runtime: publish SUPPORT-260913-INFRA-DR-BACKUPV2-SPB-TLS-REISSUE-BOOTSTRAP-PROOF-317R1

runtime/history/SUPPORT-260913-INFRA-DR-BACKUPV2-SPB-TLS-REISSUE-BOOTSTRAP-PROOF-317R1.json

@@ -0,0 +1,38 @@
+{
+  "schema_version": 1,
+  "channel": "homelab-runtime",
+  "command_id": "SUPPORT-260913-INFRA-DR-BACKUPV2-SPB-TLS-REISSUE-BOOTSTRAP-PROOF-317R1",
+  "status": "OK",
+  "rc": 0,
+  "host": "pve01",
+  "mode": "read-only",
+  "component": "infra-dr-backupv2-spb-tls-reissue-bootstrap-proof",
+  "started_at_utc": "2026-09-13T16:04:00Z",
+  "finished_at_utc": "2026-09-13T16:04:03Z",
+  "reference_register_checked": true,
+  "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66",
+  "error_register_checked": true,
+  "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0",
+  "command_sha256": "88cf61c768db0e78c22045087ad1ce99129f20c5aa20ac954ef3529eba9e8701",
+  "duplicate_failed_command_blocked": false,
+  "block_reason": null,
+  "execution_started": true,
+  "change_declared": false,
+  "result_contract_valid": true,
+  "result_contract_status": null,
+  "result_contract_error": null,
+  "command_rc": 0,
+  "changes_made": false,
+  "rollback_started": false,
+  "rollback_restored": null,
+  "mutation_outcome": "NO_MUTATION",
+  "sanitized": true,
+  "secrets_included": false,
+  "private_addresses_included": false,
+  "raw_evidence_retained_locally": true,
+  "raw_evidence_sha256": "2f3ca4bc7ed78745bf289ee523478f9fe4e2d7690e99086a774c0d21e56a3074",
+  "sanitized_output_sha256": "2f3ca4bc7ed78745bf289ee523478f9fe4e2d7690e99086a774c0d21e56a3074",
+  "output_truncated_in_json": false,
+  "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
+  "output": "SPB317_BEGIN=\nCOMMAND_ID=SUPPORT-260913-INFRA-DR-BACKUPV2-SPB-TLS-REISSUE-BOOTSTRAP-PROOF-317R1\nANCHOR316_COMMIT=9eb9354ec63dd064cd835cce1a65ca2c91144a61\nMODE=READ_ONLY_SPB_TLS_REISSUE_BOOTSTRAP_PROOF\nCHANGES_MADE=false\nLIVE_TAR_DB_DATA_ALLOWED=NO\nCLOUD_WRITE_ATTEMPTS=0\nEXTERNAL_MUTATIONS=0\nSYSTEMD_MUTATIONS=0\nCERT_OR_KEY_CONTENTS_READ=NO\nCERTBOT_EXECUTIONS=0\nRCA316_POLICY_GATE_DEFECT=TLS_CERT_PERMISSION_WAS_TOO_STRICT_FOR_REISSUE_POLICY\nERROR_REGISTER_FRESH_READ=OK\nREFERENCE_FRESH_READ=OK\nRUNNER_SHA256=PASS\nFORWARDED_AGENT_READY=YES\nSPB_HOSTKEY_PIN=PASS\nSPB_ACCESS=PASS\nSPB_REMOTE_UID=1000\nSPB_ACTIVE_CONFIG_FILE_COUNT=34\nSPB_ACTIVE_CONFIG_UNREADABLE_COUNT=0\nSPB_ACTIVE_CONFIG_MISSING_COUNT=0\nSPB_ACTIVE_CONFIG_PREPOST_STABLE=YES\nSPB_ACTIVE_CONFIG_HASHSET_SHA256=d31b413b44634b62ee68808b6088b824609e70b1e140f1671851cadb418ca400\nSPB_SERVER_BLOCK_COUNT=32\nSPB_CERT_REF_COUNT=15\nSPB_KEY_REF_COUNT=15\nSPB_LE_LINEAGE_COUNT=15\nSPB_RENEWAL_CONFIG_COUNT=15\nSPB_RENEWAL_UNREADABLE_COUNT=0\nSPB_HTTP_BOOTSTRAP_NAME_COUNT=31\nSPB_OTHER_TLS_REF_COUNT=0\nSPB_SNAKEOIL_PAIR_COUNT=0\nSPB_SNAKEOIL_REGENERATABLE=NO\nSPB_NGINX_TEST_RC=1\nSPB_NGINX_STDERR_BYTES=548\nSPB_NGINX_STDERR_SHA256=2e6103318c56134cc5414c7c98846a7c6c32b1439c1ffd0df872beda643ed463\nSPB_NGINX_ANCHOR316_MATCH=NO\nSPB_NGINX_SERVICE_ACTIVE=YES\nSPB_CERT_KIND_COUNTS={\"letsencrypt\":15}\nSPB_KEY_KIND_COUNTS={\"letsencrypt\":15}\nSPB_CERT_PATH_STATUS_COUNTS={\"ANCESTOR_EACCES\":15}\nSPB_KEY_PATH_STATUS_COUNTS={\"ANCESTOR_EACCES\":15}\nSPB_RENEWAL_AUTH_COUNTS={\"webroot\":15}\nSPB_HTTP_BOOTSTRAP_MISSING_NAMES=[]\nSPB_HTTP_BOOTSTRAP_INSEPARABLE_NAMES=[\"chat.gram1.ru\",\"git-read.gram1.ru\",\"git.gram1.ru\",\"groups.chat.gram1.ru\",\"share.chat.gram1.ru\"]\nSPB_LINEAGES_WITHOUT_SERVER_NAMES=[]\nSPB_WILDCARD_NAMES=[]\nSPB_MULTI_LINEAGE_NAMES=[]\nSPB_POLICY_HOLD_REASONS=[\"HTTP_BOOTSTRAP_NOT_FILE_SEPARABLE\",\"NGINX_FAILURE_CLASS_NOT_REISSUE_COMPATIBLE\",\"NGINX_DIAGNOSTIC_DRIFT\",\"SNAKEOIL_PAIR_CARDINALITY\"]\nSPB_TLS_RECOVERY_STRATEGY=REISSUE_TLS_ON_RESTORE\nSPB_REISSUE_BOOTSTRAP_METHOD=WITHHOLD_TLS_SITE_FILES__START_HTTP_ONLY__ISSUE_CERTBOT_LINEAGES__ENABLE_TLS\nSPB_REISSUE_BOOTSTRAP_READY=NO\nSPB_POLICY_READY=NO\nROLE_HOLDS=[{\"reason\":\"SPB_TLS_REISSUE_BOOTSTRAP_NOT_READY\",\"role\":\"SPB_INGRESS\"}]\nPOLICY_CLOSURE_COMPLETE=NO\nSTATUS=OK\nPHASE=COMPLETE\nNEXT_GATE=VPS_POLICY_CLOSURE_REQUIRED\nSPB317_END=\n"
+}

runtime/history/SUPPORT-260913-INFRA-DR-BACKUPV2-SPB-TLS-REISSUE-BOOTSTRAP-PROOF-317R1.txt

@@ -0,0 +1,92 @@
+CHAT_OUTPUT_BEGIN
+COMMAND_ID=SUPPORT-260913-INFRA-DR-BACKUPV2-SPB-TLS-REISSUE-BOOTSTRAP-PROOF-317R1
+STATUS=OK
+RC=0
+HOST=pve01
+MODE=read-only
+COMPONENT=infra-dr-backupv2-spb-tls-reissue-bootstrap-proof
+REFERENCE_REGISTER_CHECK=OK
+REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
+ERROR_REGISTER_CHECK=OK
+ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
+COMMAND_SHA256=88cf61c768db0e78c22045087ad1ce99129f20c5aa20ac954ef3529eba9e8701
+DUPLICATE_FAILED_COMMAND_BLOCKED=false
+EXECUTION_STARTED=true
+CHANGE_DECLARED=false
+RESULT_CONTRACT_VALID=true
+RESULT_CONTRACT_STATUS=NOT_APPLICABLE
+RESULT_CONTRACT_ERROR=NONE
+COMMAND_RC=0
+CHANGES_MADE=false
+ROLLBACK_STARTED=false
+ROLLBACK_RESTORED=null
+MUTATION_OUTCOME=NO_MUTATION
+SANITIZED=yes
+SECRETS_INCLUDED=no
+PRIVATE_ADDRESSES_INCLUDED=no
+RAW_EVIDENCE_SHA256=2f3ca4bc7ed78745bf289ee523478f9fe4e2d7690e99086a774c0d21e56a3074
+SANITIZED_OUTPUT_SHA256=2f3ca4bc7ed78745bf289ee523478f9fe4e2d7690e99086a774c0d21e56a3074
+OUTPUT_BEGIN
+SPB317_BEGIN=
+COMMAND_ID=SUPPORT-260913-INFRA-DR-BACKUPV2-SPB-TLS-REISSUE-BOOTSTRAP-PROOF-317R1
+ANCHOR316_COMMIT=9eb9354ec63dd064cd835cce1a65ca2c91144a61
+MODE=READ_ONLY_SPB_TLS_REISSUE_BOOTSTRAP_PROOF
+CHANGES_MADE=false
+LIVE_TAR_DB_DATA_ALLOWED=NO
+CLOUD_WRITE_ATTEMPTS=0
+EXTERNAL_MUTATIONS=0
+SYSTEMD_MUTATIONS=0
+CERT_OR_KEY_CONTENTS_READ=NO
+CERTBOT_EXECUTIONS=0
+RCA316_POLICY_GATE_DEFECT=TLS_CERT_PERMISSION_WAS_TOO_STRICT_FOR_REISSUE_POLICY
+ERROR_REGISTER_FRESH_READ=OK
+REFERENCE_FRESH_READ=OK
+RUNNER_SHA256=PASS
+FORWARDED_AGENT_READY=YES
+SPB_HOSTKEY_PIN=PASS
+SPB_ACCESS=PASS
+SPB_REMOTE_UID=1000
+SPB_ACTIVE_CONFIG_FILE_COUNT=34
+SPB_ACTIVE_CONFIG_UNREADABLE_COUNT=0
+SPB_ACTIVE_CONFIG_MISSING_COUNT=0
+SPB_ACTIVE_CONFIG_PREPOST_STABLE=YES
+SPB_ACTIVE_CONFIG_HASHSET_SHA256=d31b413b44634b62ee68808b6088b824609e70b1e140f1671851cadb418ca400
+SPB_SERVER_BLOCK_COUNT=32
+SPB_CERT_REF_COUNT=15
+SPB_KEY_REF_COUNT=15
+SPB_LE_LINEAGE_COUNT=15
+SPB_RENEWAL_CONFIG_COUNT=15
+SPB_RENEWAL_UNREADABLE_COUNT=0
+SPB_HTTP_BOOTSTRAP_NAME_COUNT=31
+SPB_OTHER_TLS_REF_COUNT=0
+SPB_SNAKEOIL_PAIR_COUNT=0
+SPB_SNAKEOIL_REGENERATABLE=NO
+SPB_NGINX_TEST_RC=1
+SPB_NGINX_STDERR_BYTES=548
+SPB_NGINX_STDERR_SHA256=2e6103318c56134cc5414c7c98846a7c6c32b1439c1ffd0df872beda643ed463
+SPB_NGINX_ANCHOR316_MATCH=NO
+SPB_NGINX_SERVICE_ACTIVE=YES
+SPB_CERT_KIND_COUNTS={"letsencrypt":15}
+SPB_KEY_KIND_COUNTS={"letsencrypt":15}
+SPB_CERT_PATH_STATUS_COUNTS={"ANCESTOR_EACCES":15}
+SPB_KEY_PATH_STATUS_COUNTS={"ANCESTOR_EACCES":15}
+SPB_RENEWAL_AUTH_COUNTS={"webroot":15}
+SPB_HTTP_BOOTSTRAP_MISSING_NAMES=[]
+SPB_HTTP_BOOTSTRAP_INSEPARABLE_NAMES=["chat.gram1.ru","git-read.gram1.ru","git.gram1.ru","groups.chat.gram1.ru","share.chat.gram1.ru"]
+SPB_LINEAGES_WITHOUT_SERVER_NAMES=[]
+SPB_WILDCARD_NAMES=[]
+SPB_MULTI_LINEAGE_NAMES=[]
+SPB_POLICY_HOLD_REASONS=["HTTP_BOOTSTRAP_NOT_FILE_SEPARABLE","NGINX_FAILURE_CLASS_NOT_REISSUE_COMPATIBLE","NGINX_DIAGNOSTIC_DRIFT","SNAKEOIL_PAIR_CARDINALITY"]
+SPB_TLS_RECOVERY_STRATEGY=REISSUE_TLS_ON_RESTORE
+SPB_REISSUE_BOOTSTRAP_METHOD=WITHHOLD_TLS_SITE_FILES__START_HTTP_ONLY__ISSUE_CERTBOT_LINEAGES__ENABLE_TLS
+SPB_REISSUE_BOOTSTRAP_READY=NO
+SPB_POLICY_READY=NO
+ROLE_HOLDS=[{"reason":"SPB_TLS_REISSUE_BOOTSTRAP_NOT_READY","role":"SPB_INGRESS"}]
+POLICY_CLOSURE_COMPLETE=NO
+STATUS=OK
+PHASE=COMPLETE
+NEXT_GATE=VPS_POLICY_CLOSURE_REQUIRED
+SPB317_END=
+
+OUTPUT_END
+CHAT_OUTPUT_END

runtime/latest.json

@@ -1,19 +1,19 @@
 {
   "schema_version": 1,
   "channel": "homelab-runtime",
-  "command_id": "SUPPORT-260913-INFRA-DR-BACKUPV2-SPB-NGINX-TLS-FAILURE-CLASSIFIER-316R1",
+  "command_id": "SUPPORT-260913-INFRA-DR-BACKUPV2-SPB-TLS-REISSUE-BOOTSTRAP-PROOF-317R1",
   "status": "OK",
   "rc": 0,
   "host": "pve01",
   "mode": "read-only",
-  "component": "infra-dr-backupv2-spb-nginx-tls-failure-classifier",
-  "started_at_utc": "2026-09-13T15:46:56Z",
-  "finished_at_utc": "2026-09-13T15:47:00Z",
+  "component": "infra-dr-backupv2-spb-tls-reissue-bootstrap-proof",
+  "started_at_utc": "2026-09-13T16:04:00Z",
+  "finished_at_utc": "2026-09-13T16:04:03Z",
   "reference_register_checked": true,
   "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66",
   "error_register_checked": true,
   "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0",
-  "command_sha256": "a3473c7f472ba6ccf6bbe87d10cb5ce777d3f94ab43482ffa0fb9b5be2fbf274",
+  "command_sha256": "88cf61c768db0e78c22045087ad1ce99129f20c5aa20ac954ef3529eba9e8701",
   "duplicate_failed_command_blocked": false,
   "block_reason": null,
   "execution_started": true,
@@ -30,9 +30,9 @@
   "secrets_included": false,
   "private_addresses_included": false,
   "raw_evidence_retained_locally": true,
-  "raw_evidence_sha256": "f003fbd39d97bca796f7a0517b27162ef3d6ca89c64771eba4444d5dbc80a44b",
-  "sanitized_output_sha256": "f003fbd39d97bca796f7a0517b27162ef3d6ca89c64771eba4444d5dbc80a44b",
+  "raw_evidence_sha256": "2f3ca4bc7ed78745bf289ee523478f9fe4e2d7690e99086a774c0d21e56a3074",
+  "sanitized_output_sha256": "2f3ca4bc7ed78745bf289ee523478f9fe4e2d7690e99086a774c0d21e56a3074",
   "output_truncated_in_json": false,
   "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
-  "output": "SPB316_BEGIN=\nCOMMAND_ID=SUPPORT-260913-INFRA-DR-BACKUPV2-SPB-NGINX-TLS-FAILURE-CLASSIFIER-316R1\nANCHOR315_COMMIT=2581e478d622bb8503fe4211fa8a4e88f7651aef\nMODE=READ_ONLY_SPB_NGINX_TLS_FAILURE_CLASSIFIER\nCHANGES_MADE=false\nLIVE_TAR_DB_DATA_ALLOWED=NO\nCLOUD_WRITE_ATTEMPTS=0\nEXTERNAL_MUTATIONS=0\nSYSTEMD_MUTATIONS=0\nAUXILIARY_OR_REJECTED_VPS_PROBED=0\nERROR_REGISTER_FRESH_READ=OK\nERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0\nREFERENCE_FRESH_READ=OK\nREFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66\nRUNNER_SHA256=PASS\nFORWARDED_AGENT_READY=YES\nSPB_HOSTKEY_PIN=PASS\nSPB_ACCESS=PASS\nSPB_REMOTE_UID=1000\nSPB_NGINX_TEST_RC=1\nSPB_NGINX_STDERR_BYTES=548\nSPB_NGINX_STDERR_SHA256=fadd50e27b14a485257554b196f46881479adc3074f518af221c51ca89cee423\nSPB_CERT_REF_COUNT=16\nSPB_KEY_REF_COUNT=16\nSPB_KEY_REF_UNREADABLE=16\nSPB_CERT_REF_UNREADABLE=16\nSPB_INCLUDE_MATCH_COUNT=34\nSPB_INCLUDE_UNREADABLE=0\nSPB_RENEWAL_CONFIG_COUNT=15\nSPB_CERTBOT_PRESENT=YES\nSPB_TRACE_STATE=USED\nSPB_TRACE_EXTRA_EACCES_COUNT=1\nSPB_PERMISSION_PATH_COUNT=1\nSPB_TLS_KEY_PERMISSION_COUNT=0\nSPB_TLS_CERT_PERMISSION_COUNT=1\nSPB_CONFIG_INCLUDE_PERMISSION_COUNT=0\nSPB_EXPECTED_RUNTIME_PERMISSION_COUNT=0\nSPB_OTHER_PERMISSION_COUNT=0\nSPB_NONPERMISSION_FATAL_COUNT=0\nSPB_NGINX_FAILURE_CLASS=TLS_CERT_PERMISSION\nSPB_REISSUE_TLS_POLICY_COMPATIBLE=NO\nSPB_TLS_RECOVERY_STRATEGY=REISSUE_TLS_ON_RESTORE\nSPB_TLS_REISSUE_DEPENDENCY=DNS_AND_PUBLIC_HTTP_HTTPS_ROUTING\nSPB_POLICY_READY=NO\nROLE_HOLDS=[{\"reason\":\"SPB_NGINX_TLS_CERT_PERMISSION\",\"role\":\"SPB_INGRESS\"}]\nPOLICY_CLOSURE_COMPLETE=NO\nSTATUS=OK\nPHASE=COMPLETE\nNEXT_GATE=VPS_POLICY_CLOSURE_REQUIRED\nSPB316_END=\n"
+  "output": "SPB317_BEGIN=\nCOMMAND_ID=SUPPORT-260913-INFRA-DR-BACKUPV2-SPB-TLS-REISSUE-BOOTSTRAP-PROOF-317R1\nANCHOR316_COMMIT=9eb9354ec63dd064cd835cce1a65ca2c91144a61\nMODE=READ_ONLY_SPB_TLS_REISSUE_BOOTSTRAP_PROOF\nCHANGES_MADE=false\nLIVE_TAR_DB_DATA_ALLOWED=NO\nCLOUD_WRITE_ATTEMPTS=0\nEXTERNAL_MUTATIONS=0\nSYSTEMD_MUTATIONS=0\nCERT_OR_KEY_CONTENTS_READ=NO\nCERTBOT_EXECUTIONS=0\nRCA316_POLICY_GATE_DEFECT=TLS_CERT_PERMISSION_WAS_TOO_STRICT_FOR_REISSUE_POLICY\nERROR_REGISTER_FRESH_READ=OK\nREFERENCE_FRESH_READ=OK\nRUNNER_SHA256=PASS\nFORWARDED_AGENT_READY=YES\nSPB_HOSTKEY_PIN=PASS\nSPB_ACCESS=PASS\nSPB_REMOTE_UID=1000\nSPB_ACTIVE_CONFIG_FILE_COUNT=34\nSPB_ACTIVE_CONFIG_UNREADABLE_COUNT=0\nSPB_ACTIVE_CONFIG_MISSING_COUNT=0\nSPB_ACTIVE_CONFIG_PREPOST_STABLE=YES\nSPB_ACTIVE_CONFIG_HASHSET_SHA256=d31b413b44634b62ee68808b6088b824609e70b1e140f1671851cadb418ca400\nSPB_SERVER_BLOCK_COUNT=32\nSPB_CERT_REF_COUNT=15\nSPB_KEY_REF_COUNT=15\nSPB_LE_LINEAGE_COUNT=15\nSPB_RENEWAL_CONFIG_COUNT=15\nSPB_RENEWAL_UNREADABLE_COUNT=0\nSPB_HTTP_BOOTSTRAP_NAME_COUNT=31\nSPB_OTHER_TLS_REF_COUNT=0\nSPB_SNAKEOIL_PAIR_COUNT=0\nSPB_SNAKEOIL_REGENERATABLE=NO\nSPB_NGINX_TEST_RC=1\nSPB_NGINX_STDERR_BYTES=548\nSPB_NGINX_STDERR_SHA256=2e6103318c56134cc5414c7c98846a7c6c32b1439c1ffd0df872beda643ed463\nSPB_NGINX_ANCHOR316_MATCH=NO\nSPB_NGINX_SERVICE_ACTIVE=YES\nSPB_CERT_KIND_COUNTS={\"letsencrypt\":15}\nSPB_KEY_KIND_COUNTS={\"letsencrypt\":15}\nSPB_CERT_PATH_STATUS_COUNTS={\"ANCESTOR_EACCES\":15}\nSPB_KEY_PATH_STATUS_COUNTS={\"ANCESTOR_EACCES\":15}\nSPB_RENEWAL_AUTH_COUNTS={\"webroot\":15}\nSPB_HTTP_BOOTSTRAP_MISSING_NAMES=[]\nSPB_HTTP_BOOTSTRAP_INSEPARABLE_NAMES=[\"chat.gram1.ru\",\"git-read.gram1.ru\",\"git.gram1.ru\",\"groups.chat.gram1.ru\",\"share.chat.gram1.ru\"]\nSPB_LINEAGES_WITHOUT_SERVER_NAMES=[]\nSPB_WILDCARD_NAMES=[]\nSPB_MULTI_LINEAGE_NAMES=[]\nSPB_POLICY_HOLD_REASONS=[\"HTTP_BOOTSTRAP_NOT_FILE_SEPARABLE\",\"NGINX_FAILURE_CLASS_NOT_REISSUE_COMPATIBLE\",\"NGINX_DIAGNOSTIC_DRIFT\",\"SNAKEOIL_PAIR_CARDINALITY\"]\nSPB_TLS_RECOVERY_STRATEGY=REISSUE_TLS_ON_RESTORE\nSPB_REISSUE_BOOTSTRAP_METHOD=WITHHOLD_TLS_SITE_FILES__START_HTTP_ONLY__ISSUE_CERTBOT_LINEAGES__ENABLE_TLS\nSPB_REISSUE_BOOTSTRAP_READY=NO\nSPB_POLICY_READY=NO\nROLE_HOLDS=[{\"reason\":\"SPB_TLS_REISSUE_BOOTSTRAP_NOT_READY\",\"role\":\"SPB_INGRESS\"}]\nPOLICY_CLOSURE_COMPLETE=NO\nSTATUS=OK\nPHASE=COMPLETE\nNEXT_GATE=VPS_POLICY_CLOSURE_REQUIRED\nSPB317_END=\n"
 }

runtime/latest.txt

@@ -1,15 +1,15 @@
 CHAT_OUTPUT_BEGIN
-COMMAND_ID=SUPPORT-260913-INFRA-DR-BACKUPV2-SPB-NGINX-TLS-FAILURE-CLASSIFIER-316R1
+COMMAND_ID=SUPPORT-260913-INFRA-DR-BACKUPV2-SPB-TLS-REISSUE-BOOTSTRAP-PROOF-317R1
 STATUS=OK
 RC=0
 HOST=pve01
 MODE=read-only
-COMPONENT=infra-dr-backupv2-spb-nginx-tls-failure-classifier
+COMPONENT=infra-dr-backupv2-spb-tls-reissue-bootstrap-proof
 REFERENCE_REGISTER_CHECK=OK
 REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
 ERROR_REGISTER_CHECK=OK
 ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
-COMMAND_SHA256=a3473c7f472ba6ccf6bbe87d10cb5ce777d3f94ab43482ffa0fb9b5be2fbf274
+COMMAND_SHA256=88cf61c768db0e78c22045087ad1ce99129f20c5aa20ac954ef3529eba9e8701
 DUPLICATE_FAILED_COMMAND_BLOCKED=false
 EXECUTION_STARTED=true
 CHANGE_DECLARED=false
@@ -24,59 +24,69 @@ MUTATION_OUTCOME=NO_MUTATION
 SANITIZED=yes
 SECRETS_INCLUDED=no
 PRIVATE_ADDRESSES_INCLUDED=no
-RAW_EVIDENCE_SHA256=f003fbd39d97bca796f7a0517b27162ef3d6ca89c64771eba4444d5dbc80a44b
-SANITIZED_OUTPUT_SHA256=f003fbd39d97bca796f7a0517b27162ef3d6ca89c64771eba4444d5dbc80a44b
+RAW_EVIDENCE_SHA256=2f3ca4bc7ed78745bf289ee523478f9fe4e2d7690e99086a774c0d21e56a3074
+SANITIZED_OUTPUT_SHA256=2f3ca4bc7ed78745bf289ee523478f9fe4e2d7690e99086a774c0d21e56a3074
 OUTPUT_BEGIN
-SPB316_BEGIN=
-COMMAND_ID=SUPPORT-260913-INFRA-DR-BACKUPV2-SPB-NGINX-TLS-FAILURE-CLASSIFIER-316R1
-ANCHOR315_COMMIT=2581e478d622bb8503fe4211fa8a4e88f7651aef
-MODE=READ_ONLY_SPB_NGINX_TLS_FAILURE_CLASSIFIER
+SPB317_BEGIN=
+COMMAND_ID=SUPPORT-260913-INFRA-DR-BACKUPV2-SPB-TLS-REISSUE-BOOTSTRAP-PROOF-317R1
+ANCHOR316_COMMIT=9eb9354ec63dd064cd835cce1a65ca2c91144a61
+MODE=READ_ONLY_SPB_TLS_REISSUE_BOOTSTRAP_PROOF
 CHANGES_MADE=false
 LIVE_TAR_DB_DATA_ALLOWED=NO
 CLOUD_WRITE_ATTEMPTS=0
 EXTERNAL_MUTATIONS=0
 SYSTEMD_MUTATIONS=0
-AUXILIARY_OR_REJECTED_VPS_PROBED=0
+CERT_OR_KEY_CONTENTS_READ=NO
+CERTBOT_EXECUTIONS=0
+RCA316_POLICY_GATE_DEFECT=TLS_CERT_PERMISSION_WAS_TOO_STRICT_FOR_REISSUE_POLICY
 ERROR_REGISTER_FRESH_READ=OK
-ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
 REFERENCE_FRESH_READ=OK
-REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
 RUNNER_SHA256=PASS
 FORWARDED_AGENT_READY=YES
 SPB_HOSTKEY_PIN=PASS
 SPB_ACCESS=PASS
 SPB_REMOTE_UID=1000
+SPB_ACTIVE_CONFIG_FILE_COUNT=34
+SPB_ACTIVE_CONFIG_UNREADABLE_COUNT=0
+SPB_ACTIVE_CONFIG_MISSING_COUNT=0
+SPB_ACTIVE_CONFIG_PREPOST_STABLE=YES
+SPB_ACTIVE_CONFIG_HASHSET_SHA256=d31b413b44634b62ee68808b6088b824609e70b1e140f1671851cadb418ca400
+SPB_SERVER_BLOCK_COUNT=32
+SPB_CERT_REF_COUNT=15
+SPB_KEY_REF_COUNT=15
+SPB_LE_LINEAGE_COUNT=15
+SPB_RENEWAL_CONFIG_COUNT=15
+SPB_RENEWAL_UNREADABLE_COUNT=0
+SPB_HTTP_BOOTSTRAP_NAME_COUNT=31
+SPB_OTHER_TLS_REF_COUNT=0
+SPB_SNAKEOIL_PAIR_COUNT=0
+SPB_SNAKEOIL_REGENERATABLE=NO
 SPB_NGINX_TEST_RC=1
 SPB_NGINX_STDERR_BYTES=548
-SPB_NGINX_STDERR_SHA256=fadd50e27b14a485257554b196f46881479adc3074f518af221c51ca89cee423
-SPB_CERT_REF_COUNT=16
-SPB_KEY_REF_COUNT=16
-SPB_KEY_REF_UNREADABLE=16
-SPB_CERT_REF_UNREADABLE=16
-SPB_INCLUDE_MATCH_COUNT=34
-SPB_INCLUDE_UNREADABLE=0
-SPB_RENEWAL_CONFIG_COUNT=15
-SPB_CERTBOT_PRESENT=YES
-SPB_TRACE_STATE=USED
-SPB_TRACE_EXTRA_EACCES_COUNT=1
-SPB_PERMISSION_PATH_COUNT=1
-SPB_TLS_KEY_PERMISSION_COUNT=0
-SPB_TLS_CERT_PERMISSION_COUNT=1
-SPB_CONFIG_INCLUDE_PERMISSION_COUNT=0
-SPB_EXPECTED_RUNTIME_PERMISSION_COUNT=0
-SPB_OTHER_PERMISSION_COUNT=0
-SPB_NONPERMISSION_FATAL_COUNT=0
-SPB_NGINX_FAILURE_CLASS=TLS_CERT_PERMISSION
-SPB_REISSUE_TLS_POLICY_COMPATIBLE=NO
+SPB_NGINX_STDERR_SHA256=2e6103318c56134cc5414c7c98846a7c6c32b1439c1ffd0df872beda643ed463
+SPB_NGINX_ANCHOR316_MATCH=NO
+SPB_NGINX_SERVICE_ACTIVE=YES
+SPB_CERT_KIND_COUNTS={"letsencrypt":15}
+SPB_KEY_KIND_COUNTS={"letsencrypt":15}
+SPB_CERT_PATH_STATUS_COUNTS={"ANCESTOR_EACCES":15}
+SPB_KEY_PATH_STATUS_COUNTS={"ANCESTOR_EACCES":15}
+SPB_RENEWAL_AUTH_COUNTS={"webroot":15}
+SPB_HTTP_BOOTSTRAP_MISSING_NAMES=[]
+SPB_HTTP_BOOTSTRAP_INSEPARABLE_NAMES=["chat.gram1.ru","git-read.gram1.ru","git.gram1.ru","groups.chat.gram1.ru","share.chat.gram1.ru"]
+SPB_LINEAGES_WITHOUT_SERVER_NAMES=[]
+SPB_WILDCARD_NAMES=[]
+SPB_MULTI_LINEAGE_NAMES=[]
+SPB_POLICY_HOLD_REASONS=["HTTP_BOOTSTRAP_NOT_FILE_SEPARABLE","NGINX_FAILURE_CLASS_NOT_REISSUE_COMPATIBLE","NGINX_DIAGNOSTIC_DRIFT","SNAKEOIL_PAIR_CARDINALITY"]
 SPB_TLS_RECOVERY_STRATEGY=REISSUE_TLS_ON_RESTORE
-SPB_TLS_REISSUE_DEPENDENCY=DNS_AND_PUBLIC_HTTP_HTTPS_ROUTING
+SPB_REISSUE_BOOTSTRAP_METHOD=WITHHOLD_TLS_SITE_FILES__START_HTTP_ONLY__ISSUE_CERTBOT_LINEAGES__ENABLE_TLS
+SPB_REISSUE_BOOTSTRAP_READY=NO
 SPB_POLICY_READY=NO
-ROLE_HOLDS=[{"reason":"SPB_NGINX_TLS_CERT_PERMISSION","role":"SPB_INGRESS"}]
+ROLE_HOLDS=[{"reason":"SPB_TLS_REISSUE_BOOTSTRAP_NOT_READY","role":"SPB_INGRESS"}]
 POLICY_CLOSURE_COMPLETE=NO
 STATUS=OK
 PHASE=COMPLETE
 NEXT_GATE=VPS_POLICY_CLOSURE_REQUIRED
-SPB316_END=
+SPB317_END=
 
 OUTPUT_END
 CHAT_OUTPUT_END