diff --git a/runtime/history/SUPPORT-260923-SPB-TLS-BRIDGE-OBSERVED-START-9161P1.json b/runtime/history/SUPPORT-260923-SPB-TLS-BRIDGE-OBSERVED-START-9161P1.json
new file mode 100644
index 00000000..04ab5e17
--- /dev/null
+++ b/runtime/history/SUPPORT-260923-SPB-TLS-BRIDGE-OBSERVED-START-9161P1.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": 1,
+  "channel": "homelab-runtime",
+  "command_id": "SUPPORT-260923-SPB-TLS-BRIDGE-OBSERVED-START-9161P1",
+  "status": "OK",
+  "rc": 0,
+  "host": "pve01",
+  "mode": "read-only",
+  "component": "spb-tls-bridge-observed-start",
+  "started_at_utc": "2026-09-23T01:37:24Z",
+  "finished_at_utc": "2026-09-23T01:37:24Z",
+  "reference_register_checked": true,
+  "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66",
+  "error_register_checked": true,
+  "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0",
+  "command_sha256": "594acd2bd97d8ff6cdef7024c232bb0756b8cf085a210931f428eaf29157a67f",
+  "duplicate_failed_command_blocked": false,
+  "block_reason": null,
+  "execution_started": true,
+  "change_declared": false,
+  "result_contract_valid": true,
+  "result_contract_status": null,
+  "result_contract_error": null,
+  "command_rc": 0,
+  "changes_made": false,
+  "rollback_started": false,
+  "rollback_restored": null,
+  "mutation_outcome": "NO_MUTATION",
+  "sanitized": true,
+  "secrets_included": false,
+  "private_addresses_included": false,
+  "raw_evidence_retained_locally": true,
+  "raw_evidence_sha256": "1840d996e4cd82486064c98573af4d7b040bce740f93e7ca7857f4158d459829",
+  "sanitized_output_sha256": "1840d996e4cd82486064c98573af4d7b040bce740f93e7ca7857f4158d459829",
+  "output_truncated_in_json": false,
+  "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
+  "output": "TASK_COMPLETE=true\nTASK_RESULT=PASS_SPB_TLS_BRIDGE_OBSERVED_START\nDECISION=BEGIN_SPB_SOURCE_FOR_BRIDGE\nHELPER_SHA_SOURCE=9155F1\nBUNDLE_SHAPE=EXACT_EMBEDDED_HELPER_CONTRACT\nPASSWORD_CACHE=WINDOWS_DPAPI_REQUIRED\nSPB_HOSTKEY_POLICY=PINNED_FROM_9153S1\nSPB_MUTATION=NO\nVM130_MUTATION=NO\nDNS_WRITE=NO\n"
+}
diff --git a/runtime/history/SUPPORT-260923-SPB-TLS-BRIDGE-OBSERVED-START-9161P1.txt b/runtime/history/SUPPORT-260923-SPB-TLS-BRIDGE-OBSERVED-START-9161P1.txt
new file mode 100644
index 00000000..26e17401
--- /dev/null
+++ b/runtime/history/SUPPORT-260923-SPB-TLS-BRIDGE-OBSERVED-START-9161P1.txt
@@ -0,0 +1,42 @@
+CHAT_OUTPUT_BEGIN
+COMMAND_ID=SUPPORT-260923-SPB-TLS-BRIDGE-OBSERVED-START-9161P1
+STATUS=OK
+RC=0
+HOST=pve01
+MODE=read-only
+COMPONENT=spb-tls-bridge-observed-start
+REFERENCE_REGISTER_CHECK=OK
+REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
+ERROR_REGISTER_CHECK=OK
+ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
+COMMAND_SHA256=594acd2bd97d8ff6cdef7024c232bb0756b8cf085a210931f428eaf29157a67f
+DUPLICATE_FAILED_COMMAND_BLOCKED=false
+EXECUTION_STARTED=true
+CHANGE_DECLARED=false
+RESULT_CONTRACT_VALID=true
+RESULT_CONTRACT_STATUS=NOT_APPLICABLE
+RESULT_CONTRACT_ERROR=NONE
+COMMAND_RC=0
+CHANGES_MADE=false
+ROLLBACK_STARTED=false
+ROLLBACK_RESTORED=null
+MUTATION_OUTCOME=NO_MUTATION
+SANITIZED=yes
+SECRETS_INCLUDED=no
+PRIVATE_ADDRESSES_INCLUDED=no
+RAW_EVIDENCE_SHA256=1840d996e4cd82486064c98573af4d7b040bce740f93e7ca7857f4158d459829
+SANITIZED_OUTPUT_SHA256=1840d996e4cd82486064c98573af4d7b040bce740f93e7ca7857f4158d459829
+OUTPUT_BEGIN
+TASK_COMPLETE=true
+TASK_RESULT=PASS_SPB_TLS_BRIDGE_OBSERVED_START
+DECISION=BEGIN_SPB_SOURCE_FOR_BRIDGE
+HELPER_SHA_SOURCE=9155F1
+BUNDLE_SHAPE=EXACT_EMBEDDED_HELPER_CONTRACT
+PASSWORD_CACHE=WINDOWS_DPAPI_REQUIRED
+SPB_HOSTKEY_POLICY=PINNED_FROM_9153S1
+SPB_MUTATION=NO
+VM130_MUTATION=NO
+DNS_WRITE=NO
+
+OUTPUT_END
+CHAT_OUTPUT_END
diff --git a/runtime/latest.json b/runtime/latest.json
index f01d122c..04ab5e17 100644
--- a/runtime/latest.json
+++ b/runtime/latest.json
@@ -1,38 +1,38 @@
 {
   "schema_version": 1,
   "channel": "homelab-runtime",
-  "command_id": "SUPPORT-260923-PVEPRO-MAIL-CHECKPOINT13-APPLY-911R1",
-  "status": "FAIL",
-  "rc": 76,
+  "command_id": "SUPPORT-260923-SPB-TLS-BRIDGE-OBSERVED-START-9161P1",
+  "status": "OK",
+  "rc": 0,
   "host": "pve01",
-  "mode": "change",
-  "component": "pvepro-mail-checkpoint13-apply",
-  "started_at_utc": "2026-09-23T01:28:16Z",
-  "finished_at_utc": "2026-09-23T01:28:29Z",
+  "mode": "read-only",
+  "component": "spb-tls-bridge-observed-start",
+  "started_at_utc": "2026-09-23T01:37:24Z",
+  "finished_at_utc": "2026-09-23T01:37:24Z",
   "reference_register_checked": true,
   "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66",
   "error_register_checked": true,
   "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0",
-  "command_sha256": "0c41d15c1abb1c40812813778f9f84813bf3e12d8c2491b9447c200a9ec4585e",
+  "command_sha256": "594acd2bd97d8ff6cdef7024c232bb0756b8cf085a210931f428eaf29157a67f",
   "duplicate_failed_command_blocked": false,
   "block_reason": null,
   "execution_started": true,
-  "change_declared": true,
-  "result_contract_valid": false,
+  "change_declared": false,
+  "result_contract_valid": true,
   "result_contract_status": null,
-  "result_contract_error": "INVALID_CONTRACT:ValueError",
-  "command_rc": 4,
-  "changes_made": null,
-  "rollback_started": null,
+  "result_contract_error": null,
+  "command_rc": 0,
+  "changes_made": false,
+  "rollback_started": false,
   "rollback_restored": null,
-  "mutation_outcome": "UNKNOWN",
+  "mutation_outcome": "NO_MUTATION",
   "sanitized": true,
   "secrets_included": false,
   "private_addresses_included": false,
   "raw_evidence_retained_locally": true,
-  "raw_evidence_sha256": "27b449410dc40ed359cf79e260900266cdda6edd04f8004b5d474bc61003d25d",
-  "sanitized_output_sha256": "27b449410dc40ed359cf79e260900266cdda6edd04f8004b5d474bc61003d25d",
+  "raw_evidence_sha256": "1840d996e4cd82486064c98573af4d7b040bce740f93e7ca7857f4158d459829",
+  "sanitized_output_sha256": "1840d996e4cd82486064c98573af4d7b040bce740f93e7ca7857f4158d459829",
   "output_truncated_in_json": false,
   "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
-  "output": "PVEPRO911_BEGIN=true\nCOMMAND_ID=SUPPORT-260923-PVEPRO-MAIL-CHECKPOINT13-APPLY-911R1\nMODE=change\nCOMPONENT=pvepro-mail-checkpoint13-apply\nPREDECESSOR_910=PASS_PVEPRO910_EDITORIAL20_CLOSED_MAIL13_PRECHECK\nCHECKPOINT20_ALREADY_CLOSED=true\nMUTATION_BOUNDARY=VM100_ONLY;INSTALL_MSMTP_MTA;ROOT_ONLY_CREDENTIAL_FILE_WITH_PHP_FPM_GROUP_READ;NO_DB_WRITE;NO_VM_CONFIG;NO_CLOUD;ONE_MAIL_SMOKE\nREFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66\nERROR_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0\nPROD_AGENT_RC=0\nMAILREF_AGENT_RC=0\nPRE_TRANSPORT_RC=0\nPRE_GUEST|exited=1|exitcode=0\nMAIL13_PRESTATE=MSMTP_PACKAGE=false|MSMTP_MTA_PACKAGE=false|SENDMAIL_EXEC=false|MSMTPRC_EXISTS=false|SECRET_EXISTS=false|HELPER_EXISTS=false||\nIDENT_TRANSPORT_RC=0\nIDENT_GUEST|exited=1|exitcode=0\nMAIL_IDENTITY|from_sha=5f0a0a76896d1a417b76a94700360e162c89daa193a3ccb8af6ee819923348e4|to_sha=5f0a0a76896d1a417b76a94700360e162c89daa193a3ccb8af6ee819923348e4|transport_type=boolean\nREF_TRANSPORT_RC=0\nREF_GUEST|exited=1|exitcode=0\nMAIL_REFERENCE|config_sha=dcfb2d8708a28f91fecd744e01dbef1b942acbcb27afb423e7012a8c833fa2cf|password_len=16|host_sha=8a209c88d3cb22cad1accce9909e67c43ebf9e4a61fab9b565f3686c95e4dfed|user_sha=0d4cf60ca8cd53a12ad50dc5419d3c9c32192f0852000eb10051fbdef52b04bf|from_sha=0d4cf60ca8cd53a12ad50dc5419d3c9c32192f0852000eb10051fbdef52b04bf\nINSTALL_TRANSPORT_RC=0\nINSTALL_GUEST|exited=1|exitcode=0\nAPPLY_TRANSPORT_RC=0\nAPPLY_GUEST|exited=1|exitcode=1\nFAILURE=MAIL_FILES_APPLY_FAILED\nMAIL_FILES_APPLY_SHA256=01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b\nROLLBACK_TRANSPORT_RC=0\nROLLBACK_GUEST|exited=1|exitcode=0\nMAIL13_ROLLBACK_RESTORED=true\nCHECKPOINT13_MAIL_COMPLETE=false\nCHECKPOINT13_OPEN=true\nCHECKPOINT14_OPEN=true\nPRODUCT_CHECKPOINTS_REMAINING=6\nDECISION=HOLD_PVEPRO911_MAIL_CHECKPOINT13\nNEXT_GATE=RECONCILE_ONLY_PVEPRO911_FAILURE\nTASK_RESULT=HOLD_PVEPRO_MAIL_CHECKPOINT13\nCHANGES_MADE_BY_911=false\nDB_MUTATION_BY_911=false\nVM_CONFIG_MUTATION_BY_911=false\nCLOUD_MUTATION_BY_911=false\nROLLBACK_STARTED=true\nROLLBACK_RESTORED=true\nHOMELAB_RESULT_CONTRACT={\"version\":1,\"command_id\":\"SUPPORT-260923-PVEPRO-MAIL-CHECKPOINT13-APPLY-911R1\",\"status\":\"FAIL\",\"changes_made\":false,\"rollback_started\":true,\"rollback_restored\":true}\nPVEPRO911_END=true\n"
+  "output": "TASK_COMPLETE=true\nTASK_RESULT=PASS_SPB_TLS_BRIDGE_OBSERVED_START\nDECISION=BEGIN_SPB_SOURCE_FOR_BRIDGE\nHELPER_SHA_SOURCE=9155F1\nBUNDLE_SHAPE=EXACT_EMBEDDED_HELPER_CONTRACT\nPASSWORD_CACHE=WINDOWS_DPAPI_REQUIRED\nSPB_HOSTKEY_POLICY=PINNED_FROM_9153S1\nSPB_MUTATION=NO\nVM130_MUTATION=NO\nDNS_WRITE=NO\n"
 }
diff --git a/runtime/latest.txt b/runtime/latest.txt
index eaa07ddb..26e17401 100644
--- a/runtime/latest.txt
+++ b/runtime/latest.txt
@@ -1,76 +1,42 @@
 CHAT_OUTPUT_BEGIN
-COMMAND_ID=SUPPORT-260923-PVEPRO-MAIL-CHECKPOINT13-APPLY-911R1
-STATUS=FAIL
-RC=76
+COMMAND_ID=SUPPORT-260923-SPB-TLS-BRIDGE-OBSERVED-START-9161P1
+STATUS=OK
+RC=0
 HOST=pve01
-MODE=change
-COMPONENT=pvepro-mail-checkpoint13-apply
+MODE=read-only
+COMPONENT=spb-tls-bridge-observed-start
 REFERENCE_REGISTER_CHECK=OK
 REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
 ERROR_REGISTER_CHECK=OK
 ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
-COMMAND_SHA256=0c41d15c1abb1c40812813778f9f84813bf3e12d8c2491b9447c200a9ec4585e
+COMMAND_SHA256=594acd2bd97d8ff6cdef7024c232bb0756b8cf085a210931f428eaf29157a67f
 DUPLICATE_FAILED_COMMAND_BLOCKED=false
 EXECUTION_STARTED=true
-CHANGE_DECLARED=true
-RESULT_CONTRACT_VALID=false
-RESULT_CONTRACT_STATUS=UNKNOWN
-RESULT_CONTRACT_ERROR=INVALID_CONTRACT:ValueError
-COMMAND_RC=4
-CHANGES_MADE=unknown
-ROLLBACK_STARTED=unknown
+CHANGE_DECLARED=false
+RESULT_CONTRACT_VALID=true
+RESULT_CONTRACT_STATUS=NOT_APPLICABLE
+RESULT_CONTRACT_ERROR=NONE
+COMMAND_RC=0
+CHANGES_MADE=false
+ROLLBACK_STARTED=false
 ROLLBACK_RESTORED=null
-MUTATION_OUTCOME=UNKNOWN
+MUTATION_OUTCOME=NO_MUTATION
 SANITIZED=yes
 SECRETS_INCLUDED=no
 PRIVATE_ADDRESSES_INCLUDED=no
-RAW_EVIDENCE_SHA256=27b449410dc40ed359cf79e260900266cdda6edd04f8004b5d474bc61003d25d
-SANITIZED_OUTPUT_SHA256=27b449410dc40ed359cf79e260900266cdda6edd04f8004b5d474bc61003d25d
+RAW_EVIDENCE_SHA256=1840d996e4cd82486064c98573af4d7b040bce740f93e7ca7857f4158d459829
+SANITIZED_OUTPUT_SHA256=1840d996e4cd82486064c98573af4d7b040bce740f93e7ca7857f4158d459829
 OUTPUT_BEGIN
-PVEPRO911_BEGIN=true
-COMMAND_ID=SUPPORT-260923-PVEPRO-MAIL-CHECKPOINT13-APPLY-911R1
-MODE=change
-COMPONENT=pvepro-mail-checkpoint13-apply
-PREDECESSOR_910=PASS_PVEPRO910_EDITORIAL20_CLOSED_MAIL13_PRECHECK
-CHECKPOINT20_ALREADY_CLOSED=true
-MUTATION_BOUNDARY=VM100_ONLY;INSTALL_MSMTP_MTA;ROOT_ONLY_CREDENTIAL_FILE_WITH_PHP_FPM_GROUP_READ;NO_DB_WRITE;NO_VM_CONFIG;NO_CLOUD;ONE_MAIL_SMOKE
-REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
-ERROR_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
-PROD_AGENT_RC=0
-MAILREF_AGENT_RC=0
-PRE_TRANSPORT_RC=0
-PRE_GUEST|exited=1|exitcode=0
-MAIL13_PRESTATE=MSMTP_PACKAGE=false|MSMTP_MTA_PACKAGE=false|SENDMAIL_EXEC=false|MSMTPRC_EXISTS=false|SECRET_EXISTS=false|HELPER_EXISTS=false||
-IDENT_TRANSPORT_RC=0
-IDENT_GUEST|exited=1|exitcode=0
-MAIL_IDENTITY|from_sha=5f0a0a76896d1a417b76a94700360e162c89daa193a3ccb8af6ee819923348e4|to_sha=5f0a0a76896d1a417b76a94700360e162c89daa193a3ccb8af6ee819923348e4|transport_type=boolean
-REF_TRANSPORT_RC=0
-REF_GUEST|exited=1|exitcode=0
-MAIL_REFERENCE|config_sha=dcfb2d8708a28f91fecd744e01dbef1b942acbcb27afb423e7012a8c833fa2cf|password_len=16|host_sha=8a209c88d3cb22cad1accce9909e67c43ebf9e4a61fab9b565f3686c95e4dfed|user_sha=0d4cf60ca8cd53a12ad50dc5419d3c9c32192f0852000eb10051fbdef52b04bf|from_sha=0d4cf60ca8cd53a12ad50dc5419d3c9c32192f0852000eb10051fbdef52b04bf
-INSTALL_TRANSPORT_RC=0
-INSTALL_GUEST|exited=1|exitcode=0
-APPLY_TRANSPORT_RC=0
-APPLY_GUEST|exited=1|exitcode=1
-FAILURE=MAIL_FILES_APPLY_FAILED
-MAIL_FILES_APPLY_SHA256=01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b
-ROLLBACK_TRANSPORT_RC=0
-ROLLBACK_GUEST|exited=1|exitcode=0
-MAIL13_ROLLBACK_RESTORED=true
-CHECKPOINT13_MAIL_COMPLETE=false
-CHECKPOINT13_OPEN=true
-CHECKPOINT14_OPEN=true
-PRODUCT_CHECKPOINTS_REMAINING=6
-DECISION=HOLD_PVEPRO911_MAIL_CHECKPOINT13
-NEXT_GATE=RECONCILE_ONLY_PVEPRO911_FAILURE
-TASK_RESULT=HOLD_PVEPRO_MAIL_CHECKPOINT13
-CHANGES_MADE_BY_911=false
-DB_MUTATION_BY_911=false
-VM_CONFIG_MUTATION_BY_911=false
-CLOUD_MUTATION_BY_911=false
-ROLLBACK_STARTED=true
-ROLLBACK_RESTORED=true
-HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"SUPPORT-260923-PVEPRO-MAIL-CHECKPOINT13-APPLY-911R1","status":"FAIL","changes_made":false,"rollback_started":true,"rollback_restored":true}
-PVEPRO911_END=true
+TASK_COMPLETE=true
+TASK_RESULT=PASS_SPB_TLS_BRIDGE_OBSERVED_START
+DECISION=BEGIN_SPB_SOURCE_FOR_BRIDGE
+HELPER_SHA_SOURCE=9155F1
+BUNDLE_SHAPE=EXACT_EMBEDDED_HELPER_CONTRACT
+PASSWORD_CACHE=WINDOWS_DPAPI_REQUIRED
+SPB_HOSTKEY_POLICY=PINNED_FROM_9153S1
+SPB_MUTATION=NO
+VM130_MUTATION=NO
+DNS_WRITE=NO
 
 OUTPUT_END
 CHAT_OUTPUT_END