diff --git a/runtime/history/SUPPORT-260911-INFRA-DR-VPS-ROUTE-AUTH-170R1.json b/runtime/history/SUPPORT-260911-INFRA-DR-VPS-ROUTE-AUTH-170R1.json
new file mode 100644
index 00000000..d589ae8b
--- /dev/null
+++ b/runtime/history/SUPPORT-260911-INFRA-DR-VPS-ROUTE-AUTH-170R1.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": 1,
+  "channel": "homelab-runtime",
+  "command_id": "SUPPORT-260911-INFRA-DR-VPS-ROUTE-AUTH-170R1",
+  "status": "OK",
+  "rc": 0,
+  "host": "pve01",
+  "mode": "read-only",
+  "component": "infra-dr-vps-route-auth-pve01",
+  "started_at_utc": "2026-09-11T03:42:05Z",
+  "finished_at_utc": "2026-09-11T03:42:05Z",
+  "reference_register_checked": true,
+  "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66",
+  "error_register_checked": true,
+  "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0",
+  "command_sha256": "396759f2f07e402daf35047c1bde8557e62601310a1987f75906bec86336363a",
+  "duplicate_failed_command_blocked": false,
+  "block_reason": null,
+  "execution_started": true,
+  "change_declared": false,
+  "result_contract_valid": true,
+  "result_contract_status": null,
+  "result_contract_error": null,
+  "command_rc": 0,
+  "changes_made": false,
+  "rollback_started": false,
+  "rollback_restored": null,
+  "mutation_outcome": "NO_MUTATION",
+  "sanitized": true,
+  "secrets_included": false,
+  "private_addresses_included": false,
+  "raw_evidence_retained_locally": true,
+  "raw_evidence_sha256": "5fb23cd7f83ef292be65ad46e52f7c1e5378ce4834aa194a549a99cf6e615fd1",
+  "sanitized_output_sha256": "5fb23cd7f83ef292be65ad46e52f7c1e5378ce4834aa194a549a99cf6e615fd1",
+  "output_truncated_in_json": false,
+  "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
+  "output": "INFRA170_BEGIN\nCOMMAND_ID=SUPPORT-260911-INFRA-DR-VPS-ROUTE-AUTH-170R1\nMODE=READ_ONLY\nPRIOR_169_COMMIT=c934e939d51c24b6fabc5be1b72ce82effa05a5e\nINFRA170_ROLE_DNS={\"MD_RELAY\":{\"hostname\":\"nb.pvepro.ru\",\"ip_refs\":[{\"address_class\":\"PUBLIC\",\"ip_sha256\":\"1fc73136d6d7ddbd0e67ae9c4ddbe6798056fba742305ef773f1015df2712c16\"}],\"rc\":0},\"SPB_INGRESS\":{\"hostname\":\"newfi.ru\",\"ip_refs\":[{\"address_class\":\"PUBLIC\",\"identity_marker\":\"HISTORICAL_SPB_INGRESS\",\"ip_sha256\":\"6d6149f42864ce03daf22828cf236bf64d5d9a004040746ddbb051d71c9fcbc5\"}],\"rc\":0},\"US_NETBIRD\":{\"hostname\":\"nb.gram1.ru\",\"ip_refs\":[{\"address_class\":\"PUBLIC\",\"ip_sha256\":\"1fc73136d6d7ddbd0e67ae9c4ddbe6798056fba742305ef773f1015df2712c16\"}],\"rc\":0}}\nINFRA170_UNIT_CHAIN={\"bytes_read\":15144,\"file_count\":4,\"files_scanned\":[\"/etc/systemd/system/homelab-ingress-standby-refresh.service\",\"/usr/local/sbin/homelab-ingress-standby-refresh\",\"/etc/systemd/system/homelab-ingress-standby-refresh.timer\",\"/usr/local/sbin/homelab-ingress-failover\"],\"unit_count\":2,\"units\":[{\"path\":\"/etc/systemd/system/homelab-ingress-standby-refresh.service\",\"safe_directives\":[{\"key\":\"User\",\"line\":9,\"value\":\"root\"},{\"key\":\"Group\",\"line\":10,\"value\":\"root\"},{\"key\":\"ExecStart\",\"line\":11,\"value_kind\":\"EXEC\"}]},{\"path\":\"/etc/systemd/system/homelab-ingress-standby-refresh.timer\",\"safe_directives\":[]}]}\nINFRA170_SAFE_ASSIGNMENTS={\"count\":0,\"rows\":[]}\nINFRA170_ROUTE_CANDIDATES={\"count\":0,\"rows\":[]}\nINFRA170_SAME_FILE_BUNDLES={\"count\":0,\"rows\":[]}\nINFRA170_ROLE_ROUTE_SUMMARY={\"MD_RELAY\":{\"route_candidates\":[],\"trusted_user_route_proven\":false,\"trusted_user_routes\":[]},\"SPB_INGRESS\":{\"route_candidates\":[],\"trusted_user_route_proven\":false,\"trusted_user_routes\":[]},\"US_NETBIRD\":{\"route_candidates\":[],\"trusted_user_route_proven\":false,\"trusted_user_routes\":[]}}\nINFRA170_SUMMARY={\"decision\":\"HOLD_EXTERNAL_SSH_ROUTE_AUTH_INCOMPLETE\",\"holds\":[\"US_NETBIRD:TRUSTED_USER_ROUTE_NOT_PROVEN\",\"MD_RELAY:TRUSTED_USER_ROUTE_NOT_PROVEN\",\"SPB_INGRESS:TRUSTED_USER_ROUTE_NOT_PROVEN\"],\"roles_hold\":[\"US_NETBIRD\",\"MD_RELAY\",\"SPB_INGRESS\"],\"roles_ready\":[]}\nEXTERNAL_SSH_ATTEMPTS=0\nSSH_KEYSCAN_ATTEMPTS=0\nKNOWN_HOSTS_WRITES=0\nSSH_CONFIG_WRITES=0\nCONFIGURATION_WRITES=0\nFILE_WRITES_BY_PROBE=0\nSECRETS_PRINTED=NO\nINFRA170_END\n"
+}
diff --git a/runtime/history/SUPPORT-260911-INFRA-DR-VPS-ROUTE-AUTH-170R1.txt b/runtime/history/SUPPORT-260911-INFRA-DR-VPS-ROUTE-AUTH-170R1.txt
new file mode 100644
index 00000000..16d6dc77
--- /dev/null
+++ b/runtime/history/SUPPORT-260911-INFRA-DR-VPS-ROUTE-AUTH-170R1.txt
@@ -0,0 +1,51 @@
+CHAT_OUTPUT_BEGIN
+COMMAND_ID=SUPPORT-260911-INFRA-DR-VPS-ROUTE-AUTH-170R1
+STATUS=OK
+RC=0
+HOST=pve01
+MODE=read-only
+COMPONENT=infra-dr-vps-route-auth-pve01
+REFERENCE_REGISTER_CHECK=OK
+REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
+ERROR_REGISTER_CHECK=OK
+ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
+COMMAND_SHA256=396759f2f07e402daf35047c1bde8557e62601310a1987f75906bec86336363a
+DUPLICATE_FAILED_COMMAND_BLOCKED=false
+EXECUTION_STARTED=true
+CHANGE_DECLARED=false
+RESULT_CONTRACT_VALID=true
+RESULT_CONTRACT_STATUS=NOT_APPLICABLE
+RESULT_CONTRACT_ERROR=NONE
+COMMAND_RC=0
+CHANGES_MADE=false
+ROLLBACK_STARTED=false
+ROLLBACK_RESTORED=null
+MUTATION_OUTCOME=NO_MUTATION
+SANITIZED=yes
+SECRETS_INCLUDED=no
+PRIVATE_ADDRESSES_INCLUDED=no
+RAW_EVIDENCE_SHA256=5fb23cd7f83ef292be65ad46e52f7c1e5378ce4834aa194a549a99cf6e615fd1
+SANITIZED_OUTPUT_SHA256=5fb23cd7f83ef292be65ad46e52f7c1e5378ce4834aa194a549a99cf6e615fd1
+OUTPUT_BEGIN
+INFRA170_BEGIN
+COMMAND_ID=SUPPORT-260911-INFRA-DR-VPS-ROUTE-AUTH-170R1
+MODE=READ_ONLY
+PRIOR_169_COMMIT=c934e939d51c24b6fabc5be1b72ce82effa05a5e
+INFRA170_ROLE_DNS={"MD_RELAY":{"hostname":"nb.pvepro.ru","ip_refs":[{"address_class":"PUBLIC","ip_sha256":"1fc73136d6d7ddbd0e67ae9c4ddbe6798056fba742305ef773f1015df2712c16"}],"rc":0},"SPB_INGRESS":{"hostname":"newfi.ru","ip_refs":[{"address_class":"PUBLIC","identity_marker":"HISTORICAL_SPB_INGRESS","ip_sha256":"6d6149f42864ce03daf22828cf236bf64d5d9a004040746ddbb051d71c9fcbc5"}],"rc":0},"US_NETBIRD":{"hostname":"nb.gram1.ru","ip_refs":[{"address_class":"PUBLIC","ip_sha256":"1fc73136d6d7ddbd0e67ae9c4ddbe6798056fba742305ef773f1015df2712c16"}],"rc":0}}
+INFRA170_UNIT_CHAIN={"bytes_read":15144,"file_count":4,"files_scanned":["/etc/systemd/system/homelab-ingress-standby-refresh.service","/usr/local/sbin/homelab-ingress-standby-refresh","/etc/systemd/system/homelab-ingress-standby-refresh.timer","/usr/local/sbin/homelab-ingress-failover"],"unit_count":2,"units":[{"path":"/etc/systemd/system/homelab-ingress-standby-refresh.service","safe_directives":[{"key":"User","line":9,"value":"root"},{"key":"Group","line":10,"value":"root"},{"key":"ExecStart","line":11,"value_kind":"EXEC"}]},{"path":"/etc/systemd/system/homelab-ingress-standby-refresh.timer","safe_directives":[]}]}
+INFRA170_SAFE_ASSIGNMENTS={"count":0,"rows":[]}
+INFRA170_ROUTE_CANDIDATES={"count":0,"rows":[]}
+INFRA170_SAME_FILE_BUNDLES={"count":0,"rows":[]}
+INFRA170_ROLE_ROUTE_SUMMARY={"MD_RELAY":{"route_candidates":[],"trusted_user_route_proven":false,"trusted_user_routes":[]},"SPB_INGRESS":{"route_candidates":[],"trusted_user_route_proven":false,"trusted_user_routes":[]},"US_NETBIRD":{"route_candidates":[],"trusted_user_route_proven":false,"trusted_user_routes":[]}}
+INFRA170_SUMMARY={"decision":"HOLD_EXTERNAL_SSH_ROUTE_AUTH_INCOMPLETE","holds":["US_NETBIRD:TRUSTED_USER_ROUTE_NOT_PROVEN","MD_RELAY:TRUSTED_USER_ROUTE_NOT_PROVEN","SPB_INGRESS:TRUSTED_USER_ROUTE_NOT_PROVEN"],"roles_hold":["US_NETBIRD","MD_RELAY","SPB_INGRESS"],"roles_ready":[]}
+EXTERNAL_SSH_ATTEMPTS=0
+SSH_KEYSCAN_ATTEMPTS=0
+KNOWN_HOSTS_WRITES=0
+SSH_CONFIG_WRITES=0
+CONFIGURATION_WRITES=0
+FILE_WRITES_BY_PROBE=0
+SECRETS_PRINTED=NO
+INFRA170_END
+
+OUTPUT_END
+CHAT_OUTPUT_END
diff --git a/runtime/latest.json b/runtime/latest.json
index a2b7457b..d589ae8b 100644
--- a/runtime/latest.json
+++ b/runtime/latest.json
@@ -1,19 +1,19 @@
 {
   "schema_version": 1,
   "channel": "homelab-runtime",
-  "command_id": "SUPPORT-260911-INFRA-DR-VPS-MGMT-TRUST-169R1",
+  "command_id": "SUPPORT-260911-INFRA-DR-VPS-ROUTE-AUTH-170R1",
   "status": "OK",
   "rc": 0,
   "host": "pve01",
   "mode": "read-only",
-  "component": "infra-dr-vps-mgmt-trust-pve01",
-  "started_at_utc": "2026-09-11T03:33:13Z",
-  "finished_at_utc": "2026-09-11T03:33:14Z",
+  "component": "infra-dr-vps-route-auth-pve01",
+  "started_at_utc": "2026-09-11T03:42:05Z",
+  "finished_at_utc": "2026-09-11T03:42:05Z",
   "reference_register_checked": true,
   "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66",
   "error_register_checked": true,
   "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0",
-  "command_sha256": "94eb8f2d4fe6425695e530506bd74353a72a93e124a6aa578c246a07e80349f2",
+  "command_sha256": "396759f2f07e402daf35047c1bde8557e62601310a1987f75906bec86336363a",
   "duplicate_failed_command_blocked": false,
   "block_reason": null,
   "execution_started": true,
@@ -30,9 +30,9 @@
   "secrets_included": false,
   "private_addresses_included": false,
   "raw_evidence_retained_locally": true,
-  "raw_evidence_sha256": "f49f32dcfc00b104e28b5f4ab2736307463ecd64e16be91cbeacc0a28d2e64c7",
-  "sanitized_output_sha256": "99b2055d4504cd0fcbd293e590bbcf85fd9cce3196529588e9662a6f7c33c966",
+  "raw_evidence_sha256": "5fb23cd7f83ef292be65ad46e52f7c1e5378ce4834aa194a549a99cf6e615fd1",
+  "sanitized_output_sha256": "5fb23cd7f83ef292be65ad46e52f7c1e5378ce4834aa194a549a99cf6e615fd1",
   "output_truncated_in_json": false,
   "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
-  "output": "INFRA169_BEGIN\nCOMMAND_ID=SUPPORT-260911-INFRA-DR-VPS-MGMT-TRUST-169R1\nMODE=READ_ONLY\nPRIOR_168_COMMIT=a2cc3a159e52f111ff2b695b40395b9ddc0bb288\nROLE_MODEL=US_NETBIRD__MD_RELAY__SPB_PUBLIC_PROTECTION_INGRESS\nINFRA169_DNS={\"MD_RELAY\":{\"hostname\":\"nb.pvepro.ru\",\"ip_refs\":[{\"address_class\":\"PUBLIC\",\"ip_sha256\":\"1fc73136d6d7ddbd0e67ae9c4ddbe6798056fba742305ef773f1015df2712c16\"}],\"rc\":0},\"SPB_INGRESS\":{\"hostname\":\"newfi.ru\",\"ip_refs\":[{\"address_class\":\"PUBLIC\",\"identity_marker\":\"HISTORICAL_SPB_INGRESS\",\"ip_sha256\":\"6d6149f42864ce03daf22828cf236bf64d5d9a004040746ddbb051d71c9fcbc5\"}],\"rc\":0},\"US_NETBIRD\":{\"hostname\":\"nb.gram1.ru\",\"ip_refs\":[{\"address_class\":\"PUBLIC\",\"ip_sha256\":\"1fc73136d6d7ddbd0e67ae9c4ddbe6798056fba742305ef773f1015df2712c16\"}],\"rc\":0}}\nINFRA169_NETBIRD={\"peer_count\":10,\"peers\":[{\"ip_refs\":[{\"address_class\":\"CGNAT_OVERLAY_CANDIDATE\",\"ip_sha256\":\"0f157abc3c70d23478139db34a670fc2088d80aadffa68984f36ee74edd298bc\"}],\"name\":\"comp01.netbird.selfhosted\",\"statuses\":[\"2026-09-10T16:11:33.45781514+03:00\",\"Connecting\"]},{\"ip_refs\":[{\"address_class\":\"CGNAT_OVERLAY_CANDIDATE\",\"ip_sha256\":\"abd1bbea8d823ca14db62a8498fe7db416a44fd556922de63862cd1e06ebc738\"}],\"name\":\"desktop-server.netbird.selfhosted\",\"statuses\":[\"2026-09-06T16:42:43.602928002+03:00\",\"Connecting\"]},{\"ip_refs\":[{\"address_class\":\"CGNAT_OVERLAY_CANDIDATE\",\"ip_sha256\":\"cb4c52b8c38c6512aa6733c5d0ea510c76a499fbcb8c1c129d331908e88f2528\"}],\"name\":\"e3qxxx-183-106.netbird.selfhosted\",\"statuses\":[\"2026-08-28T16:32:24.848329228+03:00\",\"Connecting\"]},{\"ip_refs\":[{\"address_class\":\"CGNAT_OVERLAY_CANDIDATE\",\"ip_sha256\":\"97466ca985f4a2f69684aee45965bd2d11a92507761287e0fef56038c1a5dbb9\"}],\"name\":\"e3qxxx.netbird.selfhosted\",\"statuses\":[\"2026-08-28T16:32:24.84824717+03:00\",\"Connecting\"]},{\"ip_refs\":[{\"address_class\":\"CGNAT_OVERLAY_CANDIDATE\",\"ip_sha256\":\"5649415146501fa3dc7b2e08f469ef80b6b04e46b86079acd21229eb875e9440\"},{\"address_class\":\"PRIVATE\",\"ip_sha256\":\"fb345731d21c612ed2cb13088c10fd26bac959c79a7634cb55e23ee6bfb428d9\"},{\"address_class\":\"PRIVATE\",\"ip_sha256\":\"bc517b4af3298846906234d3d697d3820b0b652ade1880c937c9d71cd802c834\"}],\"name\":\"edge-vm.netbird.selfhosted\",\"statuses\":[\"2026-09-01T01:03:17.58396082+03:00\",\"Connected\"]},{\"ip_refs\":[{\"address_class\":\"CGNAT_OVERLAY_CANDIDATE\",\"ip_sha256\":\"b980955f01148169b9b74541d4d8ece284de73daa9b31a6aaba2a56c9d531179\"}],\"name\":\"mail.netbird.selfhosted\",\"statuses\":[\"2026-08-28T16:32:24.8483694+03:00\",\"Connecting\"]},{\"ip_refs\":[{\"address_class\":\"PRIVATE\",\"ip_sha256\":\"d50d9f19fc8604b654fcce1b8b94e1bb586b814a085105fec3858bbd50b852f2\"},{\"address_class\":\"PRIVATE\",\"ip_sha256\":\"4469235637fc159a8465ed4aab778cf43f762fcfe01b8e6c4858d098a3a699b6\"},{\"address_class\":\"CGNAT_OVERLAY_CANDIDATE\",\"ip_sha256\":\"0f157abc3c70d23478139db34a670fc2088d80aadffa68984f36ee74edd298bc\"},{\"address_class\":\"CGNAT_OVERLAY_CANDIDATE\",\"ip_sha256\":\"97466ca985f4a2f69684aee45965bd2d11a92507761287e0fef56038c1a5dbb9\"},{\"address_class\":\"CGNAT_OVERLAY_CANDIDATE\",\"ip_sha256\":\"373b3de2d0358894090fd0688db97bfb0fba51286b1945ddcf7128f4b2724c8b\"},{\"address_class\":\"CGNAT_OVERLAY_CANDIDATE\",\"ip_sha256\":\"b980955f01148169b9b74541d4d8ece284de73daa9b31a6aaba2a56c9d531179\"},{\"address_class\":\"CGNAT_OVERLAY_CANDIDATE\",\"ip_sha256\":\"abd1bbea8d823ca14db62a8498fe7db416a44fd556922de63862cd1e06ebc738\"},{\"address_class\":\"CGNAT_OVERLAY_CANDIDATE\",\"ip_sha256\":\"cb4c52b8c38c6512aa6733c5d0ea510c76a499fbcb8c1c129d331908e88f2528\"},{\"address_class\":\"CGNAT_OVERLAY_CANDIDATE\",\"ip_sha256\":\"0f61feb58699a097fdfae741ce53e84cd9eae29e8c8d893a0822f20af9231d4c\"},{\"address_class\":\"CGNAT_OVERLAY_CANDIDATE\",\"ip_sha256\":\"66380a583df95a875aa6325e57dda92f97ebe4e283e04c598485310d62c8c93f\"},{\"address_class\":\"CGNAT_OVERLAY_CANDIDATE\",\"ip_sha256\":\"5649415146501fa3dc7b2e08f469ef80b6b04e46b86079acd21229eb875e9440\"},{\"address_class\":\"CGNAT_OVERLAY_CANDIDATE\",\"ip_sha256\":\"cd36ccf2c54b184a3912e3ec361ef72777776d417360c45839a969319c4465b3\"},{\"address_class\":\"PRIVATE\",\"ip_sha256\":\"fb345731d21c612ed2cb13088c10fd26bac959c79a7634cb55e23ee6bfb428d9\"},{\"address_class\":\"PRIVATE\",\"ip_sha256\":\"01df4a7e1c20cbeb1656e21eb725b486a6b35e31bad29c61a4f63d6d4fb5660b\"},{\"address_class\":\"PRIVATE\",\"ip_sha256\":\"bc517b4af3298846906234d3d697d3820b0b652ade1880c937c9d71cd802c834\"},{\"address_class\":\"PUBLIC\",\"ip_sha256\":\"731a154cebb02c619b63295a7316e8484883299059110ff4200455a92aa396fd\"},{\"address_class\":\"PUBLIC\",\"ip_sha256\":\"26ac437d63a8bcf254255cc970d7614e78bd0a67b97b5575a42a1c3ca7a301ee\"}],\"name\":\"pve01.netbird.selfhosted\",\"statuses\":[\"Connected\"]},{\"ip_refs\":[{\"address_class\":\"CGNAT_OVERLAY_CANDIDATE\",\"ip_sha256\":\"cd36ccf2c54b184a3912e3ec361ef72777776d417360c45839a969319c4465b3\"},{\"address_class\":\"PRIVATE\",\"ip_sha256\":\"fb345731d21c612ed2cb13088c10fd26bac959c79a7634cb55e23ee6bfb428d9\"},{\"address_class\":\"PRIVATE\",\"ip_sha256\":\"01df4a7e1c20cbeb1656e21eb725b486a6b35e31bad29c61a4f63d6d4fb5660b\"}],\"name\":\"pve02.netbird.selfhosted\",\"statuses\":[\"2026-09-01T01:03:11.345479438+03:00\",\"Connected\"]},{\"ip_refs\":[{\"address_class\":\"PRIVATE\",\"ip_sha256\":\"d50d9f19fc8604b654fcce1b8b94e1bb586b814a085105fec3858bbd50b852f2\"},{\"address_class\":\"PRIVATE\",\"ip_sha256\":\"4469235637fc159a8465ed4aab778cf43f762fcfe01b8e6c4858d098a3a699b6\"},{\"address_class\":\"CGNAT_OVERLAY_CANDIDATE\",\"ip_sha256\":\"66380a583df95a875aa6325e57dda92f97ebe4e283e04c598485310d62c8c93f\"}],\"name\":\"pve03.netbird.selfhosted\",\"statuses\":[\"2026-08-29T03:45:38.193665341+03:00\",\"Connected\"]},{\"ip_refs\":[{\"address_class\":\"CGNAT_OVERLAY_CANDIDATE\",\"ip_sha256\":\"0f61feb58699a097fdfae741ce53e84cd9eae29e8c8d893a0822f20af9231d4c\"},{\"address_class\":\"PUBLIC\",\"ip_sha256\":\"731a154cebb02c619b63295a7316e8484883299059110ff4200455a92aa396fd\"},{\"address_class\":\"PUBLIC\",\"ip_sha256\":\"26ac437d63a8bcf254255cc970d7614e78bd0a67b97b5575a42a1c3ca7a301ee\"}],\"name\":\"relay.netbird.selfhosted\",\"statuses\":[\"2026-09-10T16:14:50.134696646+03:00\",\"Connected\"]}],\"state\":\"OK\"}\nINFRA169_SOURCE_SCAN={\"bytes_read\":93396,\"file_count\":75,\"files_scanned\":[\"/usr/local/sbin/homelab-external-probe-vps\",\"/usr/local/sbin/homelab-external-probe-vps-health\",\"/usr/local/sbin/homelab-vps-identity-audit\",\"/srv/homelab-ops/kb/runbooks/06_CLOUD_BACKUP.md\",\"[SENSITIVE_PATH]\nINFRA169_SSH_CONFIG={\"blocks\":[],\"state\":\"OK\"}\nINFRA169_ALIAS_DNS={\"rows\":[{\"hostname\":\"homelab-ingress-standby-refresh.service\",\"ip_refs\":[],\"rc\":2}]}\nINFRA169_ROLE_TRUST={\"MD_RELAY\":{\"dns_ip_refs\":[{\"address_class\":\"PUBLIC\",\"ip_sha256\":\"1fc73136d6d7ddbd0e67ae9c4ddbe6798056fba742305ef773f1015df2712c16\"}],\"endpoint_host\":\"nb.pvepro.ru\",\"holds\":[\"SSH_USER_ROUTE_NOT_PROVEN\"],\"hostkey_trust_proven_for_any_role_candidate\":true,\"known_hosts_checks\":[{\"known_hosts_matches\":[{\"key_types\":[\"ssh-ed25519\"],\"known_hosts_file\":\"[SENSITIVE_PATH]\nINFRA169_SUMMARY={\"decision\":\"HOLD_UNPROVEN_MANAGEMENT_ROUTE_NO_EXTERNAL_SSH\",\"holds\":[\"US_NETBIRD:SSH_USER_ROUTE_NOT_PROVEN\",\"MD_RELAY:SSH_USER_ROUTE_NOT_PROVEN\",\"SPB_INGRESS:HOSTKEY_TRUST_NOT_PROVEN_FOR_ROLE_CANDIDATES\",\"SPB_INGRESS:SSH_USER_ROUTE_NOT_PROVEN\"],\"roles_with_management_route_proven\":[],\"roles_without_management_route_proven\":[\"US_NETBIRD\",\"MD_RELAY\",\"SPB_INGRESS\"]}\nEXTERNAL_SSH_ATTEMPTS=0\nSSH_KEYSCAN_ATTEMPTS=0\nKNOWN_HOSTS_WRITES=0\nSSH_CONFIG_WRITES=0\nCONFIGURATION_WRITES=0\nFILE_WRITES_BY_PROBE=0\nSECRETS_PRINTED=NO\nINFRA169_END\n"
+  "output": "INFRA170_BEGIN\nCOMMAND_ID=SUPPORT-260911-INFRA-DR-VPS-ROUTE-AUTH-170R1\nMODE=READ_ONLY\nPRIOR_169_COMMIT=c934e939d51c24b6fabc5be1b72ce82effa05a5e\nINFRA170_ROLE_DNS={\"MD_RELAY\":{\"hostname\":\"nb.pvepro.ru\",\"ip_refs\":[{\"address_class\":\"PUBLIC\",\"ip_sha256\":\"1fc73136d6d7ddbd0e67ae9c4ddbe6798056fba742305ef773f1015df2712c16\"}],\"rc\":0},\"SPB_INGRESS\":{\"hostname\":\"newfi.ru\",\"ip_refs\":[{\"address_class\":\"PUBLIC\",\"identity_marker\":\"HISTORICAL_SPB_INGRESS\",\"ip_sha256\":\"6d6149f42864ce03daf22828cf236bf64d5d9a004040746ddbb051d71c9fcbc5\"}],\"rc\":0},\"US_NETBIRD\":{\"hostname\":\"nb.gram1.ru\",\"ip_refs\":[{\"address_class\":\"PUBLIC\",\"ip_sha256\":\"1fc73136d6d7ddbd0e67ae9c4ddbe6798056fba742305ef773f1015df2712c16\"}],\"rc\":0}}\nINFRA170_UNIT_CHAIN={\"bytes_read\":15144,\"file_count\":4,\"files_scanned\":[\"/etc/systemd/system/homelab-ingress-standby-refresh.service\",\"/usr/local/sbin/homelab-ingress-standby-refresh\",\"/etc/systemd/system/homelab-ingress-standby-refresh.timer\",\"/usr/local/sbin/homelab-ingress-failover\"],\"unit_count\":2,\"units\":[{\"path\":\"/etc/systemd/system/homelab-ingress-standby-refresh.service\",\"safe_directives\":[{\"key\":\"User\",\"line\":9,\"value\":\"root\"},{\"key\":\"Group\",\"line\":10,\"value\":\"root\"},{\"key\":\"ExecStart\",\"line\":11,\"value_kind\":\"EXEC\"}]},{\"path\":\"/etc/systemd/system/homelab-ingress-standby-refresh.timer\",\"safe_directives\":[]}]}\nINFRA170_SAFE_ASSIGNMENTS={\"count\":0,\"rows\":[]}\nINFRA170_ROUTE_CANDIDATES={\"count\":0,\"rows\":[]}\nINFRA170_SAME_FILE_BUNDLES={\"count\":0,\"rows\":[]}\nINFRA170_ROLE_ROUTE_SUMMARY={\"MD_RELAY\":{\"route_candidates\":[],\"trusted_user_route_proven\":false,\"trusted_user_routes\":[]},\"SPB_INGRESS\":{\"route_candidates\":[],\"trusted_user_route_proven\":false,\"trusted_user_routes\":[]},\"US_NETBIRD\":{\"route_candidates\":[],\"trusted_user_route_proven\":false,\"trusted_user_routes\":[]}}\nINFRA170_SUMMARY={\"decision\":\"HOLD_EXTERNAL_SSH_ROUTE_AUTH_INCOMPLETE\",\"holds\":[\"US_NETBIRD:TRUSTED_USER_ROUTE_NOT_PROVEN\",\"MD_RELAY:TRUSTED_USER_ROUTE_NOT_PROVEN\",\"SPB_INGRESS:TRUSTED_USER_ROUTE_NOT_PROVEN\"],\"roles_hold\":[\"US_NETBIRD\",\"MD_RELAY\",\"SPB_INGRESS\"],\"roles_ready\":[]}\nEXTERNAL_SSH_ATTEMPTS=0\nSSH_KEYSCAN_ATTEMPTS=0\nKNOWN_HOSTS_WRITES=0\nSSH_CONFIG_WRITES=0\nCONFIGURATION_WRITES=0\nFILE_WRITES_BY_PROBE=0\nSECRETS_PRINTED=NO\nINFRA170_END\n"
 }
diff --git a/runtime/latest.txt b/runtime/latest.txt
index 6e8f4ac8..16d6dc77 100644
--- a/runtime/latest.txt
+++ b/runtime/latest.txt
@@ -1,15 +1,15 @@
 CHAT_OUTPUT_BEGIN
-COMMAND_ID=SUPPORT-260911-INFRA-DR-VPS-MGMT-TRUST-169R1
+COMMAND_ID=SUPPORT-260911-INFRA-DR-VPS-ROUTE-AUTH-170R1
 STATUS=OK
 RC=0
 HOST=pve01
 MODE=read-only
-COMPONENT=infra-dr-vps-mgmt-trust-pve01
+COMPONENT=infra-dr-vps-route-auth-pve01
 REFERENCE_REGISTER_CHECK=OK
 REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
 ERROR_REGISTER_CHECK=OK
 ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
-COMMAND_SHA256=94eb8f2d4fe6425695e530506bd74353a72a93e124a6aa578c246a07e80349f2
+COMMAND_SHA256=396759f2f07e402daf35047c1bde8557e62601310a1987f75906bec86336363a
 DUPLICATE_FAILED_COMMAND_BLOCKED=false
 EXECUTION_STARTED=true
 CHANGE_DECLARED=false
@@ -24,21 +24,20 @@ MUTATION_OUTCOME=NO_MUTATION
 SANITIZED=yes
 SECRETS_INCLUDED=no
 PRIVATE_ADDRESSES_INCLUDED=no
-RAW_EVIDENCE_SHA256=f49f32dcfc00b104e28b5f4ab2736307463ecd64e16be91cbeacc0a28d2e64c7
-SANITIZED_OUTPUT_SHA256=99b2055d4504cd0fcbd293e590bbcf85fd9cce3196529588e9662a6f7c33c966
+RAW_EVIDENCE_SHA256=5fb23cd7f83ef292be65ad46e52f7c1e5378ce4834aa194a549a99cf6e615fd1
+SANITIZED_OUTPUT_SHA256=5fb23cd7f83ef292be65ad46e52f7c1e5378ce4834aa194a549a99cf6e615fd1
 OUTPUT_BEGIN
-INFRA169_BEGIN
-COMMAND_ID=SUPPORT-260911-INFRA-DR-VPS-MGMT-TRUST-169R1
+INFRA170_BEGIN
+COMMAND_ID=SUPPORT-260911-INFRA-DR-VPS-ROUTE-AUTH-170R1
 MODE=READ_ONLY
-PRIOR_168_COMMIT=a2cc3a159e52f111ff2b695b40395b9ddc0bb288
-ROLE_MODEL=US_NETBIRD__MD_RELAY__SPB_PUBLIC_PROTECTION_INGRESS
-INFRA169_DNS={"MD_RELAY":{"hostname":"nb.pvepro.ru","ip_refs":[{"address_class":"PUBLIC","ip_sha256":"1fc73136d6d7ddbd0e67ae9c4ddbe6798056fba742305ef773f1015df2712c16"}],"rc":0},"SPB_INGRESS":{"hostname":"newfi.ru","ip_refs":[{"address_class":"PUBLIC","identity_marker":"HISTORICAL_SPB_INGRESS","ip_sha256":"6d6149f42864ce03daf22828cf236bf64d5d9a004040746ddbb051d71c9fcbc5"}],"rc":0},"US_NETBIRD":{"hostname":"nb.gram1.ru","ip_refs":[{"address_class":"PUBLIC","ip_sha256":"1fc73136d6d7ddbd0e67ae9c4ddbe6798056fba742305ef773f1015df2712c16"}],"rc":0}}
-INFRA169_NETBIRD={"peer_count":10,"peers":[{"ip_refs":[{"address_class":"CGNAT_OVERLAY_CANDIDATE","ip_sha256":"0f157abc3c70d23478139db34a670fc2088d80aadffa68984f36ee74edd298bc"}],"name":"comp01.netbird.selfhosted","statuses":["2026-09-10T16:11:33.45781514+03:00","Connecting"]},{"ip_refs":[{"address_class":"CGNAT_OVERLAY_CANDIDATE","ip_sha256":"abd1bbea8d823ca14db62a8498fe7db416a44fd556922de63862cd1e06ebc738"}],"name":"desktop-server.netbird.selfhosted","statuses":["2026-09-06T16:42:43.602928002+03:00","Connecting"]},{"ip_refs":[{"address_class":"CGNAT_OVERLAY_CANDIDATE","ip_sha256":"cb4c52b8c38c6512aa6733c5d0ea510c76a499fbcb8c1c129d331908e88f2528"}],"name":"e3qxxx-183-106.netbird.selfhosted","statuses":["2026-08-28T16:32:24.848329228+03:00","Connecting"]},{"ip_refs":[{"address_class":"CGNAT_OVERLAY_CANDIDATE","ip_sha256":"97466ca985f4a2f69684aee45965bd2d11a92507761287e0fef56038c1a5dbb9"}],"name":"e3qxxx.netbird.selfhosted","statuses":["2026-08-28T16:32:24.84824717+03:00","Connecting"]},{"ip_refs":[{"address_class":"CGNAT_OVERLAY_CANDIDATE","ip_sha256":"5649415146501fa3dc7b2e08f469ef80b6b04e46b86079acd21229eb875e9440"},{"address_class":"PRIVATE","ip_sha256":"fb345731d21c612ed2cb13088c10fd26bac959c79a7634cb55e23ee6bfb428d9"},{"address_class":"PRIVATE","ip_sha256":"bc517b4af3298846906234d3d697d3820b0b652ade1880c937c9d71cd802c834"}],"name":"edge-vm.netbird.selfhosted","statuses":["2026-09-01T01:03:17.58396082+03:00","Connected"]},{"ip_refs":[{"address_class":"CGNAT_OVERLAY_CANDIDATE","ip_sha256":"b980955f01148169b9b74541d4d8ece284de73daa9b31a6aaba2a56c9d531179"}],"name":"mail.netbird.selfhosted","statuses":["2026-08-28T16:32:24.8483694+03:00","Connecting"]},{"ip_refs":[{"address_class":"PRIVATE","ip_sha256":"d50d9f19fc8604b654fcce1b8b94e1bb586b814a085105fec3858bbd50b852f2"},{"address_class":"PRIVATE","ip_sha256":"4469235637fc159a8465ed4aab778cf43f762fcfe01b8e6c4858d098a3a699b6"},{"address_class":"CGNAT_OVERLAY_CANDIDATE","ip_sha256":"0f157abc3c70d23478139db34a670fc2088d80aadffa68984f36ee74edd298bc"},{"address_class":"CGNAT_OVERLAY_CANDIDATE","ip_sha256":"97466ca985f4a2f69684aee45965bd2d11a92507761287e0fef56038c1a5dbb9"},{"address_class":"CGNAT_OVERLAY_CANDIDATE","ip_sha256":"373b3de2d0358894090fd0688db97bfb0fba51286b1945ddcf7128f4b2724c8b"},{"address_class":"CGNAT_OVERLAY_CANDIDATE","ip_sha256":"b980955f01148169b9b74541d4d8ece284de73daa9b31a6aaba2a56c9d531179"},{"address_class":"CGNAT_OVERLAY_CANDIDATE","ip_sha256":"abd1bbea8d823ca14db62a8498fe7db416a44fd556922de63862cd1e06ebc738"},{"address_class":"CGNAT_OVERLAY_CANDIDATE","ip_sha256":"cb4c52b8c38c6512aa6733c5d0ea510c76a499fbcb8c1c129d331908e88f2528"},{"address_class":"CGNAT_OVERLAY_CANDIDATE","ip_sha256":"0f61feb58699a097fdfae741ce53e84cd9eae29e8c8d893a0822f20af9231d4c"},{"address_class":"CGNAT_OVERLAY_CANDIDATE","ip_sha256":"66380a583df95a875aa6325e57dda92f97ebe4e283e04c598485310d62c8c93f"},{"address_class":"CGNAT_OVERLAY_CANDIDATE","ip_sha256":"5649415146501fa3dc7b2e08f469ef80b6b04e46b86079acd21229eb875e9440"},{"address_class":"CGNAT_OVERLAY_CANDIDATE","ip_sha256":"cd36ccf2c54b184a3912e3ec361ef72777776d417360c45839a969319c4465b3"},{"address_class":"PRIVATE","ip_sha256":"fb345731d21c612ed2cb13088c10fd26bac959c79a7634cb55e23ee6bfb428d9"},{"address_class":"PRIVATE","ip_sha256":"01df4a7e1c20cbeb1656e21eb725b486a6b35e31bad29c61a4f63d6d4fb5660b"},{"address_class":"PRIVATE","ip_sha256":"bc517b4af3298846906234d3d697d3820b0b652ade1880c937c9d71cd802c834"},{"address_class":"PUBLIC","ip_sha256":"731a154cebb02c619b63295a7316e8484883299059110ff4200455a92aa396fd"},{"address_class":"PUBLIC","ip_sha256":"26ac437d63a8bcf254255cc970d7614e78bd0a67b97b5575a42a1c3ca7a301ee"}],"name":"pve01.netbird.selfhosted","statuses":["Connected"]},{"ip_refs":[{"address_class":"CGNAT_OVERLAY_CANDIDATE","ip_sha256":"cd36ccf2c54b184a3912e3ec361ef72777776d417360c45839a969319c4465b3"},{"address_class":"PRIVATE","ip_sha256":"fb345731d21c612ed2cb13088c10fd26bac959c79a7634cb55e23ee6bfb428d9"},{"address_class":"PRIVATE","ip_sha256":"01df4a7e1c20cbeb1656e21eb725b486a6b35e31bad29c61a4f63d6d4fb5660b"}],"name":"pve02.netbird.selfhosted","statuses":["2026-09-01T01:03:11.345479438+03:00","Connected"]},{"ip_refs":[{"address_class":"PRIVATE","ip_sha256":"d50d9f19fc8604b654fcce1b8b94e1bb586b814a085105fec3858bbd50b852f2"},{"address_class":"PRIVATE","ip_sha256":"4469235637fc159a8465ed4aab778cf43f762fcfe01b8e6c4858d098a3a699b6"},{"address_class":"CGNAT_OVERLAY_CANDIDATE","ip_sha256":"66380a583df95a875aa6325e57dda92f97ebe4e283e04c598485310d62c8c93f"}],"name":"pve03.netbird.selfhosted","statuses":["2026-08-29T03:45:38.193665341+03:00","Connected"]},{"ip_refs":[{"address_class":"CGNAT_OVERLAY_CANDIDATE","ip_sha256":"0f61feb58699a097fdfae741ce53e84cd9eae29e8c8d893a0822f20af9231d4c"},{"address_class":"PUBLIC","ip_sha256":"731a154cebb02c619b63295a7316e8484883299059110ff4200455a92aa396fd"},{"address_class":"PUBLIC","ip_sha256":"26ac437d63a8bcf254255cc970d7614e78bd0a67b97b5575a42a1c3ca7a301ee"}],"name":"relay.netbird.selfhosted","statuses":["2026-09-10T16:14:50.134696646+03:00","Connected"]}],"state":"OK"}
-INFRA169_SOURCE_SCAN={"bytes_read":93396,"file_count":75,"files_scanned":["/usr/local/sbin/homelab-external-probe-vps","/usr/local/sbin/homelab-external-probe-vps-health","/usr/local/sbin/homelab-vps-identity-audit","/srv/homelab-ops/kb/runbooks/06_CLOUD_BACKUP.md","[SENSITIVE_PATH]
-INFRA169_SSH_CONFIG={"blocks":[],"state":"OK"}
-INFRA169_ALIAS_DNS={"rows":[{"hostname":"homelab-ingress-standby-refresh.service","ip_refs":[],"rc":2}]}
-INFRA169_ROLE_TRUST={"MD_RELAY":{"dns_ip_refs":[{"address_class":"PUBLIC","ip_sha256":"1fc73136d6d7ddbd0e67ae9c4ddbe6798056fba742305ef773f1015df2712c16"}],"endpoint_host":"nb.pvepro.ru","holds":["SSH_USER_ROUTE_NOT_PROVEN"],"hostkey_trust_proven_for_any_role_candidate":true,"known_hosts_checks":[{"known_hosts_matches":[{"key_types":["ssh-ed25519"],"known_hosts_file":"[SENSITIVE_PATH]
-INFRA169_SUMMARY={"decision":"HOLD_UNPROVEN_MANAGEMENT_ROUTE_NO_EXTERNAL_SSH","holds":["US_NETBIRD:SSH_USER_ROUTE_NOT_PROVEN","MD_RELAY:SSH_USER_ROUTE_NOT_PROVEN","SPB_INGRESS:HOSTKEY_TRUST_NOT_PROVEN_FOR_ROLE_CANDIDATES","SPB_INGRESS:SSH_USER_ROUTE_NOT_PROVEN"],"roles_with_management_route_proven":[],"roles_without_management_route_proven":["US_NETBIRD","MD_RELAY","SPB_INGRESS"]}
+PRIOR_169_COMMIT=c934e939d51c24b6fabc5be1b72ce82effa05a5e
+INFRA170_ROLE_DNS={"MD_RELAY":{"hostname":"nb.pvepro.ru","ip_refs":[{"address_class":"PUBLIC","ip_sha256":"1fc73136d6d7ddbd0e67ae9c4ddbe6798056fba742305ef773f1015df2712c16"}],"rc":0},"SPB_INGRESS":{"hostname":"newfi.ru","ip_refs":[{"address_class":"PUBLIC","identity_marker":"HISTORICAL_SPB_INGRESS","ip_sha256":"6d6149f42864ce03daf22828cf236bf64d5d9a004040746ddbb051d71c9fcbc5"}],"rc":0},"US_NETBIRD":{"hostname":"nb.gram1.ru","ip_refs":[{"address_class":"PUBLIC","ip_sha256":"1fc73136d6d7ddbd0e67ae9c4ddbe6798056fba742305ef773f1015df2712c16"}],"rc":0}}
+INFRA170_UNIT_CHAIN={"bytes_read":15144,"file_count":4,"files_scanned":["/etc/systemd/system/homelab-ingress-standby-refresh.service","/usr/local/sbin/homelab-ingress-standby-refresh","/etc/systemd/system/homelab-ingress-standby-refresh.timer","/usr/local/sbin/homelab-ingress-failover"],"unit_count":2,"units":[{"path":"/etc/systemd/system/homelab-ingress-standby-refresh.service","safe_directives":[{"key":"User","line":9,"value":"root"},{"key":"Group","line":10,"value":"root"},{"key":"ExecStart","line":11,"value_kind":"EXEC"}]},{"path":"/etc/systemd/system/homelab-ingress-standby-refresh.timer","safe_directives":[]}]}
+INFRA170_SAFE_ASSIGNMENTS={"count":0,"rows":[]}
+INFRA170_ROUTE_CANDIDATES={"count":0,"rows":[]}
+INFRA170_SAME_FILE_BUNDLES={"count":0,"rows":[]}
+INFRA170_ROLE_ROUTE_SUMMARY={"MD_RELAY":{"route_candidates":[],"trusted_user_route_proven":false,"trusted_user_routes":[]},"SPB_INGRESS":{"route_candidates":[],"trusted_user_route_proven":false,"trusted_user_routes":[]},"US_NETBIRD":{"route_candidates":[],"trusted_user_route_proven":false,"trusted_user_routes":[]}}
+INFRA170_SUMMARY={"decision":"HOLD_EXTERNAL_SSH_ROUTE_AUTH_INCOMPLETE","holds":["US_NETBIRD:TRUSTED_USER_ROUTE_NOT_PROVEN","MD_RELAY:TRUSTED_USER_ROUTE_NOT_PROVEN","SPB_INGRESS:TRUSTED_USER_ROUTE_NOT_PROVEN"],"roles_hold":["US_NETBIRD","MD_RELAY","SPB_INGRESS"],"roles_ready":[]}
 EXTERNAL_SSH_ATTEMPTS=0
 SSH_KEYSCAN_ATTEMPTS=0
 KNOWN_HOSTS_WRITES=0
@@ -46,7 +45,7 @@ SSH_CONFIG_WRITES=0
 CONFIGURATION_WRITES=0
 FILE_WRITES_BY_PROBE=0
 SECRETS_PRINTED=NO
-INFRA169_END
+INFRA170_END
 
 OUTPUT_END
 CHAT_OUTPUT_END