diff --git a/runtime/history/SUPPORT-260921-PVEPRO-GRAM-SUPPORT-TEMPLATE-PERMISSION-METADATA-RCA-READONLY-847R1.json b/runtime/history/SUPPORT-260921-PVEPRO-GRAM-SUPPORT-TEMPLATE-PERMISSION-METADATA-RCA-READONLY-847R1.json
index 60d93343..e97c634b 100644
--- a/runtime/history/SUPPORT-260921-PVEPRO-GRAM-SUPPORT-TEMPLATE-PERMISSION-METADATA-RCA-READONLY-847R1.json
+++ b/runtime/history/SUPPORT-260921-PVEPRO-GRAM-SUPPORT-TEMPLATE-PERMISSION-METADATA-RCA-READONLY-847R1.json
@@ -2,26 +2,26 @@
   "schema_version": 1,
   "channel": "homelab-runtime",
   "command_id": "SUPPORT-260921-PVEPRO-GRAM-SUPPORT-TEMPLATE-PERMISSION-METADATA-RCA-READONLY-847R1",
-  "status": "FAIL",
-  "rc": 3,
+  "status": "BLOCKED",
+  "rc": 73,
   "host": "pve01",
   "mode": "read-only",
   "component": "pvepro-gram-support-template-permission-metadata-rca-readonly",
-  "started_at_utc": "2026-09-21T03:28:38Z",
-  "finished_at_utc": "2026-09-21T03:28:41Z",
+  "started_at_utc": "2026-09-21T03:29:08Z",
+  "finished_at_utc": "2026-09-21T03:29:08Z",
   "reference_register_checked": true,
   "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66",
   "error_register_checked": true,
   "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0",
   "command_sha256": "09945dc5133153fb20cbce728b1d8d1e331d64772b12797bf6ca9e75f32e7b2d",
-  "duplicate_failed_command_blocked": false,
-  "block_reason": null,
-  "execution_started": true,
+  "duplicate_failed_command_blocked": true,
+  "block_reason": "EXACT_FAILED_COMMAND_REPEAT",
+  "execution_started": false,
   "change_declared": false,
   "result_contract_valid": true,
-  "result_contract_status": null,
-  "result_contract_error": null,
-  "command_rc": 3,
+  "result_contract_status": "BLOCKED",
+  "result_contract_error": "RUNNER_PREEXECUTION_BLOCK",
+  "command_rc": null,
   "changes_made": false,
   "rollback_started": false,
   "rollback_restored": null,
@@ -30,9 +30,9 @@
   "secrets_included": false,
   "private_addresses_included": false,
   "raw_evidence_retained_locally": true,
-  "raw_evidence_sha256": "4f24edf07a28a8ad12035dec1b9071bb1119041b2457ef1942b3815508d2c62e",
-  "sanitized_output_sha256": "4f24edf07a28a8ad12035dec1b9071bb1119041b2457ef1942b3815508d2c62e",
+  "raw_evidence_sha256": "e2a94371a04dfe47c3107ac315ba2e793b95cd3ecd73a76aefbc3a2fb717be58",
+  "sanitized_output_sha256": "e2a94371a04dfe47c3107ac315ba2e793b95cd3ecd73a76aefbc3a2fb717be58",
   "output_truncated_in_json": false,
   "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
-  "output": "COMMAND_ID=SUPPORT-260921-PVEPRO-GRAM-SUPPORT-TEMPLATE-PERMISSION-METADATA-RCA-READONLY-847R1\nMODE=read-only\nCOMPONENT=pvepro-gram-support-template-permission-metadata-rca-readonly\nPRODUCTION_HOST={\"all_link_down\":false,\"config_sha256\":\"ebd2b7d44ab58a222b4fd5a7dcd9358d3082e593bd70fb07c2331c70f22e82ab\",\"lock\":null,\"name\":\"pvepro-prod\",\"snapshots\":[],\"status\":\"running\",\"vmstate\":null}\nSTAGING_HOST={\"all_link_down\":true,\"config_sha256\":\"43761ab3d555625387944883cd0229cde2121aba005a715dffe20465041e8aa9\",\"lock\":null,\"name\":\"pvepro-staging-v1\",\"snapshots\":[],\"status\":\"stopped\",\"vmstate\":null}\nGRAM_SUPPORT_AUX_METADATA_RCA_ERROR_CLASS=RuntimeError\nGRAM_SUPPORT_AUX_METADATA_RCA_ERROR_SHA256=4222b751d8b413d590c8e1b968ddffdbbd193fe70664f2dae559a0452f4d2d66\nNO_MUTATION=true\nPRODUCT_CHECKPOINTS_REMAINING=14\nPLANNING_MINIMUM_MAJOR_COMMANDS_REMAINING=14\nTASK_RESULT=PVEPRO_GRAM_SUPPORT_TEMPLATE_PERMISSION_METADATA_RCA_FAILED\nHOMELAB_RESULT_CONTRACT={\"changes_made\":false,\"command_id\":\"SUPPORT-260921-PVEPRO-GRAM-SUPPORT-TEMPLATE-PERMISSION-METADATA-RCA-READONLY-847R1\",\"rollback_restored\":null,\"rollback_started\":false,\"status\":\"FAIL\",\"version\":1}\n"
+  "output": "COMMAND_EXECUTION_BLOCKED=yes\nREASON=EXACT_FAILED_COMMAND_REPEAT\nPREVIOUS_RC=3\nCOMMAND_SHA256=09945dc5133153fb20cbce728b1d8d1e331d64772b12797bf6ca9e75f32e7b2d\n\nSet HOMELAB_ALLOW_REPEAT=1 only after reviewing the previous failure.\n"
 }
diff --git a/runtime/history/SUPPORT-260921-PVEPRO-GRAM-SUPPORT-TEMPLATE-PERMISSION-METADATA-RCA-READONLY-847R1.txt b/runtime/history/SUPPORT-260921-PVEPRO-GRAM-SUPPORT-TEMPLATE-PERMISSION-METADATA-RCA-READONLY-847R1.txt
index b9aa4842..2f13c760 100644
--- a/runtime/history/SUPPORT-260921-PVEPRO-GRAM-SUPPORT-TEMPLATE-PERMISSION-METADATA-RCA-READONLY-847R1.txt
+++ b/runtime/history/SUPPORT-260921-PVEPRO-GRAM-SUPPORT-TEMPLATE-PERMISSION-METADATA-RCA-READONLY-847R1.txt
@@ -1,7 +1,7 @@
 CHAT_OUTPUT_BEGIN
 COMMAND_ID=SUPPORT-260921-PVEPRO-GRAM-SUPPORT-TEMPLATE-PERMISSION-METADATA-RCA-READONLY-847R1
-STATUS=FAIL
-RC=3
+STATUS=BLOCKED
+RC=73
 HOST=pve01
 MODE=read-only
 COMPONENT=pvepro-gram-support-template-permission-metadata-rca-readonly
@@ -10,13 +10,13 @@ REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d6
 ERROR_REGISTER_CHECK=OK
 ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
 COMMAND_SHA256=09945dc5133153fb20cbce728b1d8d1e331d64772b12797bf6ca9e75f32e7b2d
-DUPLICATE_FAILED_COMMAND_BLOCKED=false
-EXECUTION_STARTED=true
+DUPLICATE_FAILED_COMMAND_BLOCKED=true
+EXECUTION_STARTED=false
 CHANGE_DECLARED=false
 RESULT_CONTRACT_VALID=true
-RESULT_CONTRACT_STATUS=NOT_APPLICABLE
-RESULT_CONTRACT_ERROR=NONE
-COMMAND_RC=3
+RESULT_CONTRACT_STATUS=BLOCKED
+RESULT_CONTRACT_ERROR=RUNNER_PREEXECUTION_BLOCK
+COMMAND_RC=
 CHANGES_MADE=false
 ROLLBACK_STARTED=false
 ROLLBACK_RESTORED=null
@@ -24,21 +24,15 @@ MUTATION_OUTCOME=NO_MUTATION
 SANITIZED=yes
 SECRETS_INCLUDED=no
 PRIVATE_ADDRESSES_INCLUDED=no
-RAW_EVIDENCE_SHA256=4f24edf07a28a8ad12035dec1b9071bb1119041b2457ef1942b3815508d2c62e
-SANITIZED_OUTPUT_SHA256=4f24edf07a28a8ad12035dec1b9071bb1119041b2457ef1942b3815508d2c62e
+RAW_EVIDENCE_SHA256=e2a94371a04dfe47c3107ac315ba2e793b95cd3ecd73a76aefbc3a2fb717be58
+SANITIZED_OUTPUT_SHA256=e2a94371a04dfe47c3107ac315ba2e793b95cd3ecd73a76aefbc3a2fb717be58
 OUTPUT_BEGIN
-COMMAND_ID=SUPPORT-260921-PVEPRO-GRAM-SUPPORT-TEMPLATE-PERMISSION-METADATA-RCA-READONLY-847R1
-MODE=read-only
-COMPONENT=pvepro-gram-support-template-permission-metadata-rca-readonly
-PRODUCTION_HOST={"all_link_down":false,"config_sha256":"ebd2b7d44ab58a222b4fd5a7dcd9358d3082e593bd70fb07c2331c70f22e82ab","lock":null,"name":"pvepro-prod","snapshots":[],"status":"running","vmstate":null}
-STAGING_HOST={"all_link_down":true,"config_sha256":"43761ab3d555625387944883cd0229cde2121aba005a715dffe20465041e8aa9","lock":null,"name":"pvepro-staging-v1","snapshots":[],"status":"stopped","vmstate":null}
-GRAM_SUPPORT_AUX_METADATA_RCA_ERROR_CLASS=RuntimeError
-GRAM_SUPPORT_AUX_METADATA_RCA_ERROR_SHA256=4222b751d8b413d590c8e1b968ddffdbbd193fe70664f2dae559a0452f4d2d66
-NO_MUTATION=true
-PRODUCT_CHECKPOINTS_REMAINING=14
-PLANNING_MINIMUM_MAJOR_COMMANDS_REMAINING=14
-TASK_RESULT=PVEPRO_GRAM_SUPPORT_TEMPLATE_PERMISSION_METADATA_RCA_FAILED
-HOMELAB_RESULT_CONTRACT={"changes_made":false,"command_id":"SUPPORT-260921-PVEPRO-GRAM-SUPPORT-TEMPLATE-PERMISSION-METADATA-RCA-READONLY-847R1","rollback_restored":null,"rollback_started":false,"status":"FAIL","version":1}
+COMMAND_EXECUTION_BLOCKED=yes
+REASON=EXACT_FAILED_COMMAND_REPEAT
+PREVIOUS_RC=3
+COMMAND_SHA256=09945dc5133153fb20cbce728b1d8d1e331d64772b12797bf6ca9e75f32e7b2d
+
+Set HOMELAB_ALLOW_REPEAT=1 only after reviewing the previous failure.
 
 OUTPUT_END
 CHAT_OUTPUT_END
diff --git a/runtime/latest.json b/runtime/latest.json
index 60d93343..e97c634b 100644
--- a/runtime/latest.json
+++ b/runtime/latest.json
@@ -2,26 +2,26 @@
   "schema_version": 1,
   "channel": "homelab-runtime",
   "command_id": "SUPPORT-260921-PVEPRO-GRAM-SUPPORT-TEMPLATE-PERMISSION-METADATA-RCA-READONLY-847R1",
-  "status": "FAIL",
-  "rc": 3,
+  "status": "BLOCKED",
+  "rc": 73,
   "host": "pve01",
   "mode": "read-only",
   "component": "pvepro-gram-support-template-permission-metadata-rca-readonly",
-  "started_at_utc": "2026-09-21T03:28:38Z",
-  "finished_at_utc": "2026-09-21T03:28:41Z",
+  "started_at_utc": "2026-09-21T03:29:08Z",
+  "finished_at_utc": "2026-09-21T03:29:08Z",
   "reference_register_checked": true,
   "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66",
   "error_register_checked": true,
   "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0",
   "command_sha256": "09945dc5133153fb20cbce728b1d8d1e331d64772b12797bf6ca9e75f32e7b2d",
-  "duplicate_failed_command_blocked": false,
-  "block_reason": null,
-  "execution_started": true,
+  "duplicate_failed_command_blocked": true,
+  "block_reason": "EXACT_FAILED_COMMAND_REPEAT",
+  "execution_started": false,
   "change_declared": false,
   "result_contract_valid": true,
-  "result_contract_status": null,
-  "result_contract_error": null,
-  "command_rc": 3,
+  "result_contract_status": "BLOCKED",
+  "result_contract_error": "RUNNER_PREEXECUTION_BLOCK",
+  "command_rc": null,
   "changes_made": false,
   "rollback_started": false,
   "rollback_restored": null,
@@ -30,9 +30,9 @@
   "secrets_included": false,
   "private_addresses_included": false,
   "raw_evidence_retained_locally": true,
-  "raw_evidence_sha256": "4f24edf07a28a8ad12035dec1b9071bb1119041b2457ef1942b3815508d2c62e",
-  "sanitized_output_sha256": "4f24edf07a28a8ad12035dec1b9071bb1119041b2457ef1942b3815508d2c62e",
+  "raw_evidence_sha256": "e2a94371a04dfe47c3107ac315ba2e793b95cd3ecd73a76aefbc3a2fb717be58",
+  "sanitized_output_sha256": "e2a94371a04dfe47c3107ac315ba2e793b95cd3ecd73a76aefbc3a2fb717be58",
   "output_truncated_in_json": false,
   "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
-  "output": "COMMAND_ID=SUPPORT-260921-PVEPRO-GRAM-SUPPORT-TEMPLATE-PERMISSION-METADATA-RCA-READONLY-847R1\nMODE=read-only\nCOMPONENT=pvepro-gram-support-template-permission-metadata-rca-readonly\nPRODUCTION_HOST={\"all_link_down\":false,\"config_sha256\":\"ebd2b7d44ab58a222b4fd5a7dcd9358d3082e593bd70fb07c2331c70f22e82ab\",\"lock\":null,\"name\":\"pvepro-prod\",\"snapshots\":[],\"status\":\"running\",\"vmstate\":null}\nSTAGING_HOST={\"all_link_down\":true,\"config_sha256\":\"43761ab3d555625387944883cd0229cde2121aba005a715dffe20465041e8aa9\",\"lock\":null,\"name\":\"pvepro-staging-v1\",\"snapshots\":[],\"status\":\"stopped\",\"vmstate\":null}\nGRAM_SUPPORT_AUX_METADATA_RCA_ERROR_CLASS=RuntimeError\nGRAM_SUPPORT_AUX_METADATA_RCA_ERROR_SHA256=4222b751d8b413d590c8e1b968ddffdbbd193fe70664f2dae559a0452f4d2d66\nNO_MUTATION=true\nPRODUCT_CHECKPOINTS_REMAINING=14\nPLANNING_MINIMUM_MAJOR_COMMANDS_REMAINING=14\nTASK_RESULT=PVEPRO_GRAM_SUPPORT_TEMPLATE_PERMISSION_METADATA_RCA_FAILED\nHOMELAB_RESULT_CONTRACT={\"changes_made\":false,\"command_id\":\"SUPPORT-260921-PVEPRO-GRAM-SUPPORT-TEMPLATE-PERMISSION-METADATA-RCA-READONLY-847R1\",\"rollback_restored\":null,\"rollback_started\":false,\"status\":\"FAIL\",\"version\":1}\n"
+  "output": "COMMAND_EXECUTION_BLOCKED=yes\nREASON=EXACT_FAILED_COMMAND_REPEAT\nPREVIOUS_RC=3\nCOMMAND_SHA256=09945dc5133153fb20cbce728b1d8d1e331d64772b12797bf6ca9e75f32e7b2d\n\nSet HOMELAB_ALLOW_REPEAT=1 only after reviewing the previous failure.\n"
 }
diff --git a/runtime/latest.txt b/runtime/latest.txt
index b9aa4842..2f13c760 100644
--- a/runtime/latest.txt
+++ b/runtime/latest.txt
@@ -1,7 +1,7 @@
 CHAT_OUTPUT_BEGIN
 COMMAND_ID=SUPPORT-260921-PVEPRO-GRAM-SUPPORT-TEMPLATE-PERMISSION-METADATA-RCA-READONLY-847R1
-STATUS=FAIL
-RC=3
+STATUS=BLOCKED
+RC=73
 HOST=pve01
 MODE=read-only
 COMPONENT=pvepro-gram-support-template-permission-metadata-rca-readonly
@@ -10,13 +10,13 @@ REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d6
 ERROR_REGISTER_CHECK=OK
 ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
 COMMAND_SHA256=09945dc5133153fb20cbce728b1d8d1e331d64772b12797bf6ca9e75f32e7b2d
-DUPLICATE_FAILED_COMMAND_BLOCKED=false
-EXECUTION_STARTED=true
+DUPLICATE_FAILED_COMMAND_BLOCKED=true
+EXECUTION_STARTED=false
 CHANGE_DECLARED=false
 RESULT_CONTRACT_VALID=true
-RESULT_CONTRACT_STATUS=NOT_APPLICABLE
-RESULT_CONTRACT_ERROR=NONE
-COMMAND_RC=3
+RESULT_CONTRACT_STATUS=BLOCKED
+RESULT_CONTRACT_ERROR=RUNNER_PREEXECUTION_BLOCK
+COMMAND_RC=
 CHANGES_MADE=false
 ROLLBACK_STARTED=false
 ROLLBACK_RESTORED=null
@@ -24,21 +24,15 @@ MUTATION_OUTCOME=NO_MUTATION
 SANITIZED=yes
 SECRETS_INCLUDED=no
 PRIVATE_ADDRESSES_INCLUDED=no
-RAW_EVIDENCE_SHA256=4f24edf07a28a8ad12035dec1b9071bb1119041b2457ef1942b3815508d2c62e
-SANITIZED_OUTPUT_SHA256=4f24edf07a28a8ad12035dec1b9071bb1119041b2457ef1942b3815508d2c62e
+RAW_EVIDENCE_SHA256=e2a94371a04dfe47c3107ac315ba2e793b95cd3ecd73a76aefbc3a2fb717be58
+SANITIZED_OUTPUT_SHA256=e2a94371a04dfe47c3107ac315ba2e793b95cd3ecd73a76aefbc3a2fb717be58
 OUTPUT_BEGIN
-COMMAND_ID=SUPPORT-260921-PVEPRO-GRAM-SUPPORT-TEMPLATE-PERMISSION-METADATA-RCA-READONLY-847R1
-MODE=read-only
-COMPONENT=pvepro-gram-support-template-permission-metadata-rca-readonly
-PRODUCTION_HOST={"all_link_down":false,"config_sha256":"ebd2b7d44ab58a222b4fd5a7dcd9358d3082e593bd70fb07c2331c70f22e82ab","lock":null,"name":"pvepro-prod","snapshots":[],"status":"running","vmstate":null}
-STAGING_HOST={"all_link_down":true,"config_sha256":"43761ab3d555625387944883cd0229cde2121aba005a715dffe20465041e8aa9","lock":null,"name":"pvepro-staging-v1","snapshots":[],"status":"stopped","vmstate":null}
-GRAM_SUPPORT_AUX_METADATA_RCA_ERROR_CLASS=RuntimeError
-GRAM_SUPPORT_AUX_METADATA_RCA_ERROR_SHA256=4222b751d8b413d590c8e1b968ddffdbbd193fe70664f2dae559a0452f4d2d66
-NO_MUTATION=true
-PRODUCT_CHECKPOINTS_REMAINING=14
-PLANNING_MINIMUM_MAJOR_COMMANDS_REMAINING=14
-TASK_RESULT=PVEPRO_GRAM_SUPPORT_TEMPLATE_PERMISSION_METADATA_RCA_FAILED
-HOMELAB_RESULT_CONTRACT={"changes_made":false,"command_id":"SUPPORT-260921-PVEPRO-GRAM-SUPPORT-TEMPLATE-PERMISSION-METADATA-RCA-READONLY-847R1","rollback_restored":null,"rollback_started":false,"status":"FAIL","version":1}
+COMMAND_EXECUTION_BLOCKED=yes
+REASON=EXACT_FAILED_COMMAND_REPEAT
+PREVIOUS_RC=3
+COMMAND_SHA256=09945dc5133153fb20cbce728b1d8d1e331d64772b12797bf6ca9e75f32e7b2d
+
+Set HOMELAB_ALLOW_REPEAT=1 only after reviewing the previous failure.
 
 OUTPUT_END
 CHAT_OUTPUT_END