER-RCA-9172R1","status":"OK","changes_made":false,"rollback_started":false,"rollback_restored":null}
+
+OUTPUT_END
+CHAT_OUTPUT_END

runtime/latest.json

@@ -1,38 +1,38 @@
 {
   "schema_version": 1,
   "channel": "homelab-runtime",
-  "command_id": "SUPPORT-260923-PVEPRO-TURNSTILE-CHECKPOINT14-VERIFY-FIX-924R1",
+  "command_id": "SUPPORT-260923-SPB-TLS-BRIDGE-DNS-DPAPI-HELPER-RCA-9172R1",
   "status": "OK",
   "rc": 0,
   "host": "pve01",
-  "mode": "change",
-  "component": "pvepro-turnstile-checkpoint14-verify-fix",
-  "started_at_utc": "2026-09-23T03:59:50Z",
-  "finished_at_utc": "2026-09-23T03:59:56Z",
+  "mode": "read-only",
+  "component": "spb-tls-bridge-dns-dpapi-helper-rca",
+  "started_at_utc": "2026-09-23T04:06:36Z",
+  "finished_at_utc": "2026-09-23T04:06:36Z",
   "reference_register_checked": true,
   "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66",
   "error_register_checked": true,
   "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0",
-  "command_sha256": "a7e6607ca08d1ce997fc3d91937f66a953028fbbc202b3eceb9d447038584342",
+  "command_sha256": "826d0279e196f524f02aa9dbc3949ec857d97dadc210082285c940d65c71d9e4",
   "duplicate_failed_command_blocked": false,
   "block_reason": null,
   "execution_started": true,
-  "change_declared": true,
+  "change_declared": false,
   "result_contract_valid": true,
-  "result_contract_status": "OK",
+  "result_contract_status": null,
   "result_contract_error": null,
   "command_rc": 0,
-  "changes_made": true,
+  "changes_made": false,
   "rollback_started": false,
   "rollback_restored": null,
-  "mutation_outcome": "MUTATED",
+  "mutation_outcome": "NO_MUTATION",
   "sanitized": true,
   "secrets_included": false,
   "private_addresses_included": false,
   "raw_evidence_retained_locally": true,
-  "raw_evidence_sha256": "8b18ec43624e5a4d8b10e92282a94385ea5090076b762900d4e40b695030dae7",
-  "sanitized_output_sha256": "8b18ec43624e5a4d8b10e92282a94385ea5090076b762900d4e40b695030dae7",
+  "raw_evidence_sha256": "7208b7ce158a887e31267811c642d771259da36987499cedda1202fca5978cf4",
+  "sanitized_output_sha256": "7208b7ce158a887e31267811c642d771259da36987499cedda1202fca5978cf4",
   "output_truncated_in_json": false,
   "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
-  "output": "PVEPRO924_BEGIN=true\nCOMMAND_ID=SUPPORT-260923-PVEPRO-TURNSTILE-CHECKPOINT14-VERIFY-FIX-924R1\nMODE=change\nCOMPONENT=pvepro-turnstile-checkpoint14-verify-fix\nPREDECESSOR_914=PASS_PVEPRO914_MAIL_CHECKPOINT13\nPREDECESSOR_916=HOLD_PVEPRO916_EXTERNAL_CLOUDFLARE_TURNSTILE_CREDENTIAL_REQUIRED_NO_MUTATION\nPREDECESSOR_920=PASS_PVEPRO920_BACKUP_ARCHIVE_VERIFY_MONITORING\nPREDECESSOR_922=HOLD_PVEPRO922_ALL_SIX_EXISTING_TOKENS_403_TURNSTILE_NO_MUTATION\nPREDECESSOR_923=HOLD_PVEPRO923_VERIFY_FALSE_NEGATIVE_ROLLBACK_PROVEN\n923_PROOF=TOKEN_VALID;ZONE_MATCH1;WIDGET_CREATE200;SITEVERIFY_SECRET_ACCEPTED;APPLY_EXIT0;PROVIDER_TURNSTILE;SITE_AND_SECRET_HASHES_MATCH;ROLLBACK_RESTORED\n923_RCA=SHELL_EXPECTED_HASH_USED_JQ_NEWLINE;924_VERIFY_COMPARES_EXACT_BASE64_DECODED_VALUES\n922_PROOF=ALL_6_TOKENS_VALID;PVEPro_ACCOUNT_RESOLVED;ALL_6_TURNSTILE_CREATE_HTTP403_CODE10000\nTOKEN_REQUIREMENT=NEW_CUSTOM_TOKEN_WITH_ACCOUNT_TURNSTILE_SITES_EDIT_AND_ZONE_ZONE_READ_FOR_PVEPRO_RU\nTOKEN_SOURCE=LOCAL_WINDOWS_INTERACTIVE_SECURE_INPUT\nTOKEN_PERSISTENCE=NONE;ROOT_ONLY_TRANSIENT_FILE_DURING_RUN\nMUTATION_BOUNDARY=CREATE_DEDICATED_CLOUDFLARE_TURNSTILE_WIDGET;VM100_OPTIONS_CAPTCHA_AND_EXTRA_CAPTCHA_KEYS;NO_REGISTRATION_ENABLE;NO_MAIL;NO_VM_CONFIG;NO_BACKUP;NO_EDGE_CONFIG\nREFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66\nERROR_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0\nPROD_AGENT_RC=0\nPRE_TRANSPORT_RC=0\nPRE_GUEST|exited=1|exitcode=0\nXENFORO_CAPTCHA_PRE|provider=HCaptcha|captcha_sha=6fce54e29ddafccfe8f0400290ce24b406e0db36dd6d20f63bf05fe03b461200|extra_sha=35786c7117b4e38d0f169239752ce71158266ae2f6e4aa230fbbb87bd699c0e3|turn_site_present=false|turn_secret_present=false\nCF_TOKEN_VERIFY_HTTP=200\nCF_TOKEN_VERIFY_SUCCESS=true\nCF_ZONE_LOOKUP_HTTP=200\nCF_ZONE_MATCH_COUNT=1\nCF_ACCOUNT_SHA256=49ace22b1853724543e1b3b00f02d6a03acd8bd4f9046f8cf5c3c9b6343984f3\nCF_WIDGET_CREATE_HTTP=200\nCF_SITEVERIFY_SECRET_ACCEPTED=true\nCF_SITEVERIFY_ERROR_CLASS=invalid-input-response\nCF_WIDGET_CREATED=true\nCF_SITEKEY_SHA256=404ffad0b3feda5d363aa62cfed1ff02108830c51c448c9f146d876773d6415c\nCF_SECRET_SHA256=27dcc369aca7a89650a00f7dff0db8bfc56ec96a4609ea83466878ec47da6af3\nCF_SETUP_RC=0\nAPPLY_TRANSPORT_RC=0\nAPPLY_GUEST|exited=1|exitcode=0\nTURNSTILE_APPLY|site_sha=404ffad0b3feda5d363aa62cfed1ff02108830c51c448c9f146d876773d6415c|secret_sha=27dcc369aca7a89650a00f7dff0db8bfc56ec96a4609ea83466878ec47da6af3\nVERIFY_TRANSPORT_RC=0\nVERIFY_GUEST|exited=1|exitcode=0\nTURNSTILE_VERIFY|provider=Turnstile|site_exact=true|secret_exact=true|site_sha=404ffad0b3feda5d363aa62cfed1ff02108830c51c448c9f146d876773d6415c|expected_site_sha=404ffad0b3feda5d363aa62cfed1ff02108830c51c448c9f146d876773d6415c|secret_sha=27dcc369aca7a89650a00f7dff0db8bfc56ec96a4609ea83466878ec47da6af3|expected_secret_sha=27dcc369aca7a89650a00f7dff0db8bfc56ec96a4609ea83466878ec47da6af3|extra_sha=4787b2f512d6a64470ef9473c034f137e876f6347bd5910b962e3f9acb9edb17\nPUBLIC_SUPPORT_TURNSTILE|curl_rc=0|http=200|rendered=true|bytes=28933\nCLEANUP_TRANSPORT_RC=0\nCLEANUP_GUEST|exited=1|exitcode=0\nCHECKPOINT14_TURNSTILE_COMPLETE=true\nCHECKPOINT14_OPEN=false\nREGISTRATION_PUBLIC_LAUNCH_OPEN=true\nFINAL_CLOSURE_OPEN=true\nPRODUCT_CHECKPOINTS_REMAINING=2\nDECISION=PASS_PVEPRO924_TURNSTILE_CHECKPOINT14\nNEXT_GATE=REGISTRATION_PUBLIC_LAUNCH\nTASK_RESULT=PASS_PVEPRO_TURNSTILE_CHECKPOINT14\nCHANGES_MADE_BY_924=true\nCLOUDFLARE_WIDGET_CREATED_BY_924=true\nXENFORO_OPTION_MUTATION_ATTEMPTED_BY_924=true\nXENFORO_OPTION_MUTATION_COMPLETED_BY_924=true\nREGISTRATION_MUTATION_BY_924=false\nMAIL_MUTATION_BY_924=false\nVM_CONFIG_MUTATION_BY_924=false\nBACKUP_MUTATION_BY_924=false\nEDGE_CONFIG_MUTATION_BY_924=false\nROLLBACK_STARTED=false\nROLLBACK_RESTORED=null\nHOMELAB_RESULT_CONTRACT={\"version\":1,\"command_id\":\"SUPPORT-260923-PVEPRO-TURNSTILE-CHECKPOINT14-VERIFY-FIX-924R1\",\"status\":\"OK\",\"changes_made\":true,\"rollback_started\":false,\"rollback_restored\":null}\nPVEPRO924_END=true\n"
+  "output": "DNS_DPAPI_HELPER_RCA_BEGIN=true\nPREDECESSOR=SUPPORT-260923-SPB-TLS-BRIDGE-PUTTY-ENDPOINT-RCA-9171R1\nPREDECESSOR_STATUS=OK\nPREDECESSOR_CHANGES_MADE=false\nROLLBACK_FORENSIC_9148R3=ROLLBACK_CLEAN_BASELINE_OK\nBRIDGE_AUTHORITY=SUPPORT-260923-SPB-TLS-BRIDGE-EXEC-9164R1\nBRIDGE_AUTHORITY_ROOT_ARRAY_SELECTED=true\nBRIDGE_AUTHORITY_GUEST_RC=1\nPASSWORD_CACHE_REQUIREMENT=WINDOWS_DPAPI_REQUIRED\nMUTATION_BOUNDARY=READ_ONLY_DNS_PINNED_SPB_IDENTITY_DPAPI_SUDO_HELPER_SOURCE;NO_SPB_WRITE;NO_VM130_WRITE;NO_DNS_WRITE;NO_CERT_WRITE;NO_NGINX_WRITE\nDNS_A_CANDIDATE_COUNT=1\nDNS_A_CANDIDATE_SHA16=6d6149f42864ce03\nSPB_PINNED_PROBE_01=HOST_SHA16:6d6149f42864ce03|RC:125|STDERR_SHA16:4089e96b9e0dcd8b\nUNIQUE_PINNED_SPB_MATCH_COUNT=0\nDPAPI_NAME_FILTER_FILE_COUNT=275\nDPAPI_DECRYPTABLE_CANDIDATE=PATH_SHA16:b8eafdb29540ea01|NAME_SHA16:46e753f93ecebd6d|METHOD:SECURESTRING_DPAPI\nDPAPI_DECRYPTABLE_CANDIDATE_COUNT=1\nDPAPI_SUDO_VALIDATION_RC=NOT_RUN_NON_UNIQUE_GATE\nDPAPI_SUDO_VALID_COUNT=0\nSPB_HELPER_READ_PERFORMED=false\nDNS_DPAPI_HELPER_RCA_DECISION=PINNED_SPB_ENDPOINT_NOT_UNIQUE\nDNS_DPAPI_HELPER_RCA_COMPLETE=true\nCHANGES_MADE=NO\nTASK_COMPLETE=true\nTASK_RESULT=PASS_SPB_TLS_BRIDGE_DNS_DPAPI_HELPER_RCA\nDECISION=READ_EXACT_9172_THEN_FIX_ONLY_PROVEN_POSTGUARD_BLOCKER\nNEXT_GATE=EXACT_9172_HELPER_SOURCE_OR_PRECISE_BLOCKER\nHOMELAB_RESULT_CONTRACT={\"version\":1,\"command_id\":\"SUPPORT-260923-SPB-TLS-BRIDGE-DNS-DPAPI-HELPER-RCA-9172R1\",\"status\":\"OK\",\"changes_made\":false,\"rollback_started\":false,\"rollback_restored\":null}\n"
 }

runtime/latest.txt

@@ -1,96 +1,60 @@
 CHAT_OUTPUT_BEGIN
-COMMAND_ID=SUPPORT-260923-PVEPRO-TURNSTILE-CHECKPOINT14-VERIFY-FIX-924R1
+COMMAND_ID=SUPPORT-260923-SPB-TLS-BRIDGE-DNS-DPAPI-HELPER-RCA-9172R1
 STATUS=OK
 RC=0
 HOST=pve01
-MODE=change
-COMPONENT=pvepro-turnstile-checkpoint14-verify-fix
+MODE=read-only
+COMPONENT=spb-tls-bridge-dns-dpapi-helper-rca
 REFERENCE_REGISTER_CHECK=OK
 REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
 ERROR_REGISTER_CHECK=OK
 ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
-COMMAND_SHA256=a7e6607ca08d1ce997fc3d91937f66a953028fbbc202b3eceb9d447038584342
+COMMAND_SHA256=826d0279e196f524f02aa9dbc3949ec857d97dadc210082285c940d65c71d9e4
 DUPLICATE_FAILED_COMMAND_BLOCKED=false
 EXECUTION_STARTED=true
-CHANGE_DECLARED=true
+CHANGE_DECLARED=false
 RESULT_CONTRACT_VALID=true
-RESULT_CONTRACT_STATUS=OK
+RESULT_CONTRACT_STATUS=NOT_APPLICABLE
 RESULT_CONTRACT_ERROR=NONE
 COMMAND_RC=0
-CHANGES_MADE=true
+CHANGES_MADE=false
 ROLLBACK_STARTED=false
 ROLLBACK_RESTORED=null
-MUTATION_OUTCOME=MUTATED
+MUTATION_OUTCOME=NO_MUTATION
 SANITIZED=yes
 SECRETS_INCLUDED=no
 PRIVATE_ADDRESSES_INCLUDED=no
-RAW_EVIDENCE_SHA256=8b18ec43624e5a4d8b10e92282a94385ea5090076b762900d4e40b695030dae7
-SANITIZED_OUTPUT_SHA256=8b18ec43624e5a4d8b10e92282a94385ea5090076b762900d4e40b695030dae7
+RAW_EVIDENCE_SHA256=7208b7ce158a887e31267811c642d771259da36987499cedda1202fca5978cf4
+SANITIZED_OUTPUT_SHA256=7208b7ce158a887e31267811c642d771259da36987499cedda1202fca5978cf4
 OUTPUT_BEGIN
-PVEPRO924_BEGIN=true
-COMMAND_ID=SUPPORT-260923-PVEPRO-TURNSTILE-CHECKPOINT14-VERIFY-FIX-924R1
-MODE=change
-COMPONENT=pvepro-turnstile-checkpoint14-verify-fix
-PREDECESSOR_914=PASS_PVEPRO914_MAIL_CHECKPOINT13
-PREDECESSOR_916=HOLD_PVEPRO916_EXTERNAL_CLOUDFLARE_TURNSTILE_CREDENTIAL_REQUIRED_NO_MUTATION
-PREDECESSOR_920=PASS_PVEPRO920_BACKUP_ARCHIVE_VERIFY_MONITORING
-PREDECESSOR_922=HOLD_PVEPRO922_ALL_SIX_EXISTING_TOKENS_403_TURNSTILE_NO_MUTATION
-PREDECESSOR_923=HOLD_PVEPRO923_VERIFY_FALSE_NEGATIVE_ROLLBACK_PROVEN
-923_PROOF=TOKEN_VALID;ZONE_MATCH1;WIDGET_CREATE200;SITEVERIFY_SECRET_ACCEPTED;APPLY_EXIT0;PROVIDER_TURNSTILE;SITE_AND_SECRET_HASHES_MATCH;ROLLBACK_RESTORED
-923_RCA=SHELL_EXPECTED_HASH_USED_JQ_NEWLINE;924_VERIFY_COMPARES_EXACT_BASE64_DECODED_VALUES
-922_PROOF=ALL_6_TOKENS_VALID;PVEPro_ACCOUNT_RESOLVED;ALL_6_TURNSTILE_CREATE_HTTP403_CODE10000
-TOKEN_REQUIREMENT=NEW_CUSTOM_TOKEN_WITH_ACCOUNT_TURNSTILE_SITES_EDIT_AND_ZONE_ZONE_READ_FOR_PVEPRO_RU
-TOKEN_SOURCE=LOCAL_WINDOWS_INTERACTIVE_SECURE_INPUT
-TOKEN_PERSISTENCE=NONE;ROOT_ONLY_TRANSIENT_FILE_DURING_RUN
-MUTATION_BOUNDARY=CREATE_DEDICATED_CLOUDFLARE_TURNSTILE_WIDGET;VM100_OPTIONS_CAPTCHA_AND_EXTRA_CAPTCHA_KEYS;NO_REGISTRATION_ENABLE;NO_MAIL;NO_VM_CONFIG;NO_BACKUP;NO_EDGE_CONFIG
-REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
-ERROR_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
-PROD_AGENT_RC=0
-PRE_TRANSPORT_RC=0
-PRE_GUEST|exited=1|exitcode=0
-XENFORO_CAPTCHA_PRE|provider=HCaptcha|captcha_sha=6fce54e29ddafccfe8f0400290ce24b406e0db36dd6d20f63bf05fe03b461200|extra_sha=35786c7117b4e38d0f169239752ce71158266ae2f6e4aa230fbbb87bd699c0e3|turn_site_present=false|turn_secret_present=false
-CF_TOKEN_VERIFY_HTTP=200
-CF_TOKEN_VERIFY_SUCCESS=true
-CF_ZONE_LOOKUP_HTTP=200
-CF_ZONE_MATCH_COUNT=1
-CF_ACCOUNT_SHA256=49ace22b1853724543e1b3b00f02d6a03acd8bd4f9046f8cf5c3c9b6343984f3
-CF_WIDGET_CREATE_HTTP=200
-CF_SITEVERIFY_SECRET_ACCEPTED=true
-CF_SITEVERIFY_ERROR_CLASS=invalid-input-response
-CF_WIDGET_CREATED=true
-CF_SITEKEY_SHA256=404ffad0b3feda5d363aa62cfed1ff02108830c51c448c9f146d876773d6415c
-CF_SECRET_SHA256=27dcc369aca7a89650a00f7dff0db8bfc56ec96a4609ea83466878ec47da6af3
-CF_SETUP_RC=0
-APPLY_TRANSPORT_RC=0
-APPLY_GUEST|exited=1|exitcode=0
-TURNSTILE_APPLY|site_sha=404ffad0b3feda5d363aa62cfed1ff02108830c51c448c9f146d876773d6415c|secret_sha=27dcc369aca7a89650a00f7dff0db8bfc56ec96a4609ea83466878ec47da6af3
-VERIFY_TRANSPORT_RC=0
-VERIFY_GUEST|exited=1|exitcode=0
-TURNSTILE_VERIFY|provider=Turnstile|site_exact=true|secret_exact=true|site_sha=404ffad0b3feda5d363aa62cfed1ff02108830c51c448c9f146d876773d6415c|expected_site_sha=404ffad0b3feda5d363aa62cfed1ff02108830c51c448c9f146d876773d6415c|secret_sha=27dcc369aca7a89650a00f7dff0db8bfc56ec96a4609ea83466878ec47da6af3|expected_secret_sha=27dcc369aca7a89650a00f7dff0db8bfc56ec96a4609ea83466878ec47da6af3|extra_sha=4787b2f512d6a64470ef9473c034f137e876f6347bd5910b962e3f9acb9edb17
-PUBLIC_SUPPORT_TURNSTILE|curl_rc=0|http=200|rendered=true|bytes=28933
-CLEANUP_TRANSPORT_RC=0
-CLEANUP_GUEST|exited=1|exitcode=0
-CHECKPOINT14_TURNSTILE_COMPLETE=true
-CHECKPOINT14_OPEN=false
-REGISTRATION_PUBLIC_LAUNCH_OPEN=true
-FINAL_CLOSURE_OPEN=true
-PRODUCT_CHECKPOINTS_REMAINING=2
-DECISION=PASS_PVEPRO924_TURNSTILE_CHECKPOINT14
-NEXT_GATE=REGISTRATION_PUBLIC_LAUNCH
-TASK_RESULT=PASS_PVEPRO_TURNSTILE_CHECKPOINT14
-CHANGES_MADE_BY_924=true
-CLOUDFLARE_WIDGET_CREATED_BY_924=true
-XENFORO_OPTION_MUTATION_ATTEMPTED_BY_924=true
-XENFORO_OPTION_MUTATION_COMPLETED_BY_924=true
-REGISTRATION_MUTATION_BY_924=false
-MAIL_MUTATION_BY_924=false
-VM_CONFIG_MUTATION_BY_924=false
-BACKUP_MUTATION_BY_924=false
-EDGE_CONFIG_MUTATION_BY_924=false
-ROLLBACK_STARTED=false
-ROLLBACK_RESTORED=null
-HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"SUPPORT-260923-PVEPRO-TURNSTILE-CHECKPOINT14-VERIFY-FIX-924R1","status":"OK","changes_made":true,"rollback_started":false,"rollback_restored":null}
-PVEPRO924_END=true
+DNS_DPAPI_HELPER_RCA_BEGIN=true
+PREDECESSOR=SUPPORT-260923-SPB-TLS-BRIDGE-PUTTY-ENDPOINT-RCA-9171R1
+PREDECESSOR_STATUS=OK
+PREDECESSOR_CHANGES_MADE=false
+ROLLBACK_FORENSIC_9148R3=ROLLBACK_CLEAN_BASELINE_OK
+BRIDGE_AUTHORITY=SUPPORT-260923-SPB-TLS-BRIDGE-EXEC-9164R1
+BRIDGE_AUTHORITY_ROOT_ARRAY_SELECTED=true
+BRIDGE_AUTHORITY_GUEST_RC=1
+PASSWORD_CACHE_REQUIREMENT=WINDOWS_DPAPI_REQUIRED
+MUTATION_BOUNDARY=READ_ONLY_DNS_PINNED_SPB_IDENTITY_DPAPI_SUDO_HELPER_SOURCE;NO_SPB_WRITE;NO_VM130_WRITE;NO_DNS_WRITE;NO_CERT_WRITE;NO_NGINX_WRITE
+DNS_A_CANDIDATE_COUNT=1
+DNS_A_CANDIDATE_SHA16=6d6149f42864ce03
+SPB_PINNED_PROBE_01=HOST_SHA16:6d6149f42864ce03|RC:125|STDERR_SHA16:4089e96b9e0dcd8b
+UNIQUE_PINNED_SPB_MATCH_COUNT=0
+DPAPI_NAME_FILTER_FILE_COUNT=275
+DPAPI_DECRYPTABLE_CANDIDATE=PATH_SHA16:b8eafdb29540ea01|NAME_SHA16:46e753f93ecebd6d|METHOD:SECURESTRING_DPAPI
+DPAPI_DECRYPTABLE_CANDIDATE_COUNT=1
+DPAPI_SUDO_VALIDATION_RC=NOT_RUN_NON_UNIQUE_GATE
+DPAPI_SUDO_VALID_COUNT=0
+SPB_HELPER_READ_PERFORMED=false
+DNS_DPAPI_HELPER_RCA_DECISION=PINNED_SPB_ENDPOINT_NOT_UNIQUE
+DNS_DPAPI_HELPER_RCA_COMPLETE=true
+CHANGES_MADE=NO
+TASK_COMPLETE=true
+TASK_RESULT=PASS_SPB_TLS_BRIDGE_DNS_DPAPI_HELPER_RCA
+DECISION=READ_EXACT_9172_THEN_FIX_ONLY_PROVEN_POSTGUARD_BLOCKER
+NEXT_GATE=EXACT_9172_HELPER_SOURCE_OR_PRECISE_BLOCKER
+HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"SUPPORT-260923-SPB-TLS-BRIDGE-DNS-DPAPI-HELPER-RCA-9172R1","status":"OK","changes_made":false,"rollback_started":false,"rollback_restored":null}
 
 OUTPUT_END
 CHAT_OUTPUT_END