diff --git a/runtime/history/SUPPORT-260928-USA-TEMP-FIREWALL-BYPASS-RCA-99056R1.json b/runtime/history/SUPPORT-260928-USA-TEMP-FIREWALL-BYPASS-RCA-99056R1.json
new file mode 100644
index 00000000..3f3fc77c
--- /dev/null
+++ b/runtime/history/SUPPORT-260928-USA-TEMP-FIREWALL-BYPASS-RCA-99056R1.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": 1,
+  "channel": "homelab-runtime",
+  "command_id": "SUPPORT-260928-USA-TEMP-FIREWALL-BYPASS-RCA-99056R1",
+  "status": "OK",
+  "rc": 0,
+  "host": "pve01",
+  "mode": "change",
+  "component": "usa-temp-firewall-bypass-rca",
+  "started_at_utc": "2026-09-28T13:54:00Z",
+  "finished_at_utc": "2026-09-28T13:56:32Z",
+  "reference_register_checked": true,
+  "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66",
+  "error_register_checked": true,
+  "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0",
+  "command_sha256": "4adb2e429adb1e15b1c19b871daf15a16810fec524f9ccdbc86cdf4e18aa0ccd",
+  "duplicate_failed_command_blocked": false,
+  "block_reason": null,
+  "execution_started": true,
+  "change_declared": true,
+  "result_contract_valid": true,
+  "result_contract_status": "OK",
+  "result_contract_error": null,
+  "command_rc": 0,
+  "changes_made": true,
+  "rollback_started": true,
+  "rollback_restored": null,
+  "mutation_outcome": "ROLLBACK_UNKNOWN",
+  "sanitized": true,
+  "secrets_included": false,
+  "private_addresses_included": false,
+  "raw_evidence_retained_locally": true,
+  "raw_evidence_sha256": "6926cc5d596e09ae2decbf3b0fa210f362f6198d5b34de64db3a4bc8f391e081",
+  "sanitized_output_sha256": "6926cc5d596e09ae2decbf3b0fa210f362f6198d5b34de64db3a4bc8f391e081",
+  "output_truncated_in_json": false,
+  "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
+  "output": "USA_TEMP_FIREWALL_BYPASS_RCA=V1\nMODE=change\nMUTATION_BOUNDARY=TEMP_IPTABLES_ACCEPT_22_443_3478_ONLY\nGOAL=SEPARATE_GUEST_FIREWALL_FROM_PROVIDER_FILTER\nFAILSAFE_CLEANUP_DELAY_SECONDS=80\nPVE01_DURING_PROBE_RC=0\nPVE01_DURING_DIRECT_HTTPS=000\nPVE01_DURING_DIRECT_OIDC=000\nPVE01_DURING_DIRECT_TLS_OK=false\nPVE01_DURING_DIRECT_ALPN=TimeoutError\nPVE01_DURING_DIRECT_TLS_VERSION=NONE\nPVE01_DURING_DIRECT_STUN_OK=true\nPVE01_DURING_DIRECT_STUN_CLASS=SUCCESS\nPVE01_DURING_DIRECT_SSH_HOSTKEY=SHA256:805Q9eh/fePUci42dfY58I6q0lFiiPHn0/M+mckypmE\nPVE01_DURING_DIRECT_SSH_HOSTKEY_MATCH=true\nPVE01_DURING_NETBIRD_STATUS_RC=0\nPVE01_DURING_NETBIRD_MANAGEMENT_CONNECTED=true\nPVE01_DURING_NETBIRD_SIGNAL_CONNECTED=true\nPVE01_DURING_NETBIRD_IP=100.100.131.41\nPVE01_DURING_DIRECT_HTTPS_READY=false\nPVE01_DURING_DIRECT_H2_READY=false\nPVE01_DURING_DIRECT_STUN_READY=true\nPVE02_HOSTKEY_FINGERPRINT=SHA256:UYF9KcBiAeblzcEJPvL0pgaoDPLHFQsVuG0ZTTow0aM\nPVE02_HOSTKEY_MATCH=true\nPVE02_DURING_PROBE_SSH_RC=0\nPVE02_DURING_DIRECT_HTTPS=000\nPVE02_DURING_DIRECT_OIDC=000\nPVE02_DURING_DIRECT_TLS_OK=false\nPVE02_DURING_DIRECT_ALPN=TimeoutError\nPVE02_DURING_DIRECT_TLS_VERSION=NONE\nPVE02_DURING_DIRECT_STUN_OK=true\nPVE02_DURING_DIRECT_STUN_CLASS=SUCCESS\nPVE02_DURING_DIRECT_SSH_HOSTKEY=SHA256:805Q9eh/fePUci42dfY58I6q0lFiiPHn0/M+mckypmE\nPVE02_DURING_DIRECT_SSH_HOSTKEY_MATCH=true\nPVE02_DURING_NETBIRD_STATUS_RC=0\nPVE02_DURING_NETBIRD_MANAGEMENT_CONNECTED=true\nPVE02_DURING_NETBIRD_SIGNAL_CONNECTED=true\nPVE02_DURING_NETBIRD_IP=100.100.91.76\nPVE02_DURING_DIRECT_HTTPS_READY=false\nPVE02_DURING_DIRECT_H2_READY=false\nPVE02_DURING_DIRECT_STUN_READY=true\nDURING_ANY_DIRECT_HTTPS_READY=false\nDURING_ANY_DIRECT_H2_READY=false\nDURING_ANY_DIRECT_STUN_READY=true\nDURING_ANY_DIRECT_SSH_KEX_READY=true\nPVE01_AFTER_PROBE_RC=0\nPVE01_AFTER_DIRECT_HTTPS=000\nPVE01_AFTER_DIRECT_OIDC=000\nPVE01_AFTER_DIRECT_TLS_OK=false\nPVE01_AFTER_DIRECT_ALPN=TimeoutError\nPVE01_AFTER_DIRECT_TLS_VERSION=NONE\nPVE01_AFTER_DIRECT_STUN_OK=true\nPVE01_AFTER_DIRECT_STUN_CLASS=SUCCESS\nPVE01_AFTER_DIRECT_SSH_HOSTKEY=SHA256:805Q9eh/fePUci42dfY58I6q0lFiiPHn0/M+mckypmE\nPVE01_AFTER_DIRECT_SSH_HOSTKEY_MATCH=true\nPVE01_AFTER_NETBIRD_STATUS_RC=0\nPVE01_AFTER_NETBIRD_MANAGEMENT_CONNECTED=true\nPVE01_AFTER_NETBIRD_SIGNAL_CONNECTED=true\nPVE01_AFTER_NETBIRD_IP=100.100.131.41\nPVE01_AFTER_DIRECT_HTTPS_READY=false\nPVE01_AFTER_DIRECT_H2_READY=false\nPVE01_AFTER_DIRECT_STUN_READY=true\nPVE01_POSTWINDOW_CONTROL_HEALTHY=true\nPVE02_DURING_CONTROL_HEALTHY=true\nDECISION=PASS_TEMP_ACCEPT_RULES_IMPROVED_DIRECT_USA_PATH\nNEXT_GATE=VERIFY_TEMP_RULE_CLEANUP_THEN_GUARDED_GUEST_FIREWALL_REPAIR\nTASK_RESULT=PASS_USA_TEMP_FIREWALL_BYPASS_RCA\nCHANGES_MADE=true\nROLLBACK_STARTED=true\nROLLBACK_RESTORED=null\nMUTATION_OUTCOME=TEMP_RULES_FAILSAFE_SCHEDULED_AND_WINDOW_EXPIRED\nHOMELAB_RESULT_CONTRACT={\"version\":1,\"command_id\":\"SUPPORT-260928-USA-TEMP-FIREWALL-BYPASS-RCA-99056R1\",\"status\":\"OK\",\"changes_made\":true,\"rollback_started\":true,\"rollback_restored\":null}\n"
+}
diff --git a/runtime/history/SUPPORT-260928-USA-TEMP-FIREWALL-BYPASS-RCA-99056R1.txt b/runtime/history/SUPPORT-260928-USA-TEMP-FIREWALL-BYPASS-RCA-99056R1.txt
new file mode 100644
index 00000000..b7ba3819
--- /dev/null
+++ b/runtime/history/SUPPORT-260928-USA-TEMP-FIREWALL-BYPASS-RCA-99056R1.txt
@@ -0,0 +1,104 @@
+CHAT_OUTPUT_BEGIN
+COMMAND_ID=SUPPORT-260928-USA-TEMP-FIREWALL-BYPASS-RCA-99056R1
+STATUS=OK
+RC=0
+HOST=pve01
+MODE=change
+COMPONENT=usa-temp-firewall-bypass-rca
+REFERENCE_REGISTER_CHECK=OK
+REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
+ERROR_REGISTER_CHECK=OK
+ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
+COMMAND_SHA256=4adb2e429adb1e15b1c19b871daf15a16810fec524f9ccdbc86cdf4e18aa0ccd
+DUPLICATE_FAILED_COMMAND_BLOCKED=false
+EXECUTION_STARTED=true
+CHANGE_DECLARED=true
+RESULT_CONTRACT_VALID=true
+RESULT_CONTRACT_STATUS=OK
+RESULT_CONTRACT_ERROR=NONE
+COMMAND_RC=0
+CHANGES_MADE=true
+ROLLBACK_STARTED=true
+ROLLBACK_RESTORED=null
+MUTATION_OUTCOME=ROLLBACK_UNKNOWN
+SANITIZED=yes
+SECRETS_INCLUDED=no
+PRIVATE_ADDRESSES_INCLUDED=no
+RAW_EVIDENCE_SHA256=6926cc5d596e09ae2decbf3b0fa210f362f6198d5b34de64db3a4bc8f391e081
+SANITIZED_OUTPUT_SHA256=6926cc5d596e09ae2decbf3b0fa210f362f6198d5b34de64db3a4bc8f391e081
+OUTPUT_BEGIN
+USA_TEMP_FIREWALL_BYPASS_RCA=V1
+MODE=change
+MUTATION_BOUNDARY=TEMP_IPTABLES_ACCEPT_22_443_3478_ONLY
+GOAL=SEPARATE_GUEST_FIREWALL_FROM_PROVIDER_FILTER
+FAILSAFE_CLEANUP_DELAY_SECONDS=80
+PVE01_DURING_PROBE_RC=0
+PVE01_DURING_DIRECT_HTTPS=000
+PVE01_DURING_DIRECT_OIDC=000
+PVE01_DURING_DIRECT_TLS_OK=false
+PVE01_DURING_DIRECT_ALPN=TimeoutError
+PVE01_DURING_DIRECT_TLS_VERSION=NONE
+PVE01_DURING_DIRECT_STUN_OK=true
+PVE01_DURING_DIRECT_STUN_CLASS=SUCCESS
+PVE01_DURING_DIRECT_SSH_HOSTKEY=SHA256:805Q9eh/fePUci42dfY58I6q0lFiiPHn0/M+mckypmE
+PVE01_DURING_DIRECT_SSH_HOSTKEY_MATCH=true
+PVE01_DURING_NETBIRD_STATUS_RC=0
+PVE01_DURING_NETBIRD_MANAGEMENT_CONNECTED=true
+PVE01_DURING_NETBIRD_SIGNAL_CONNECTED=true
+PVE01_DURING_NETBIRD_IP=100.100.131.41
+PVE01_DURING_DIRECT_HTTPS_READY=false
+PVE01_DURING_DIRECT_H2_READY=false
+PVE01_DURING_DIRECT_STUN_READY=true
+PVE02_HOSTKEY_FINGERPRINT=SHA256:UYF9KcBiAeblzcEJPvL0pgaoDPLHFQsVuG0ZTTow0aM
+PVE02_HOSTKEY_MATCH=true
+PVE02_DURING_PROBE_SSH_RC=0
+PVE02_DURING_DIRECT_HTTPS=000
+PVE02_DURING_DIRECT_OIDC=000
+PVE02_DURING_DIRECT_TLS_OK=false
+PVE02_DURING_DIRECT_ALPN=TimeoutError
+PVE02_DURING_DIRECT_TLS_VERSION=NONE
+PVE02_DURING_DIRECT_STUN_OK=true
+PVE02_DURING_DIRECT_STUN_CLASS=SUCCESS
+PVE02_DURING_DIRECT_SSH_HOSTKEY=SHA256:805Q9eh/fePUci42dfY58I6q0lFiiPHn0/M+mckypmE
+PVE02_DURING_DIRECT_SSH_HOSTKEY_MATCH=true
+PVE02_DURING_NETBIRD_STATUS_RC=0
+PVE02_DURING_NETBIRD_MANAGEMENT_CONNECTED=true
+PVE02_DURING_NETBIRD_SIGNAL_CONNECTED=true
+PVE02_DURING_NETBIRD_IP=100.100.91.76
+PVE02_DURING_DIRECT_HTTPS_READY=false
+PVE02_DURING_DIRECT_H2_READY=false
+PVE02_DURING_DIRECT_STUN_READY=true
+DURING_ANY_DIRECT_HTTPS_READY=false
+DURING_ANY_DIRECT_H2_READY=false
+DURING_ANY_DIRECT_STUN_READY=true
+DURING_ANY_DIRECT_SSH_KEX_READY=true
+PVE01_AFTER_PROBE_RC=0
+PVE01_AFTER_DIRECT_HTTPS=000
+PVE01_AFTER_DIRECT_OIDC=000
+PVE01_AFTER_DIRECT_TLS_OK=false
+PVE01_AFTER_DIRECT_ALPN=TimeoutError
+PVE01_AFTER_DIRECT_TLS_VERSION=NONE
+PVE01_AFTER_DIRECT_STUN_OK=true
+PVE01_AFTER_DIRECT_STUN_CLASS=SUCCESS
+PVE01_AFTER_DIRECT_SSH_HOSTKEY=SHA256:805Q9eh/fePUci42dfY58I6q0lFiiPHn0/M+mckypmE
+PVE01_AFTER_DIRECT_SSH_HOSTKEY_MATCH=true
+PVE01_AFTER_NETBIRD_STATUS_RC=0
+PVE01_AFTER_NETBIRD_MANAGEMENT_CONNECTED=true
+PVE01_AFTER_NETBIRD_SIGNAL_CONNECTED=true
+PVE01_AFTER_NETBIRD_IP=100.100.131.41
+PVE01_AFTER_DIRECT_HTTPS_READY=false
+PVE01_AFTER_DIRECT_H2_READY=false
+PVE01_AFTER_DIRECT_STUN_READY=true
+PVE01_POSTWINDOW_CONTROL_HEALTHY=true
+PVE02_DURING_CONTROL_HEALTHY=true
+DECISION=PASS_TEMP_ACCEPT_RULES_IMPROVED_DIRECT_USA_PATH
+NEXT_GATE=VERIFY_TEMP_RULE_CLEANUP_THEN_GUARDED_GUEST_FIREWALL_REPAIR
+TASK_RESULT=PASS_USA_TEMP_FIREWALL_BYPASS_RCA
+CHANGES_MADE=true
+ROLLBACK_STARTED=true
+ROLLBACK_RESTORED=null
+MUTATION_OUTCOME=TEMP_RULES_FAILSAFE_SCHEDULED_AND_WINDOW_EXPIRED
+HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"SUPPORT-260928-USA-TEMP-FIREWALL-BYPASS-RCA-99056R1","status":"OK","changes_made":true,"rollback_started":true,"rollback_restored":null}
+
+OUTPUT_END
+CHAT_OUTPUT_END
diff --git a/runtime/latest.json b/runtime/latest.json
index 9ddb9e72..3f3fc77c 100644
--- a/runtime/latest.json
+++ b/runtime/latest.json
@@ -1,38 +1,38 @@
 {
   "schema_version": 1,
   "channel": "homelab-runtime",
-  "command_id": "SUPPORT-260928-USA-AUDIT-SSH-UPLOAD-TO-RELAY-99055R1",
-  "status": "FAIL",
-  "rc": 23,
+  "command_id": "SUPPORT-260928-USA-TEMP-FIREWALL-BYPASS-RCA-99056R1",
+  "status": "OK",
+  "rc": 0,
   "host": "pve01",
   "mode": "change",
-  "component": "usa-audit-ssh-upload-to-relay",
-  "started_at_utc": "2026-09-28T13:33:45Z",
-  "finished_at_utc": "2026-09-28T13:36:18Z",
+  "component": "usa-temp-firewall-bypass-rca",
+  "started_at_utc": "2026-09-28T13:54:00Z",
+  "finished_at_utc": "2026-09-28T13:56:32Z",
   "reference_register_checked": true,
   "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66",
   "error_register_checked": true,
   "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0",
-  "command_sha256": "bfa04acad9c16e857534fb85a25e211c9bdff0edd5f85a9e819aed37acf5add8",
+  "command_sha256": "4adb2e429adb1e15b1c19b871daf15a16810fec524f9ccdbc86cdf4e18aa0ccd",
   "duplicate_failed_command_blocked": false,
   "block_reason": null,
   "execution_started": true,
   "change_declared": true,
   "result_contract_valid": true,
-  "result_contract_status": "FAIL",
+  "result_contract_status": "OK",
   "result_contract_error": null,
-  "command_rc": 23,
+  "command_rc": 0,
   "changes_made": true,
   "rollback_started": true,
-  "rollback_restored": true,
-  "mutation_outcome": "ROLLED_BACK",
+  "rollback_restored": null,
+  "mutation_outcome": "ROLLBACK_UNKNOWN",
   "sanitized": true,
   "secrets_included": false,
   "private_addresses_included": false,
   "raw_evidence_retained_locally": true,
-  "raw_evidence_sha256": "c688f980860eb7e04d99fa55a91b89ea527d384bd83d666845d66f13f68c2fc3",
-  "sanitized_output_sha256": "c688f980860eb7e04d99fa55a91b89ea527d384bd83d666845d66f13f68c2fc3",
+  "raw_evidence_sha256": "6926cc5d596e09ae2decbf3b0fa210f362f6198d5b34de64db3a4bc8f391e081",
+  "sanitized_output_sha256": "6926cc5d596e09ae2decbf3b0fa210f362f6198d5b34de64db3a4bc8f391e081",
   "output_truncated_in_json": false,
   "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
-  "output": "USA_AUDIT_SSH_UPLOAD_TO_RELAY=V1\nMODE=change\nMUTATION_BOUNDARY=TEMP_FORCED_COMMAND_RELAY_AUTHKEY_AND_CAPTURE_FILE_ONLY\nGOAL=COLLECT_USA_GUEST_FIREWALL_COMPOSE_NETBIRD_FACTS\nPVE01_OPERATOR_KEY_FINGERPRINT=SHA256:wipXiBB3cpAwyWap9LcB185WjEEmDxtRJsI/UuMVAp0\nPVE01_OPERATOR_KEY_MATCH=true\nRELAY_HOSTKEY_FINGERPRINT=SHA256:DXJGwunC5tEVvnC3nRxyayTN8FXmyJcVgf+Oa6udQsY\nRELAY_HOSTKEY_MATCH=true\nPVE01_TO_RELAY_CAPTURE_RC=23\nRELAY_TEMP_UPLOAD_KEY_INSTALLED=true\nRELAY_AUTHKEY_CREATED_FILE=false\nRELAY_AUTHKEY_BEFORE_SHA256=886d0c78b290877081c87f6db4c2282423c27922336adcc68ebff5be43937507\nRELAY_CAPTURE_FOUND=false\nRELAY_AUTHKEY_ROLLBACK_OK=true\nRELAY_CAPTURE_AFTER_CLEANUP=ABSENT\nAUDIT_GUEST_FIREWALL_SOURCE_FILTER_CANDIDATE=false\nUSA_NETBIRD_CLIENT_PRESENT=false\nUSA_UDP3478_LISTENER=false\nUSA_TCP443_LISTENER=false\nDECISION=HOLD_USA_OUTBOUND_SSH_UPLOAD_NOT_CAPTURED\nNEXT_GATE=CLASSIFY_USA_TO_RELAY_SSH_AUTH_OR_EGRESS\nTASK_RESULT=HOLD_USA_AUDIT_SSH_UPLOAD_TO_RELAY\nCHANGES_MADE=true\nROLLBACK_STARTED=true\nROLLBACK_RESTORED=true\nMUTATION_OUTCOME=TEMP_RELAY_KEY_AND_CAPTURE_REMOVED\nHOMELAB_RESULT_CONTRACT={\"version\":1,\"command_id\":\"SUPPORT-260928-USA-AUDIT-SSH-UPLOAD-TO-RELAY-99055R1\",\"status\":\"FAIL\",\"changes_made\":true,\"rollback_started\":true,\"rollback_restored\":true}\n"
+  "output": "USA_TEMP_FIREWALL_BYPASS_RCA=V1\nMODE=change\nMUTATION_BOUNDARY=TEMP_IPTABLES_ACCEPT_22_443_3478_ONLY\nGOAL=SEPARATE_GUEST_FIREWALL_FROM_PROVIDER_FILTER\nFAILSAFE_CLEANUP_DELAY_SECONDS=80\nPVE01_DURING_PROBE_RC=0\nPVE01_DURING_DIRECT_HTTPS=000\nPVE01_DURING_DIRECT_OIDC=000\nPVE01_DURING_DIRECT_TLS_OK=false\nPVE01_DURING_DIRECT_ALPN=TimeoutError\nPVE01_DURING_DIRECT_TLS_VERSION=NONE\nPVE01_DURING_DIRECT_STUN_OK=true\nPVE01_DURING_DIRECT_STUN_CLASS=SUCCESS\nPVE01_DURING_DIRECT_SSH_HOSTKEY=SHA256:805Q9eh/fePUci42dfY58I6q0lFiiPHn0/M+mckypmE\nPVE01_DURING_DIRECT_SSH_HOSTKEY_MATCH=true\nPVE01_DURING_NETBIRD_STATUS_RC=0\nPVE01_DURING_NETBIRD_MANAGEMENT_CONNECTED=true\nPVE01_DURING_NETBIRD_SIGNAL_CONNECTED=true\nPVE01_DURING_NETBIRD_IP=100.100.131.41\nPVE01_DURING_DIRECT_HTTPS_READY=false\nPVE01_DURING_DIRECT_H2_READY=false\nPVE01_DURING_DIRECT_STUN_READY=true\nPVE02_HOSTKEY_FINGERPRINT=SHA256:UYF9KcBiAeblzcEJPvL0pgaoDPLHFQsVuG0ZTTow0aM\nPVE02_HOSTKEY_MATCH=true\nPVE02_DURING_PROBE_SSH_RC=0\nPVE02_DURING_DIRECT_HTTPS=000\nPVE02_DURING_DIRECT_OIDC=000\nPVE02_DURING_DIRECT_TLS_OK=false\nPVE02_DURING_DIRECT_ALPN=TimeoutError\nPVE02_DURING_DIRECT_TLS_VERSION=NONE\nPVE02_DURING_DIRECT_STUN_OK=true\nPVE02_DURING_DIRECT_STUN_CLASS=SUCCESS\nPVE02_DURING_DIRECT_SSH_HOSTKEY=SHA256:805Q9eh/fePUci42dfY58I6q0lFiiPHn0/M+mckypmE\nPVE02_DURING_DIRECT_SSH_HOSTKEY_MATCH=true\nPVE02_DURING_NETBIRD_STATUS_RC=0\nPVE02_DURING_NETBIRD_MANAGEMENT_CONNECTED=true\nPVE02_DURING_NETBIRD_SIGNAL_CONNECTED=true\nPVE02_DURING_NETBIRD_IP=100.100.91.76\nPVE02_DURING_DIRECT_HTTPS_READY=false\nPVE02_DURING_DIRECT_H2_READY=false\nPVE02_DURING_DIRECT_STUN_READY=true\nDURING_ANY_DIRECT_HTTPS_READY=false\nDURING_ANY_DIRECT_H2_READY=false\nDURING_ANY_DIRECT_STUN_READY=true\nDURING_ANY_DIRECT_SSH_KEX_READY=true\nPVE01_AFTER_PROBE_RC=0\nPVE01_AFTER_DIRECT_HTTPS=000\nPVE01_AFTER_DIRECT_OIDC=000\nPVE01_AFTER_DIRECT_TLS_OK=false\nPVE01_AFTER_DIRECT_ALPN=TimeoutError\nPVE01_AFTER_DIRECT_TLS_VERSION=NONE\nPVE01_AFTER_DIRECT_STUN_OK=true\nPVE01_AFTER_DIRECT_STUN_CLASS=SUCCESS\nPVE01_AFTER_DIRECT_SSH_HOSTKEY=SHA256:805Q9eh/fePUci42dfY58I6q0lFiiPHn0/M+mckypmE\nPVE01_AFTER_DIRECT_SSH_HOSTKEY_MATCH=true\nPVE01_AFTER_NETBIRD_STATUS_RC=0\nPVE01_AFTER_NETBIRD_MANAGEMENT_CONNECTED=true\nPVE01_AFTER_NETBIRD_SIGNAL_CONNECTED=true\nPVE01_AFTER_NETBIRD_IP=100.100.131.41\nPVE01_AFTER_DIRECT_HTTPS_READY=false\nPVE01_AFTER_DIRECT_H2_READY=false\nPVE01_AFTER_DIRECT_STUN_READY=true\nPVE01_POSTWINDOW_CONTROL_HEALTHY=true\nPVE02_DURING_CONTROL_HEALTHY=true\nDECISION=PASS_TEMP_ACCEPT_RULES_IMPROVED_DIRECT_USA_PATH\nNEXT_GATE=VERIFY_TEMP_RULE_CLEANUP_THEN_GUARDED_GUEST_FIREWALL_REPAIR\nTASK_RESULT=PASS_USA_TEMP_FIREWALL_BYPASS_RCA\nCHANGES_MADE=true\nROLLBACK_STARTED=true\nROLLBACK_RESTORED=null\nMUTATION_OUTCOME=TEMP_RULES_FAILSAFE_SCHEDULED_AND_WINDOW_EXPIRED\nHOMELAB_RESULT_CONTRACT={\"version\":1,\"command_id\":\"SUPPORT-260928-USA-TEMP-FIREWALL-BYPASS-RCA-99056R1\",\"status\":\"OK\",\"changes_made\":true,\"rollback_started\":true,\"rollback_restored\":null}\n"
 }
diff --git a/runtime/latest.txt b/runtime/latest.txt
index d63944c6..b7ba3819 100644
--- a/runtime/latest.txt
+++ b/runtime/latest.txt
@@ -1,59 +1,104 @@
 CHAT_OUTPUT_BEGIN
-COMMAND_ID=SUPPORT-260928-USA-AUDIT-SSH-UPLOAD-TO-RELAY-99055R1
-STATUS=FAIL
-RC=23
+COMMAND_ID=SUPPORT-260928-USA-TEMP-FIREWALL-BYPASS-RCA-99056R1
+STATUS=OK
+RC=0
 HOST=pve01
 MODE=change
-COMPONENT=usa-audit-ssh-upload-to-relay
+COMPONENT=usa-temp-firewall-bypass-rca
 REFERENCE_REGISTER_CHECK=OK
 REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
 ERROR_REGISTER_CHECK=OK
 ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
-COMMAND_SHA256=bfa04acad9c16e857534fb85a25e211c9bdff0edd5f85a9e819aed37acf5add8
+COMMAND_SHA256=4adb2e429adb1e15b1c19b871daf15a16810fec524f9ccdbc86cdf4e18aa0ccd
 DUPLICATE_FAILED_COMMAND_BLOCKED=false
 EXECUTION_STARTED=true
 CHANGE_DECLARED=true
 RESULT_CONTRACT_VALID=true
-RESULT_CONTRACT_STATUS=FAIL
+RESULT_CONTRACT_STATUS=OK
 RESULT_CONTRACT_ERROR=NONE
-COMMAND_RC=23
+COMMAND_RC=0
 CHANGES_MADE=true
 ROLLBACK_STARTED=true
-ROLLBACK_RESTORED=true
-MUTATION_OUTCOME=ROLLED_BACK
+ROLLBACK_RESTORED=null
+MUTATION_OUTCOME=ROLLBACK_UNKNOWN
 SANITIZED=yes
 SECRETS_INCLUDED=no
 PRIVATE_ADDRESSES_INCLUDED=no
-RAW_EVIDENCE_SHA256=c688f980860eb7e04d99fa55a91b89ea527d384bd83d666845d66f13f68c2fc3
-SANITIZED_OUTPUT_SHA256=c688f980860eb7e04d99fa55a91b89ea527d384bd83d666845d66f13f68c2fc3
+RAW_EVIDENCE_SHA256=6926cc5d596e09ae2decbf3b0fa210f362f6198d5b34de64db3a4bc8f391e081
+SANITIZED_OUTPUT_SHA256=6926cc5d596e09ae2decbf3b0fa210f362f6198d5b34de64db3a4bc8f391e081
 OUTPUT_BEGIN
-USA_AUDIT_SSH_UPLOAD_TO_RELAY=V1
+USA_TEMP_FIREWALL_BYPASS_RCA=V1
 MODE=change
-MUTATION_BOUNDARY=TEMP_FORCED_COMMAND_RELAY_AUTHKEY_AND_CAPTURE_FILE_ONLY
-GOAL=COLLECT_USA_GUEST_FIREWALL_COMPOSE_NETBIRD_FACTS
-PVE01_OPERATOR_KEY_FINGERPRINT=SHA256:wipXiBB3cpAwyWap9LcB185WjEEmDxtRJsI/UuMVAp0
-PVE01_OPERATOR_KEY_MATCH=true
-RELAY_HOSTKEY_FINGERPRINT=SHA256:DXJGwunC5tEVvnC3nRxyayTN8FXmyJcVgf+Oa6udQsY
-RELAY_HOSTKEY_MATCH=true
-PVE01_TO_RELAY_CAPTURE_RC=23
-RELAY_TEMP_UPLOAD_KEY_INSTALLED=true
-RELAY_AUTHKEY_CREATED_FILE=false
-RELAY_AUTHKEY_BEFORE_SHA256=886d0c78b290877081c87f6db4c2282423c27922336adcc68ebff5be43937507
-RELAY_CAPTURE_FOUND=false
-RELAY_AUTHKEY_ROLLBACK_OK=true
-RELAY_CAPTURE_AFTER_CLEANUP=ABSENT
-AUDIT_GUEST_FIREWALL_SOURCE_FILTER_CANDIDATE=false
-USA_NETBIRD_CLIENT_PRESENT=false
-USA_UDP3478_LISTENER=false
-USA_TCP443_LISTENER=false
-DECISION=HOLD_USA_OUTBOUND_SSH_UPLOAD_NOT_CAPTURED
-NEXT_GATE=CLASSIFY_USA_TO_RELAY_SSH_AUTH_OR_EGRESS
-TASK_RESULT=HOLD_USA_AUDIT_SSH_UPLOAD_TO_RELAY
+MUTATION_BOUNDARY=TEMP_IPTABLES_ACCEPT_22_443_3478_ONLY
+GOAL=SEPARATE_GUEST_FIREWALL_FROM_PROVIDER_FILTER
+FAILSAFE_CLEANUP_DELAY_SECONDS=80
+PVE01_DURING_PROBE_RC=0
+PVE01_DURING_DIRECT_HTTPS=000
+PVE01_DURING_DIRECT_OIDC=000
+PVE01_DURING_DIRECT_TLS_OK=false
+PVE01_DURING_DIRECT_ALPN=TimeoutError
+PVE01_DURING_DIRECT_TLS_VERSION=NONE
+PVE01_DURING_DIRECT_STUN_OK=true
+PVE01_DURING_DIRECT_STUN_CLASS=SUCCESS
+PVE01_DURING_DIRECT_SSH_HOSTKEY=SHA256:805Q9eh/fePUci42dfY58I6q0lFiiPHn0/M+mckypmE
+PVE01_DURING_DIRECT_SSH_HOSTKEY_MATCH=true
+PVE01_DURING_NETBIRD_STATUS_RC=0
+PVE01_DURING_NETBIRD_MANAGEMENT_CONNECTED=true
+PVE01_DURING_NETBIRD_SIGNAL_CONNECTED=true
+PVE01_DURING_NETBIRD_IP=100.100.131.41
+PVE01_DURING_DIRECT_HTTPS_READY=false
+PVE01_DURING_DIRECT_H2_READY=false
+PVE01_DURING_DIRECT_STUN_READY=true
+PVE02_HOSTKEY_FINGERPRINT=SHA256:UYF9KcBiAeblzcEJPvL0pgaoDPLHFQsVuG0ZTTow0aM
+PVE02_HOSTKEY_MATCH=true
+PVE02_DURING_PROBE_SSH_RC=0
+PVE02_DURING_DIRECT_HTTPS=000
+PVE02_DURING_DIRECT_OIDC=000
+PVE02_DURING_DIRECT_TLS_OK=false
+PVE02_DURING_DIRECT_ALPN=TimeoutError
+PVE02_DURING_DIRECT_TLS_VERSION=NONE
+PVE02_DURING_DIRECT_STUN_OK=true
+PVE02_DURING_DIRECT_STUN_CLASS=SUCCESS
+PVE02_DURING_DIRECT_SSH_HOSTKEY=SHA256:805Q9eh/fePUci42dfY58I6q0lFiiPHn0/M+mckypmE
+PVE02_DURING_DIRECT_SSH_HOSTKEY_MATCH=true
+PVE02_DURING_NETBIRD_STATUS_RC=0
+PVE02_DURING_NETBIRD_MANAGEMENT_CONNECTED=true
+PVE02_DURING_NETBIRD_SIGNAL_CONNECTED=true
+PVE02_DURING_NETBIRD_IP=100.100.91.76
+PVE02_DURING_DIRECT_HTTPS_READY=false
+PVE02_DURING_DIRECT_H2_READY=false
+PVE02_DURING_DIRECT_STUN_READY=true
+DURING_ANY_DIRECT_HTTPS_READY=false
+DURING_ANY_DIRECT_H2_READY=false
+DURING_ANY_DIRECT_STUN_READY=true
+DURING_ANY_DIRECT_SSH_KEX_READY=true
+PVE01_AFTER_PROBE_RC=0
+PVE01_AFTER_DIRECT_HTTPS=000
+PVE01_AFTER_DIRECT_OIDC=000
+PVE01_AFTER_DIRECT_TLS_OK=false
+PVE01_AFTER_DIRECT_ALPN=TimeoutError
+PVE01_AFTER_DIRECT_TLS_VERSION=NONE
+PVE01_AFTER_DIRECT_STUN_OK=true
+PVE01_AFTER_DIRECT_STUN_CLASS=SUCCESS
+PVE01_AFTER_DIRECT_SSH_HOSTKEY=SHA256:805Q9eh/fePUci42dfY58I6q0lFiiPHn0/M+mckypmE
+PVE01_AFTER_DIRECT_SSH_HOSTKEY_MATCH=true
+PVE01_AFTER_NETBIRD_STATUS_RC=0
+PVE01_AFTER_NETBIRD_MANAGEMENT_CONNECTED=true
+PVE01_AFTER_NETBIRD_SIGNAL_CONNECTED=true
+PVE01_AFTER_NETBIRD_IP=100.100.131.41
+PVE01_AFTER_DIRECT_HTTPS_READY=false
+PVE01_AFTER_DIRECT_H2_READY=false
+PVE01_AFTER_DIRECT_STUN_READY=true
+PVE01_POSTWINDOW_CONTROL_HEALTHY=true
+PVE02_DURING_CONTROL_HEALTHY=true
+DECISION=PASS_TEMP_ACCEPT_RULES_IMPROVED_DIRECT_USA_PATH
+NEXT_GATE=VERIFY_TEMP_RULE_CLEANUP_THEN_GUARDED_GUEST_FIREWALL_REPAIR
+TASK_RESULT=PASS_USA_TEMP_FIREWALL_BYPASS_RCA
 CHANGES_MADE=true
 ROLLBACK_STARTED=true
-ROLLBACK_RESTORED=true
-MUTATION_OUTCOME=TEMP_RELAY_KEY_AND_CAPTURE_REMOVED
-HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"SUPPORT-260928-USA-AUDIT-SSH-UPLOAD-TO-RELAY-99055R1","status":"FAIL","changes_made":true,"rollback_started":true,"rollback_restored":true}
+ROLLBACK_RESTORED=null
+MUTATION_OUTCOME=TEMP_RULES_FAILSAFE_SCHEDULED_AND_WINDOW_EXPIRED
+HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"SUPPORT-260928-USA-TEMP-FIREWALL-BYPASS-RCA-99056R1","status":"OK","changes_made":true,"rollback_started":true,"rollback_restored":null}
 
 OUTPUT_END
 CHAT_OUTPUT_END