diff --git a/runtime/history/SUPPORT-260923-SPB-TLS-BRIDGE-OBSERVED-START-9164P1.json b/runtime/history/SUPPORT-260923-SPB-TLS-BRIDGE-OBSERVED-START-9164P1.json
index b5e7435d..fec1c315 100644
--- a/runtime/history/SUPPORT-260923-SPB-TLS-BRIDGE-OBSERVED-START-9164P1.json
+++ b/runtime/history/SUPPORT-260923-SPB-TLS-BRIDGE-OBSERVED-START-9164P1.json
@@ -7,8 +7,8 @@
   "host": "pve01",
   "mode": "read-only",
   "component": "spb-tls-bridge-observed-start",
-  "started_at_utc": "2026-09-23T01:54:20Z",
-  "finished_at_utc": "2026-09-23T01:54:20Z",
+  "started_at_utc": "2026-09-23T01:55:04Z",
+  "finished_at_utc": "2026-09-23T01:55:04Z",
   "reference_register_checked": true,
   "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66",
   "error_register_checked": true,
diff --git a/runtime/latest.json b/runtime/latest.json
index 77743bb1..fec1c315 100644
--- a/runtime/latest.json
+++ b/runtime/latest.json
@@ -1,27 +1,27 @@
 {
   "schema_version": 1,
   "channel": "homelab-runtime",
-  "command_id": "SUPPORT-260923-SPB-TLS-BRIDGE-EXEC-9164R1",
-  "status": "FAIL",
-  "rc": 72,
+  "command_id": "SUPPORT-260923-SPB-TLS-BRIDGE-OBSERVED-START-9164P1",
+  "status": "OK",
+  "rc": 0,
   "host": "pve01",
-  "mode": "change",
-  "component": "spb-tls-bridge-to-home",
-  "started_at_utc": "2026-09-23T01:54:25Z",
-  "finished_at_utc": "2026-09-23T01:54:32Z",
+  "mode": "read-only",
+  "component": "spb-tls-bridge-observed-start",
+  "started_at_utc": "2026-09-23T01:55:04Z",
+  "finished_at_utc": "2026-09-23T01:55:04Z",
   "reference_register_checked": true,
   "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66",
   "error_register_checked": true,
   "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0",
-  "command_sha256": "ea851321e24864c6bd7e50f3b53445870139741f4e36355f9dd1f098827619b8",
+  "command_sha256": "d45887659e1ddbda5074a4e444a9b420a6feb0285b21aa2a0eea647a206c844c",
   "duplicate_failed_command_blocked": false,
   "block_reason": null,
   "execution_started": true,
-  "change_declared": true,
+  "change_declared": false,
   "result_contract_valid": true,
-  "result_contract_status": "FAIL",
+  "result_contract_status": null,
   "result_contract_error": null,
-  "command_rc": 72,
+  "command_rc": 0,
   "changes_made": false,
   "rollback_started": false,
   "rollback_restored": null,
@@ -30,9 +30,9 @@
   "secrets_included": false,
   "private_addresses_included": false,
   "raw_evidence_retained_locally": true,
-  "raw_evidence_sha256": "225a8098c06517372786c8e1bf0937b2f62974ddcca3e172379a569c4419440c",
-  "sanitized_output_sha256": "225a8098c06517372786c8e1bf0937b2f62974ddcca3e172379a569c4419440c",
+  "raw_evidence_sha256": "c5cb41e0056169cdec845b7f313f1753689fff5602ae2d48e99b771b4cf2dd31",
+  "sanitized_output_sha256": "c5cb41e0056169cdec845b7f313f1753689fff5602ae2d48e99b771b4cf2dd31",
   "output_truncated_in_json": false,
   "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
-  "output": "ARRAY_SCHEMA_TRY=1:schema_domains_array:DOMAIN_SET_FAIL\nARRAY_SCHEMA_TRY=2:domains_array:DOMAIN_SET_FAIL\nARRAY_SCHEMA_SELECTED=3:root_array\nSPB_TLS_BRIDGE_TRANSPORT={\"pve03_rc\":0,\"guest_rc\":1,\"stdout_sha\":null,\"stderr_sha\":\"b6acca03c4d29eff\"}\nTASK_COMPLETE=true\nTASK_RESULT=FAIL_SPB_TLS_BRIDGE_NO_RESULT\nDECISION=HOLD_SPB_ON\nHOMELAB_RESULT_CONTRACT={\"version\":1,\"command_id\":\"SUPPORT-260923-SPB-TLS-BRIDGE-EXEC-9164R1\",\"status\":\"FAIL\",\"changes_made\":false,\"rollback_started\":false,\"rollback_restored\":null}\n"
+  "output": "TASK_COMPLETE=true\nTASK_RESULT=PASS_SPB_TLS_BRIDGE_OBSERVED_START\nDECISION=BEGIN_SPB_SOURCE_FOR_BRIDGE\nHELPER_SHA_SOURCE=9155F1\nBUNDLE_SHAPE=EVIDENCE_BACKED_DOMAINS_ARRAY\nPASSWORD_CACHE=WINDOWS_DPAPI_REQUIRED\nSPB_HOSTKEY_POLICY=PINNED_FROM_9153S1\nSPB_MUTATION=NO\nVM130_MUTATION=NO\nDNS_WRITE=NO\n"
 }
diff --git a/runtime/latest.txt b/runtime/latest.txt
index 5dc1acb4..2695a75f 100644
--- a/runtime/latest.txt
+++ b/runtime/latest.txt
@@ -1,22 +1,22 @@
 CHAT_OUTPUT_BEGIN
-COMMAND_ID=SUPPORT-260923-SPB-TLS-BRIDGE-EXEC-9164R1
-STATUS=FAIL
-RC=72
+COMMAND_ID=SUPPORT-260923-SPB-TLS-BRIDGE-OBSERVED-START-9164P1
+STATUS=OK
+RC=0
 HOST=pve01
-MODE=change
-COMPONENT=spb-tls-bridge-to-home
+MODE=read-only
+COMPONENT=spb-tls-bridge-observed-start
 REFERENCE_REGISTER_CHECK=OK
 REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
 ERROR_REGISTER_CHECK=OK
 ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
-COMMAND_SHA256=ea851321e24864c6bd7e50f3b53445870139741f4e36355f9dd1f098827619b8
+COMMAND_SHA256=d45887659e1ddbda5074a4e444a9b420a6feb0285b21aa2a0eea647a206c844c
 DUPLICATE_FAILED_COMMAND_BLOCKED=false
 EXECUTION_STARTED=true
-CHANGE_DECLARED=true
+CHANGE_DECLARED=false
 RESULT_CONTRACT_VALID=true
-RESULT_CONTRACT_STATUS=FAIL
+RESULT_CONTRACT_STATUS=NOT_APPLICABLE
 RESULT_CONTRACT_ERROR=NONE
-COMMAND_RC=72
+COMMAND_RC=0
 CHANGES_MADE=false
 ROLLBACK_STARTED=false
 ROLLBACK_RESTORED=null
@@ -24,17 +24,19 @@ MUTATION_OUTCOME=NO_MUTATION
 SANITIZED=yes
 SECRETS_INCLUDED=no
 PRIVATE_ADDRESSES_INCLUDED=no
-RAW_EVIDENCE_SHA256=225a8098c06517372786c8e1bf0937b2f62974ddcca3e172379a569c4419440c
-SANITIZED_OUTPUT_SHA256=225a8098c06517372786c8e1bf0937b2f62974ddcca3e172379a569c4419440c
+RAW_EVIDENCE_SHA256=c5cb41e0056169cdec845b7f313f1753689fff5602ae2d48e99b771b4cf2dd31
+SANITIZED_OUTPUT_SHA256=c5cb41e0056169cdec845b7f313f1753689fff5602ae2d48e99b771b4cf2dd31
 OUTPUT_BEGIN
-ARRAY_SCHEMA_TRY=1:schema_domains_array:DOMAIN_SET_FAIL
-ARRAY_SCHEMA_TRY=2:domains_array:DOMAIN_SET_FAIL
-ARRAY_SCHEMA_SELECTED=3:root_array
-SPB_TLS_BRIDGE_TRANSPORT={"pve03_rc":0,"guest_rc":1,"stdout_sha":null,"stderr_sha":"b6acca03c4d29eff"}
-TASK_COMPLETE=true
-TASK_RESULT=FAIL_SPB_TLS_BRIDGE_NO_RESULT
-DECISION=HOLD_SPB_ON
-HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"SUPPORT-260923-SPB-TLS-BRIDGE-EXEC-9164R1","status":"FAIL","changes_made":false,"rollback_started":false,"rollback_restored":null}
+TASK_COMPLETE=true
+TASK_RESULT=PASS_SPB_TLS_BRIDGE_OBSERVED_START
+DECISION=BEGIN_SPB_SOURCE_FOR_BRIDGE
+HELPER_SHA_SOURCE=9155F1
+BUNDLE_SHAPE=EVIDENCE_BACKED_DOMAINS_ARRAY
+PASSWORD_CACHE=WINDOWS_DPAPI_REQUIRED
+SPB_HOSTKEY_POLICY=PINNED_FROM_9153S1
+SPB_MUTATION=NO
+VM130_MUTATION=NO
+DNS_WRITE=NO
 
 OUTPUT_END
 CHAT_OUTPUT_END