diff --git a/runtime/history/SUPPORT-260923-SPB-TLS-BRIDGE-OBSERVED-START-9162P1.json b/runtime/history/SUPPORT-260923-SPB-TLS-BRIDGE-OBSERVED-START-9162P1.json
new file mode 100644
index 00000000..9e3937f5
--- /dev/null
+++ b/runtime/history/SUPPORT-260923-SPB-TLS-BRIDGE-OBSERVED-START-9162P1.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": 1,
+  "channel": "homelab-runtime",
+  "command_id": "SUPPORT-260923-SPB-TLS-BRIDGE-OBSERVED-START-9162P1",
+  "status": "OK",
+  "rc": 0,
+  "host": "pve01",
+  "mode": "read-only",
+  "component": "spb-tls-bridge-observed-start",
+  "started_at_utc": "2026-09-23T01:40:27Z",
+  "finished_at_utc": "2026-09-23T01:40:27Z",
+  "reference_register_checked": true,
+  "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66",
+  "error_register_checked": true,
+  "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0",
+  "command_sha256": "f99eddc005b9e40de56a578d00240a686afe66fe6438acb305b85750445d51af",
+  "duplicate_failed_command_blocked": false,
+  "block_reason": null,
+  "execution_started": true,
+  "change_declared": false,
+  "result_contract_valid": true,
+  "result_contract_status": null,
+  "result_contract_error": null,
+  "command_rc": 0,
+  "changes_made": false,
+  "rollback_started": false,
+  "rollback_restored": null,
+  "mutation_outcome": "NO_MUTATION",
+  "sanitized": true,
+  "secrets_included": false,
+  "private_addresses_included": false,
+  "raw_evidence_retained_locally": true,
+  "raw_evidence_sha256": "7b49b3469105c3171b95693ea3f2a21e79e08f99f528e1d75de53aa43aef359c",
+  "sanitized_output_sha256": "7b49b3469105c3171b95693ea3f2a21e79e08f99f528e1d75de53aa43aef359c",
+  "output_truncated_in_json": false,
+  "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
+  "output": "TASK_COMPLETE=true\nTASK_RESULT=PASS_SPB_TLS_BRIDGE_OBSERVED_START\nDECISION=BEGIN_SPB_SOURCE_FOR_BRIDGE\nHELPER_SHA_SOURCE=9155F1\nBUNDLE_SHAPE=EXACT_9147_SCHEMA_VERSION_PLUS_DOMAINS\nPASSWORD_CACHE=WINDOWS_DPAPI_REQUIRED\nSPB_HOSTKEY_POLICY=PINNED_FROM_9153S1\nSPB_MUTATION=NO\nVM130_MUTATION=NO\nDNS_WRITE=NO\n"
+}
diff --git a/runtime/history/SUPPORT-260923-SPB-TLS-BRIDGE-OBSERVED-START-9162P1.txt b/runtime/history/SUPPORT-260923-SPB-TLS-BRIDGE-OBSERVED-START-9162P1.txt
new file mode 100644
index 00000000..3d2fc857
--- /dev/null
+++ b/runtime/history/SUPPORT-260923-SPB-TLS-BRIDGE-OBSERVED-START-9162P1.txt
@@ -0,0 +1,42 @@
+CHAT_OUTPUT_BEGIN
+COMMAND_ID=SUPPORT-260923-SPB-TLS-BRIDGE-OBSERVED-START-9162P1
+STATUS=OK
+RC=0
+HOST=pve01
+MODE=read-only
+COMPONENT=spb-tls-bridge-observed-start
+REFERENCE_REGISTER_CHECK=OK
+REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
+ERROR_REGISTER_CHECK=OK
+ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
+COMMAND_SHA256=f99eddc005b9e40de56a578d00240a686afe66fe6438acb305b85750445d51af
+DUPLICATE_FAILED_COMMAND_BLOCKED=false
+EXECUTION_STARTED=true
+CHANGE_DECLARED=false
+RESULT_CONTRACT_VALID=true
+RESULT_CONTRACT_STATUS=NOT_APPLICABLE
+RESULT_CONTRACT_ERROR=NONE
+COMMAND_RC=0
+CHANGES_MADE=false
+ROLLBACK_STARTED=false
+ROLLBACK_RESTORED=null
+MUTATION_OUTCOME=NO_MUTATION
+SANITIZED=yes
+SECRETS_INCLUDED=no
+PRIVATE_ADDRESSES_INCLUDED=no
+RAW_EVIDENCE_SHA256=7b49b3469105c3171b95693ea3f2a21e79e08f99f528e1d75de53aa43aef359c
+SANITIZED_OUTPUT_SHA256=7b49b3469105c3171b95693ea3f2a21e79e08f99f528e1d75de53aa43aef359c
+OUTPUT_BEGIN
+TASK_COMPLETE=true
+TASK_RESULT=PASS_SPB_TLS_BRIDGE_OBSERVED_START
+DECISION=BEGIN_SPB_SOURCE_FOR_BRIDGE
+HELPER_SHA_SOURCE=9155F1
+BUNDLE_SHAPE=EXACT_9147_SCHEMA_VERSION_PLUS_DOMAINS
+PASSWORD_CACHE=WINDOWS_DPAPI_REQUIRED
+SPB_HOSTKEY_POLICY=PINNED_FROM_9153S1
+SPB_MUTATION=NO
+VM130_MUTATION=NO
+DNS_WRITE=NO
+
+OUTPUT_END
+CHAT_OUTPUT_END
diff --git a/runtime/latest.json b/runtime/latest.json
index 70e5f125..9e3937f5 100644
--- a/runtime/latest.json
+++ b/runtime/latest.json
@@ -1,38 +1,38 @@
 {
   "schema_version": 1,
   "channel": "homelab-runtime",
-  "command_id": "SUPPORT-260923-PVEPRO-MAIL-CHECKPOINT13-APPLY-FIX-912R1",
-  "status": "FAIL",
-  "rc": 5,
+  "command_id": "SUPPORT-260923-SPB-TLS-BRIDGE-OBSERVED-START-9162P1",
+  "status": "OK",
+  "rc": 0,
   "host": "pve01",
-  "mode": "change",
-  "component": "pvepro-mail-checkpoint13-apply-fix",
-  "started_at_utc": "2026-09-23T01:38:07Z",
-  "finished_at_utc": "2026-09-23T01:38:20Z",
+  "mode": "read-only",
+  "component": "spb-tls-bridge-observed-start",
+  "started_at_utc": "2026-09-23T01:40:27Z",
+  "finished_at_utc": "2026-09-23T01:40:27Z",
   "reference_register_checked": true,
   "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66",
   "error_register_checked": true,
   "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0",
-  "command_sha256": "1965ec6d58b5c9898b092fa3eaa6e80fb6752133ca43519e582ae72d78210ff0",
+  "command_sha256": "f99eddc005b9e40de56a578d00240a686afe66fe6438acb305b85750445d51af",
   "duplicate_failed_command_blocked": false,
   "block_reason": null,
   "execution_started": true,
-  "change_declared": true,
+  "change_declared": false,
   "result_contract_valid": true,
-  "result_contract_status": "FAIL",
+  "result_contract_status": null,
   "result_contract_error": null,
-  "command_rc": 5,
-  "changes_made": true,
-  "rollback_started": true,
-  "rollback_restored": true,
-  "mutation_outcome": "ROLLED_BACK",
+  "command_rc": 0,
+  "changes_made": false,
+  "rollback_started": false,
+  "rollback_restored": null,
+  "mutation_outcome": "NO_MUTATION",
   "sanitized": true,
   "secrets_included": false,
   "private_addresses_included": false,
   "raw_evidence_retained_locally": true,
-  "raw_evidence_sha256": "7b64a42bc518cb0ffc624dbdb4a20d5027af3f6e16ef0cc745d40f01442997d4",
-  "sanitized_output_sha256": "7b64a42bc518cb0ffc624dbdb4a20d5027af3f6e16ef0cc745d40f01442997d4",
+  "raw_evidence_sha256": "7b49b3469105c3171b95693ea3f2a21e79e08f99f528e1d75de53aa43aef359c",
+  "sanitized_output_sha256": "7b49b3469105c3171b95693ea3f2a21e79e08f99f528e1d75de53aa43aef359c",
   "output_truncated_in_json": false,
   "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
-  "output": "PVEPRO912_BEGIN=true\nCOMMAND_ID=SUPPORT-260923-PVEPRO-MAIL-CHECKPOINT13-APPLY-FIX-912R1\nMODE=change\nCOMPONENT=pvepro-mail-checkpoint13-apply-fix\nPREDECESSOR_910=PASS_PVEPRO910_EDITORIAL20_CLOSED_MAIL13_PRECHECK\nPREDECESSOR_911=HOLD_PVEPRO911_MAIL_CHECKPOINT13_ROLLBACK_PROVEN\n911_RCA=PYTHON_AND_PHP_WRAPPER_ARGV_OFFSET_PLUS_RESULT_CONTRACT_CHANGES_MADE_SEMANTICS\nCHECKPOINT20_ALREADY_CLOSED=true\nMUTATION_BOUNDARY=VM100_ONLY;INSTALL_MSMTP_MTA;ROOT_ONLY_CREDENTIAL_FILE_WITH_PHP_FPM_GROUP_READ;NO_DB_WRITE;NO_VM_CONFIG;NO_CLOUD;ONE_MAIL_SMOKE\nREFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66\nERROR_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0\nPROD_AGENT_RC=0\nMAILREF_AGENT_RC=0\nPRE_TRANSPORT_RC=0\nPRE_GUEST|exited=1|exitcode=0\nMAIL13_PRESTATE=MSMTP_PACKAGE=false|MSMTP_MTA_PACKAGE=false|SENDMAIL_EXEC=false|MSMTPRC_EXISTS=false|SECRET_EXISTS=false|HELPER_EXISTS=false||\nIDENT_TRANSPORT_RC=0\nIDENT_GUEST|exited=1|exitcode=0\nMAIL_IDENTITY|from_sha=5f0a0a76896d1a417b76a94700360e162c89daa193a3ccb8af6ee819923348e4|to_sha=5f0a0a76896d1a417b76a94700360e162c89daa193a3ccb8af6ee819923348e4|transport_type=boolean\nREF_TRANSPORT_RC=0\nREF_GUEST|exited=1|exitcode=0\nMAIL_REFERENCE|config_sha=dcfb2d8708a28f91fecd744e01dbef1b942acbcb27afb423e7012a8c833fa2cf|password_len=16|host_sha=8a209c88d3cb22cad1accce9909e67c43ebf9e4a61fab9b565f3686c95e4dfed|user_sha=0d4cf60ca8cd53a12ad50dc5419d3c9c32192f0852000eb10051fbdef52b04bf|from_sha=0d4cf60ca8cd53a12ad50dc5419d3c9c32192f0852000eb10051fbdef52b04bf\nINSTALL_TRANSPORT_RC=0\nINSTALL_GUEST|exited=1|exitcode=0\nAPPLY_TRANSPORT_RC=0\nAPPLY_GUEST|exited=1|exitcode=0\nMAIL_FILES_APPLY_SHA256=16248255e16ded3df438a6a3e1133cb4f044431652ee33cb8cd74c1328353450\nVERIFY_TRANSPORT_RC=0\nVERIFY_GUEST|exited=1|exitcode=0\nMAIL_RUNTIME_VERIFY_SHA256=ee02f71c6c4cd8531c0832c8b6931d58ecde6eb9bf642d544101d5271943fce5\nSMOKE_TRANSPORT_RC=0\nSMOKE_GUEST|exited=1|exitcode=42\nFAILURE=MAIL_SMOKE_FAILED\nMAIL_SMOKE|ok=true|to_sha=5f0a0a76896d1a417b76a94700360e162c89daa193a3ccb8af6ee819923348e4|from_sha=5f0a0a76896d1a417b76a94700360e162c89daa193a3ccb8af6ee819923348e4|subject_sha=8dfbc675b2b5d3d0a2299cad0f3fb05ede0520584a08969d246103190456f483\nROLLBACK_TRANSPORT_RC=0\nROLLBACK_GUEST|exited=1|exitcode=0\nMAIL13_ROLLBACK_RESTORED=true\nCHECKPOINT13_MAIL_COMPLETE=false\nCHECKPOINT13_OPEN=true\nCHECKPOINT14_OPEN=true\nPRODUCT_CHECKPOINTS_REMAINING=6\nDECISION=HOLD_PVEPRO912_MAIL_CHECKPOINT13\nNEXT_GATE=RECONCILE_ONLY_PVEPRO912_FAILURE\nTASK_RESULT=HOLD_PVEPRO_MAIL_CHECKPOINT13\nCHANGES_MADE_BY_912=true\nDB_MUTATION_BY_912=false\nVM_CONFIG_MUTATION_BY_912=false\nCLOUD_MUTATION_BY_912=false\nROLLBACK_STARTED=true\nROLLBACK_RESTORED=true\nHOMELAB_RESULT_CONTRACT={\"version\":1,\"command_id\":\"SUPPORT-260923-PVEPRO-MAIL-CHECKPOINT13-APPLY-FIX-912R1\",\"status\":\"FAIL\",\"changes_made\":true,\"rollback_started\":true,\"rollback_restored\":true}\nPVEPRO912_END=true\n"
+  "output": "TASK_COMPLETE=true\nTASK_RESULT=PASS_SPB_TLS_BRIDGE_OBSERVED_START\nDECISION=BEGIN_SPB_SOURCE_FOR_BRIDGE\nHELPER_SHA_SOURCE=9155F1\nBUNDLE_SHAPE=EXACT_9147_SCHEMA_VERSION_PLUS_DOMAINS\nPASSWORD_CACHE=WINDOWS_DPAPI_REQUIRED\nSPB_HOSTKEY_POLICY=PINNED_FROM_9153S1\nSPB_MUTATION=NO\nVM130_MUTATION=NO\nDNS_WRITE=NO\n"
 }
diff --git a/runtime/latest.txt b/runtime/latest.txt
index 6595ee7b..3d2fc857 100644
--- a/runtime/latest.txt
+++ b/runtime/latest.txt
@@ -1,84 +1,42 @@
 CHAT_OUTPUT_BEGIN
-COMMAND_ID=SUPPORT-260923-PVEPRO-MAIL-CHECKPOINT13-APPLY-FIX-912R1
-STATUS=FAIL
-RC=5
+COMMAND_ID=SUPPORT-260923-SPB-TLS-BRIDGE-OBSERVED-START-9162P1
+STATUS=OK
+RC=0
 HOST=pve01
-MODE=change
-COMPONENT=pvepro-mail-checkpoint13-apply-fix
+MODE=read-only
+COMPONENT=spb-tls-bridge-observed-start
 REFERENCE_REGISTER_CHECK=OK
 REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
 ERROR_REGISTER_CHECK=OK
 ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
-COMMAND_SHA256=1965ec6d58b5c9898b092fa3eaa6e80fb6752133ca43519e582ae72d78210ff0
+COMMAND_SHA256=f99eddc005b9e40de56a578d00240a686afe66fe6438acb305b85750445d51af
 DUPLICATE_FAILED_COMMAND_BLOCKED=false
 EXECUTION_STARTED=true
-CHANGE_DECLARED=true
+CHANGE_DECLARED=false
 RESULT_CONTRACT_VALID=true
-RESULT_CONTRACT_STATUS=FAIL
+RESULT_CONTRACT_STATUS=NOT_APPLICABLE
 RESULT_CONTRACT_ERROR=NONE
-COMMAND_RC=5
-CHANGES_MADE=true
-ROLLBACK_STARTED=true
-ROLLBACK_RESTORED=true
-MUTATION_OUTCOME=ROLLED_BACK
+COMMAND_RC=0
+CHANGES_MADE=false
+ROLLBACK_STARTED=false
+ROLLBACK_RESTORED=null
+MUTATION_OUTCOME=NO_MUTATION
 SANITIZED=yes
 SECRETS_INCLUDED=no
 PRIVATE_ADDRESSES_INCLUDED=no
-RAW_EVIDENCE_SHA256=7b64a42bc518cb0ffc624dbdb4a20d5027af3f6e16ef0cc745d40f01442997d4
-SANITIZED_OUTPUT_SHA256=7b64a42bc518cb0ffc624dbdb4a20d5027af3f6e16ef0cc745d40f01442997d4
+RAW_EVIDENCE_SHA256=7b49b3469105c3171b95693ea3f2a21e79e08f99f528e1d75de53aa43aef359c
+SANITIZED_OUTPUT_SHA256=7b49b3469105c3171b95693ea3f2a21e79e08f99f528e1d75de53aa43aef359c
 OUTPUT_BEGIN
-PVEPRO912_BEGIN=true
-COMMAND_ID=SUPPORT-260923-PVEPRO-MAIL-CHECKPOINT13-APPLY-FIX-912R1
-MODE=change
-COMPONENT=pvepro-mail-checkpoint13-apply-fix
-PREDECESSOR_910=PASS_PVEPRO910_EDITORIAL20_CLOSED_MAIL13_PRECHECK
-PREDECESSOR_911=HOLD_PVEPRO911_MAIL_CHECKPOINT13_ROLLBACK_PROVEN
-911_RCA=PYTHON_AND_PHP_WRAPPER_ARGV_OFFSET_PLUS_RESULT_CONTRACT_CHANGES_MADE_SEMANTICS
-CHECKPOINT20_ALREADY_CLOSED=true
-MUTATION_BOUNDARY=VM100_ONLY;INSTALL_MSMTP_MTA;ROOT_ONLY_CREDENTIAL_FILE_WITH_PHP_FPM_GROUP_READ;NO_DB_WRITE;NO_VM_CONFIG;NO_CLOUD;ONE_MAIL_SMOKE
-REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
-ERROR_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
-PROD_AGENT_RC=0
-MAILREF_AGENT_RC=0
-PRE_TRANSPORT_RC=0
-PRE_GUEST|exited=1|exitcode=0
-MAIL13_PRESTATE=MSMTP_PACKAGE=false|MSMTP_MTA_PACKAGE=false|SENDMAIL_EXEC=false|MSMTPRC_EXISTS=false|SECRET_EXISTS=false|HELPER_EXISTS=false||
-IDENT_TRANSPORT_RC=0
-IDENT_GUEST|exited=1|exitcode=0
-MAIL_IDENTITY|from_sha=5f0a0a76896d1a417b76a94700360e162c89daa193a3ccb8af6ee819923348e4|to_sha=5f0a0a76896d1a417b76a94700360e162c89daa193a3ccb8af6ee819923348e4|transport_type=boolean
-REF_TRANSPORT_RC=0
-REF_GUEST|exited=1|exitcode=0
-MAIL_REFERENCE|config_sha=dcfb2d8708a28f91fecd744e01dbef1b942acbcb27afb423e7012a8c833fa2cf|password_len=16|host_sha=8a209c88d3cb22cad1accce9909e67c43ebf9e4a61fab9b565f3686c95e4dfed|user_sha=0d4cf60ca8cd53a12ad50dc5419d3c9c32192f0852000eb10051fbdef52b04bf|from_sha=0d4cf60ca8cd53a12ad50dc5419d3c9c32192f0852000eb10051fbdef52b04bf
-INSTALL_TRANSPORT_RC=0
-INSTALL_GUEST|exited=1|exitcode=0
-APPLY_TRANSPORT_RC=0
-APPLY_GUEST|exited=1|exitcode=0
-MAIL_FILES_APPLY_SHA256=16248255e16ded3df438a6a3e1133cb4f044431652ee33cb8cd74c1328353450
-VERIFY_TRANSPORT_RC=0
-VERIFY_GUEST|exited=1|exitcode=0
-MAIL_RUNTIME_VERIFY_SHA256=ee02f71c6c4cd8531c0832c8b6931d58ecde6eb9bf642d544101d5271943fce5
-SMOKE_TRANSPORT_RC=0
-SMOKE_GUEST|exited=1|exitcode=42
-FAILURE=MAIL_SMOKE_FAILED
-MAIL_SMOKE|ok=true|to_sha=5f0a0a76896d1a417b76a94700360e162c89daa193a3ccb8af6ee819923348e4|from_sha=5f0a0a76896d1a417b76a94700360e162c89daa193a3ccb8af6ee819923348e4|subject_sha=8dfbc675b2b5d3d0a2299cad0f3fb05ede0520584a08969d246103190456f483
-ROLLBACK_TRANSPORT_RC=0
-ROLLBACK_GUEST|exited=1|exitcode=0
-MAIL13_ROLLBACK_RESTORED=true
-CHECKPOINT13_MAIL_COMPLETE=false
-CHECKPOINT13_OPEN=true
-CHECKPOINT14_OPEN=true
-PRODUCT_CHECKPOINTS_REMAINING=6
-DECISION=HOLD_PVEPRO912_MAIL_CHECKPOINT13
-NEXT_GATE=RECONCILE_ONLY_PVEPRO912_FAILURE
-TASK_RESULT=HOLD_PVEPRO_MAIL_CHECKPOINT13
-CHANGES_MADE_BY_912=true
-DB_MUTATION_BY_912=false
-VM_CONFIG_MUTATION_BY_912=false
-CLOUD_MUTATION_BY_912=false
-ROLLBACK_STARTED=true
-ROLLBACK_RESTORED=true
-HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"SUPPORT-260923-PVEPRO-MAIL-CHECKPOINT13-APPLY-FIX-912R1","status":"FAIL","changes_made":true,"rollback_started":true,"rollback_restored":true}
-PVEPRO912_END=true
+TASK_COMPLETE=true
+TASK_RESULT=PASS_SPB_TLS_BRIDGE_OBSERVED_START
+DECISION=BEGIN_SPB_SOURCE_FOR_BRIDGE
+HELPER_SHA_SOURCE=9155F1
+BUNDLE_SHAPE=EXACT_9147_SCHEMA_VERSION_PLUS_DOMAINS
+PASSWORD_CACHE=WINDOWS_DPAPI_REQUIRED
+SPB_HOSTKEY_POLICY=PINNED_FROM_9153S1
+SPB_MUTATION=NO
+VM130_MUTATION=NO
+DNS_WRITE=NO
 
 OUTPUT_END
 CHAT_OUTPUT_END