diff --git a/runtime/history/SUPPORT-260929-NEW-MOLDOVA-VPS-PREFLIGHT-99106R1.json b/runtime/history/SUPPORT-260929-NEW-MOLDOVA-VPS-PREFLIGHT-99106R1.json
new file mode 100644
index 00000000..516ed9db
--- /dev/null
+++ b/runtime/history/SUPPORT-260929-NEW-MOLDOVA-VPS-PREFLIGHT-99106R1.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": 1,
+  "channel": "homelab-runtime",
+  "command_id": "SUPPORT-260929-NEW-MOLDOVA-VPS-PREFLIGHT-99106R1",
+  "status": "OK",
+  "rc": 0,
+  "host": "pve01",
+  "mode": "read-only",
+  "component": "new-moldova-vps-connectivity-preflight-fallback-ingress",
+  "started_at_utc": "2026-09-29T07:53:22Z",
+  "finished_at_utc": "2026-09-29T07:53:58Z",
+  "reference_register_checked": true,
+  "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66",
+  "error_register_checked": true,
+  "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0",
+  "command_sha256": "81b68454bbd48417a019c1bc8a72cb8acb8187b9d0cf0f4577e0d9bce75a7efc",
+  "duplicate_failed_command_blocked": false,
+  "block_reason": null,
+  "execution_started": true,
+  "change_declared": false,
+  "result_contract_valid": true,
+  "result_contract_status": null,
+  "result_contract_error": null,
+  "command_rc": 0,
+  "changes_made": false,
+  "rollback_started": false,
+  "rollback_restored": null,
+  "mutation_outcome": "NO_MUTATION",
+  "sanitized": true,
+  "secrets_included": false,
+  "private_addresses_included": false,
+  "raw_evidence_retained_locally": true,
+  "raw_evidence_sha256": "51d01e114307c39fea4a2e9c67c8b78462a4ae43c772af7975bd3b0759334245",
+  "sanitized_output_sha256": "eac628cfd2ef449e849cb5b9023361a3f835e8d3afe9d535e26d6cc5a3739f1f",
+  "output_truncated_in_json": false,
+  "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
+  "output": "NEW_MOLDOVA_VPS_PREFLIGHT=V3\nMODE=read-only\nNEW_IPV4=37.221.65.115\nNEW_IPV6=2001:678:6d4:6010::74c\nNEW_LABEL=nb-new.pvepro.ru\nOLD_MOLDOVA_RELAY_DELETED=true\nWINDOWS_INGRESS_SELECTED=PVE01_LAN\nPVE01_LOCAL_PROBE_RC=0\nPVE01_NEW_MOLDOVA_NODE_PROBE=V3\nPVE01_ROLE=pve01\nPVE01_HOSTNAME=pve01\nPVE01_IPV4_ROUTE_RC=0\nPVE01_IPV4_ROUTE=37.221.65.115 via [PRIVATE_IP] dev vmbr0 src [PRIVATE_IP] uid 0 _    cache\nPVE01_IPV6_ROUTE_RC=2\nPVE01_IPV6_ROUTE=RTNETLINK answers: Network is unreachable\nPVE01_DNS_V4_RC=2\nPVE01_DNS_V4=NONE\nPVE01_DNS_V6_RC=2\nPVE01_DNS_V6=NONE\nPVE01_NETBIRD_STATUS_RC=0\nPVE01_NETBIRD_MANAGEMENT_CONNECTED=false\nPVE01_NETBIRD_SIGNAL_CONNECTED=false\nPVE01_OLD_MOLDOVA_HOSTS_LINE_COUNT=1\nPVE01_OLD_MOLDOVA_HOSTS_LINE_1=85.121.4.192 nb.pvepro.ru nb.gram1.ru # WORKERS2-73318-NETBIRD-RELAY\nPVE01_PING4_RC=0\nPVE01_TCP22_SUCCESS_COUNT=5\nPVE01_TCP22_MEDIAN_MS=59\nPVE01_TCP80_SUCCESS_COUNT=0\nPVE01_TCP80_MEDIAN_MS=-1\nPVE01_TCP443_SUCCESS_COUNT=0\nPVE01_TCP443_MEDIAN_MS=-1\nPVE01_SSH_BANNER_SUCCESS_COUNT=5\nPVE01_SSH_HOSTKEY_SCAN_1_RC=0\nPVE01_SSH_HOSTKEY_SCAN_1_FP=SHA256:ytu9AAnI2aNK3shYaQ8GeRWiVegcfIfVzXDczjOn5Kg\nPVE01_SSH_HOSTKEY_SCAN_2_RC=0\nPVE01_SSH_HOSTKEY_SCAN_2_FP=SHA256:ytu9AAnI2aNK3shYaQ8GeRWiVegcfIfVzXDczjOn5Kg\nPVE01_SSH_HOSTKEY_SCAN_3_RC=0\nPVE01_SSH_HOSTKEY_SCAN_3_FP=SHA256:ytu9AAnI2aNK3shYaQ8GeRWiVegcfIfVzXDczjOn5Kg\nPVE01_SSH_HOSTKEY_ALL3_CONSISTENT=true\nPVE01_SSH_HOSTKEY_FINGERPRINT=SHA256:ytu9AAnI2aNK3shYaQ8GeRWiVegcfIfVzXDczjOn5Kg\nPVE01_SSH_NOAUTH_ATTEMPT_1_RC=255\nPVE01_SSH_NOAUTH_ATTEMPT_1_MS=523\nPVE01_SSH_NOAUTH_ATTEMPT_1_MODE=AUTH_DENIED_AFTER_KEX\nPVE01_SSH_NOAUTH_ATTEMPT_2_RC=255\nPVE01_SSH_NOAUTH_ATTEMPT_2_MS=526\nPVE01_SSH_NOAUTH_ATTEMPT_2_MODE=AUTH_DENIED_AFTER_KEX\nPVE01_SSH_NOAUTH_ATTEMPT_3_RC=255\nPVE01_SSH_NOAUTH_ATTEMPT_3_MS=519\nPVE01_SSH_NOAUTH_ATTEMPT_3_MODE=AUTH_DENIED_AFTER_KEX\nPVE01_SSH_NOAUTH_ATTEMPT_4_RC=255\nPVE01_SSH_NOAUTH_ATTEMPT_4_MS=525\nPVE01_SSH_NOAUTH_ATTEMPT_4_MODE=AUTH_DENIED_AFTER_KEX\nPVE01_SSH_NOAUTH_ATTEMPT_5_RC=255\nPVE01_SSH_NOAUTH_ATTEMPT_5_MS=525\nPVE01_SSH_NOAUTH_ATTEMPT_5_MODE=AUTH_DENIED_AFTER_KEX\nPVE01_SSH_NOAUTH_TRANSPORT_SUCCESS_COUNT=5\nPVE01_SSH_NOAUTH_MEDIAN_MS=525\nPVE01_IPV6_TCP22_RESULT=-1\nPVE01_NODE_NEW_VPS_SSH_PATH_STABLE=true\nPVESH_NODES_RC=0\nCLUSTER_NODE_COUNT=3\nCLUSTER_NODE_1=pve01\nCLUSTER_NODE_2=pve03\nCLUSTER_NODE_3=pve02\nPVE03_CLUSTER_SSH_PROBE_RC=0\nPVE03_NEW_MOLDOVA_NODE_PROBE=V3\nPVE03_ROLE=pve03\nPVE03_HOSTNAME=pve03\nPVE03_IPV4_ROUTE_RC=0\nPVE03_IPV4_ROUTE=37.221.65.115 via [PRIVATE_IP] dev vmbr0 src [PRIVATE_IP] uid 0 _    cache\nPVE03_IPV6_ROUTE_RC=2\nPVE03_IPV6_ROUTE=RTNETLINK answers: Network is unreachable\nPVE03_DNS_V4_RC=2\nPVE03_DNS_V4=NONE\nPVE03_DNS_V6_RC=2\nPVE03_DNS_V6=NONE\nPVE03_NETBIRD_STATUS_RC=0\nPVE03_NETBIRD_MANAGEMENT_CONNECTED=false\nPVE03_NETBIRD_SIGNAL_CONNECTED=false\nPVE03_OLD_MOLDOVA_HOSTS_LINE_COUNT=1\nPVE03_OLD_MOLDOVA_HOSTS_LINE_1=85.121.4.192 nb.pvepro.ru nb.gram1.ru # WORKERS2-73336-NETBIRD-RELAY\nPVE03_PING4_RC=0\nPVE03_TCP22_SUCCESS_COUNT=5\nPVE03_TCP22_MEDIAN_MS=59\nPVE03_TCP80_SUCCESS_COUNT=0\nPVE03_TCP80_MEDIAN_MS=-1\nPVE03_TCP443_SUCCESS_COUNT=0\nPVE03_TCP443_MEDIAN_MS=-1\nPVE03_SSH_BANNER_SUCCESS_COUNT=5\nPVE03_SSH_HOSTKEY_SCAN_1_RC=0\nPVE03_SSH_HOSTKEY_SCAN_1_FP=SHA256:ytu9AAnI2aNK3shYaQ8GeRWiVegcfIfVzXDczjOn5Kg\nPVE03_SSH_HOSTKEY_SCAN_2_RC=0\nPVE03_SSH_HOSTKEY_SCAN_2_FP=SHA256:ytu9AAnI2aNK3shYaQ8GeRWiVegcfIfVzXDczjOn5Kg\nPVE03_SSH_HOSTKEY_SCAN_3_RC=0\nPVE03_SSH_HOSTKEY_SCAN_3_FP=SHA256:ytu9AAnI2aNK3shYaQ8GeRWiVegcfIfVzXDczjOn5Kg\nPVE03_SSH_HOSTKEY_ALL3_CONSISTENT=true\nPVE03_SSH_HOSTKEY_FINGERPRINT=SHA256:ytu9AAnI2aNK3shYaQ8GeRWiVegcfIfVzXDczjOn5Kg\nPVE03_SSH_NOAUTH_ATTEMPT_1_RC=255\nPVE03_SSH_NOAUTH_ATTEMPT_1_MS=594\nPVE03_SSH_NOAUTH_ATTEMPT_1_MODE=AUTH_DENIED_AFTER_KEX\nPVE03_SSH_NOAUTH_ATTEMPT_2_RC=255\nPVE03_SSH_NOAUTH_ATTEMPT_2_MS=556\nPVE03_SSH_NOAUTH_ATTEMPT_2_MODE=AUTH_DENIED_AFTER_KEX\nPVE03_SSH_NOAUTH_ATTEMPT_3_RC=255\nPVE03_SSH_NOAUTH_ATTEMPT_3_MS=544\nPVE03_SSH_NOAUTH_ATTEMPT_3_MODE=AUTH_DENIED_AFTER_KEX\nPVE03_SSH_NOAUTH_ATTEMPT_4_RC=255\nPVE03_SSH_NOAUTH_ATTEMPT_4_MS=547\nPVE03_SSH_NOAUTH_ATTEMPT_4_MODE=AUTH_DENIED_AFTER_KEX\nPVE03_SSH_NOAUTH_ATTEMPT_5_RC=255\nPVE03_SSH_NOAUTH_ATTEMPT_5_MS=552\nPVE03_SSH_NOAUTH_ATTEMPT_5_MODE=AUTH_DENIED_AFTER_KEX\nPVE03_SSH_NOAUTH_TRANSPORT_SUCCESS_COUNT=5\nPVE03_SSH_NOAUTH_MEDIAN_MS=552\nPVE03_IPV6_TCP22_RESULT=-1\nPVE03_NODE_NEW_VPS_SSH_PATH_STABLE=true\nPVE02_CLUSTER_SSH_PROBE_RC=0\nPVE02_NEW_MOLDOVA_NODE_PROBE=V3\nPVE02_ROLE=pve02\nPVE02_HOSTNAME=pve02\nPVE02_IPV4_ROUTE_RC=0\nPVE02_IPV4_ROUTE=37.221.65.115 via [PRIVATE_IP] dev vmbr0 src [PRIVATE_IP] uid 0 _    cache\nPVE02_IPV6_ROUTE_RC=2\nPVE02_IPV6_ROUTE=RTNETLINK answers: Network is unreachable\nPVE02_DNS_V4_RC=2\nPVE02_DNS_V4=NONE\nPVE02_DNS_V6_RC=2\nPVE02_DNS_V6=NONE\nPVE02_NETBIRD_STATUS_RC=0\nPVE02_NETBIRD_MANAGEMENT_CONNECTED=false\nPVE02_NETBIRD_SIGNAL_CONNECTED=false\nPVE02_OLD_MOLDOVA_HOSTS_LINE_COUNT=1\nPVE02_OLD_MOLDOVA_HOSTS_LINE_1=85.121.4.192 nb.pvepro.ru nb.gram1.ru # WORKERS2-73336-NETBIRD-RELAY\nPVE02_PING4_RC=0\nPVE02_TCP22_SUCCESS_COUNT=5\nPVE02_TCP22_MEDIAN_MS=58\nPVE02_TCP80_SUCCESS_COUNT=0\nPVE02_TCP80_MEDIAN_MS=-1\nPVE02_TCP443_SUCCESS_COUNT=0\nPVE02_TCP443_MEDIAN_MS=-1\nPVE02_SSH_BANNER_SUCCESS_COUNT=5\nPVE02_SSH_HOSTKEY_SCAN_1_RC=0\nPVE02_SSH_HOSTKEY_SCAN_1_FP=SHA256:ytu9AAnI2aNK3shYaQ8GeRWiVegcfIfVzXDczjOn5Kg\nPVE02_SSH_HOSTKEY_SCAN_2_RC=0\nPVE02_SSH_HOSTKEY_SCAN_2_FP=SHA256:ytu9AAnI2aNK3shYaQ8GeRWiVegcfIfVzXDczjOn5Kg\nPVE02_SSH_HOSTKEY_SCAN_3_RC=0\nPVE02_SSH_HOSTKEY_SCAN_3_FP=SHA256:ytu9AAnI2aNK3shYaQ8GeRWiVegcfIfVzXDczjOn5Kg\nPVE02_SSH_HOSTKEY_ALL3_CONSISTENT=true\nPVE02_SSH_HOSTKEY_FINGERPRINT=SHA256:ytu9AAnI2aNK3shYaQ8GeRWiVegcfIfVzXDczjOn5Kg\nPVE02_SSH_NOAUTH_ATTEMPT_1_RC=255\nPVE02_SSH_NOAUTH_ATTEMPT_1_MS=548\nPVE02_SSH_NOAUTH_ATTEMPT_1_MODE=AUTH_DENIED_AFTER_KEX\nPVE02_SSH_NOAUTH_ATTEMPT_2_RC=255\nPVE02_SSH_NOAUTH_ATTEMPT_2_MS=546\nPVE02_SSH_NOAUTH_ATTEMPT_2_MODE=AUTH_DENIED_AFTER_KEX\nPVE02_SSH_NOAUTH_ATTEMPT_3_RC=255\nPVE02_SSH_NOAUTH_ATTEMPT_3_MS=541\nPVE02_SSH_NOAUTH_ATTEMPT_3_MODE=AUTH_DENIED_AFTER_KEX\nPVE02_SSH_NOAUTH_ATTEMPT_4_RC=255\nPVE02_SSH_NOAUTH_ATTEMPT_4_MS=543\nPVE02_SSH_NOAUTH_ATTEMPT_4_MODE=AUTH_DENIED_AFTER_KEX\nPVE02_SSH_NOAUTH_ATTEMPT_5_RC=255\nPVE02_SSH_NOAUTH_ATTEMPT_5_MS=546\nPVE02_SSH_NOAUTH_ATTEMPT_5_MODE=AUTH_DENIED_AFTER_KEX\nPVE02_SSH_NOAUTH_TRANSPORT_SUCCESS_COUNT=5\nPVE02_SSH_NOAUTH_MEDIAN_MS=546\nPVE02_IPV6_TCP22_RESULT=-1\nPVE02_NODE_NEW_VPS_SSH_PATH_STABLE=true\nALL_THREE_PVE_PROBED=true\nALL_THREE_NEW_VPS_SSH_STABLE=true\nALL_THREE_SEE_SAME_NEW_VPS_HOSTKEY=true\nNEW_VPS_ED25519_FINGERPRINT=SHA256:ytu9AAnI2aNK3shYaQ8GeRWiVegcfIfVzXDczjOn5Kg\nPVE_MANAGEMENT_CONNECTED_COUNT=0\nPVE_SIGNAL_CONNECTED_COUNT=0\nPVE_OLD_MOLDOVA_HOST_OVERRIDE_TOTAL=3\nDECISION=PASS_NEW_MOLDOVA_VPS_SSH_PATH_STABLE\nNEXT_GATE=BOOTSTRAP_ROOT_KEY_AND_STAGE_NETBIRD_MIGRATION\nTASK_RESULT=PASS_NEW_MOLDOVA_VPS_PREFLIGHT\nCHANGES_MADE=false\nROLLBACK_STARTED=false\nROLLBACK_RESTORED=null\nMUTATION_OUTCOME=READ_ONLY\nHOMELAB_RESULT_CONTRACT={\"version\":1,\"command_id\":\"SUPPORT-260929-NEW-MOLDOVA-VPS-PREFLIGHT-99106R1\",\"status\":\"OK\",\"changes_made\":false,\"rollback_started\":false,\"rollback_restored\":null}\n"
+}
diff --git a/runtime/history/SUPPORT-260929-NEW-MOLDOVA-VPS-PREFLIGHT-99106R1.txt b/runtime/history/SUPPORT-260929-NEW-MOLDOVA-VPS-PREFLIGHT-99106R1.txt
new file mode 100644
index 00000000..813bcb8a
--- /dev/null
+++ b/runtime/history/SUPPORT-260929-NEW-MOLDOVA-VPS-PREFLIGHT-99106R1.txt
@@ -0,0 +1,215 @@
+CHAT_OUTPUT_BEGIN
+COMMAND_ID=SUPPORT-260929-NEW-MOLDOVA-VPS-PREFLIGHT-99106R1
+STATUS=OK
+RC=0
+HOST=pve01
+MODE=read-only
+COMPONENT=new-moldova-vps-connectivity-preflight-fallback-ingress
+REFERENCE_REGISTER_CHECK=OK
+REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
+ERROR_REGISTER_CHECK=OK
+ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
+COMMAND_SHA256=81b68454bbd48417a019c1bc8a72cb8acb8187b9d0cf0f4577e0d9bce75a7efc
+DUPLICATE_FAILED_COMMAND_BLOCKED=false
+EXECUTION_STARTED=true
+CHANGE_DECLARED=false
+RESULT_CONTRACT_VALID=true
+RESULT_CONTRACT_STATUS=NOT_APPLICABLE
+RESULT_CONTRACT_ERROR=NONE
+COMMAND_RC=0
+CHANGES_MADE=false
+ROLLBACK_STARTED=false
+ROLLBACK_RESTORED=null
+MUTATION_OUTCOME=NO_MUTATION
+SANITIZED=yes
+SECRETS_INCLUDED=no
+PRIVATE_ADDRESSES_INCLUDED=no
+RAW_EVIDENCE_SHA256=51d01e114307c39fea4a2e9c67c8b78462a4ae43c772af7975bd3b0759334245
+SANITIZED_OUTPUT_SHA256=eac628cfd2ef449e849cb5b9023361a3f835e8d3afe9d535e26d6cc5a3739f1f
+OUTPUT_BEGIN
+NEW_MOLDOVA_VPS_PREFLIGHT=V3
+MODE=read-only
+NEW_IPV4=37.221.65.115
+NEW_IPV6=2001:678:6d4:6010::74c
+NEW_LABEL=nb-new.pvepro.ru
+OLD_MOLDOVA_RELAY_DELETED=true
+WINDOWS_INGRESS_SELECTED=PVE01_LAN
+PVE01_LOCAL_PROBE_RC=0
+PVE01_NEW_MOLDOVA_NODE_PROBE=V3
+PVE01_ROLE=pve01
+PVE01_HOSTNAME=pve01
+PVE01_IPV4_ROUTE_RC=0
+PVE01_IPV4_ROUTE=37.221.65.115 via [PRIVATE_IP] dev vmbr0 src [PRIVATE_IP] uid 0 _    cache
+PVE01_IPV6_ROUTE_RC=2
+PVE01_IPV6_ROUTE=RTNETLINK answers: Network is unreachable
+PVE01_DNS_V4_RC=2
+PVE01_DNS_V4=NONE
+PVE01_DNS_V6_RC=2
+PVE01_DNS_V6=NONE
+PVE01_NETBIRD_STATUS_RC=0
+PVE01_NETBIRD_MANAGEMENT_CONNECTED=false
+PVE01_NETBIRD_SIGNAL_CONNECTED=false
+PVE01_OLD_MOLDOVA_HOSTS_LINE_COUNT=1
+PVE01_OLD_MOLDOVA_HOSTS_LINE_1=85.121.4.192 nb.pvepro.ru nb.gram1.ru # WORKERS2-73318-NETBIRD-RELAY
+PVE01_PING4_RC=0
+PVE01_TCP22_SUCCESS_COUNT=5
+PVE01_TCP22_MEDIAN_MS=59
+PVE01_TCP80_SUCCESS_COUNT=0
+PVE01_TCP80_MEDIAN_MS=-1
+PVE01_TCP443_SUCCESS_COUNT=0
+PVE01_TCP443_MEDIAN_MS=-1
+PVE01_SSH_BANNER_SUCCESS_COUNT=5
+PVE01_SSH_HOSTKEY_SCAN_1_RC=0
+PVE01_SSH_HOSTKEY_SCAN_1_FP=SHA256:ytu9AAnI2aNK3shYaQ8GeRWiVegcfIfVzXDczjOn5Kg
+PVE01_SSH_HOSTKEY_SCAN_2_RC=0
+PVE01_SSH_HOSTKEY_SCAN_2_FP=SHA256:ytu9AAnI2aNK3shYaQ8GeRWiVegcfIfVzXDczjOn5Kg
+PVE01_SSH_HOSTKEY_SCAN_3_RC=0
+PVE01_SSH_HOSTKEY_SCAN_3_FP=SHA256:ytu9AAnI2aNK3shYaQ8GeRWiVegcfIfVzXDczjOn5Kg
+PVE01_SSH_HOSTKEY_ALL3_CONSISTENT=true
+PVE01_SSH_HOSTKEY_FINGERPRINT=SHA256:ytu9AAnI2aNK3shYaQ8GeRWiVegcfIfVzXDczjOn5Kg
+PVE01_SSH_NOAUTH_ATTEMPT_1_RC=255
+PVE01_SSH_NOAUTH_ATTEMPT_1_MS=523
+PVE01_SSH_NOAUTH_ATTEMPT_1_MODE=AUTH_DENIED_AFTER_KEX
+PVE01_SSH_NOAUTH_ATTEMPT_2_RC=255
+PVE01_SSH_NOAUTH_ATTEMPT_2_MS=526
+PVE01_SSH_NOAUTH_ATTEMPT_2_MODE=AUTH_DENIED_AFTER_KEX
+PVE01_SSH_NOAUTH_ATTEMPT_3_RC=255
+PVE01_SSH_NOAUTH_ATTEMPT_3_MS=519
+PVE01_SSH_NOAUTH_ATTEMPT_3_MODE=AUTH_DENIED_AFTER_KEX
+PVE01_SSH_NOAUTH_ATTEMPT_4_RC=255
+PVE01_SSH_NOAUTH_ATTEMPT_4_MS=525
+PVE01_SSH_NOAUTH_ATTEMPT_4_MODE=AUTH_DENIED_AFTER_KEX
+PVE01_SSH_NOAUTH_ATTEMPT_5_RC=255
+PVE01_SSH_NOAUTH_ATTEMPT_5_MS=525
+PVE01_SSH_NOAUTH_ATTEMPT_5_MODE=AUTH_DENIED_AFTER_KEX
+PVE01_SSH_NOAUTH_TRANSPORT_SUCCESS_COUNT=5
+PVE01_SSH_NOAUTH_MEDIAN_MS=525
+PVE01_IPV6_TCP22_RESULT=-1
+PVE01_NODE_NEW_VPS_SSH_PATH_STABLE=true
+PVESH_NODES_RC=0
+CLUSTER_NODE_COUNT=3
+CLUSTER_NODE_1=pve01
+CLUSTER_NODE_2=pve03
+CLUSTER_NODE_3=pve02
+PVE03_CLUSTER_SSH_PROBE_RC=0
+PVE03_NEW_MOLDOVA_NODE_PROBE=V3
+PVE03_ROLE=pve03
+PVE03_HOSTNAME=pve03
+PVE03_IPV4_ROUTE_RC=0
+PVE03_IPV4_ROUTE=37.221.65.115 via [PRIVATE_IP] dev vmbr0 src [PRIVATE_IP] uid 0 _    cache
+PVE03_IPV6_ROUTE_RC=2
+PVE03_IPV6_ROUTE=RTNETLINK answers: Network is unreachable
+PVE03_DNS_V4_RC=2
+PVE03_DNS_V4=NONE
+PVE03_DNS_V6_RC=2
+PVE03_DNS_V6=NONE
+PVE03_NETBIRD_STATUS_RC=0
+PVE03_NETBIRD_MANAGEMENT_CONNECTED=false
+PVE03_NETBIRD_SIGNAL_CONNECTED=false
+PVE03_OLD_MOLDOVA_HOSTS_LINE_COUNT=1
+PVE03_OLD_MOLDOVA_HOSTS_LINE_1=85.121.4.192 nb.pvepro.ru nb.gram1.ru # WORKERS2-73336-NETBIRD-RELAY
+PVE03_PING4_RC=0
+PVE03_TCP22_SUCCESS_COUNT=5
+PVE03_TCP22_MEDIAN_MS=59
+PVE03_TCP80_SUCCESS_COUNT=0
+PVE03_TCP80_MEDIAN_MS=-1
+PVE03_TCP443_SUCCESS_COUNT=0
+PVE03_TCP443_MEDIAN_MS=-1
+PVE03_SSH_BANNER_SUCCESS_COUNT=5
+PVE03_SSH_HOSTKEY_SCAN_1_RC=0
+PVE03_SSH_HOSTKEY_SCAN_1_FP=SHA256:ytu9AAnI2aNK3shYaQ8GeRWiVegcfIfVzXDczjOn5Kg
+PVE03_SSH_HOSTKEY_SCAN_2_RC=0
+PVE03_SSH_HOSTKEY_SCAN_2_FP=SHA256:ytu9AAnI2aNK3shYaQ8GeRWiVegcfIfVzXDczjOn5Kg
+PVE03_SSH_HOSTKEY_SCAN_3_RC=0
+PVE03_SSH_HOSTKEY_SCAN_3_FP=SHA256:ytu9AAnI2aNK3shYaQ8GeRWiVegcfIfVzXDczjOn5Kg
+PVE03_SSH_HOSTKEY_ALL3_CONSISTENT=true
+PVE03_SSH_HOSTKEY_FINGERPRINT=SHA256:ytu9AAnI2aNK3shYaQ8GeRWiVegcfIfVzXDczjOn5Kg
+PVE03_SSH_NOAUTH_ATTEMPT_1_RC=255
+PVE03_SSH_NOAUTH_ATTEMPT_1_MS=594
+PVE03_SSH_NOAUTH_ATTEMPT_1_MODE=AUTH_DENIED_AFTER_KEX
+PVE03_SSH_NOAUTH_ATTEMPT_2_RC=255
+PVE03_SSH_NOAUTH_ATTEMPT_2_MS=556
+PVE03_SSH_NOAUTH_ATTEMPT_2_MODE=AUTH_DENIED_AFTER_KEX
+PVE03_SSH_NOAUTH_ATTEMPT_3_RC=255
+PVE03_SSH_NOAUTH_ATTEMPT_3_MS=544
+PVE03_SSH_NOAUTH_ATTEMPT_3_MODE=AUTH_DENIED_AFTER_KEX
+PVE03_SSH_NOAUTH_ATTEMPT_4_RC=255
+PVE03_SSH_NOAUTH_ATTEMPT_4_MS=547
+PVE03_SSH_NOAUTH_ATTEMPT_4_MODE=AUTH_DENIED_AFTER_KEX
+PVE03_SSH_NOAUTH_ATTEMPT_5_RC=255
+PVE03_SSH_NOAUTH_ATTEMPT_5_MS=552
+PVE03_SSH_NOAUTH_ATTEMPT_5_MODE=AUTH_DENIED_AFTER_KEX
+PVE03_SSH_NOAUTH_TRANSPORT_SUCCESS_COUNT=5
+PVE03_SSH_NOAUTH_MEDIAN_MS=552
+PVE03_IPV6_TCP22_RESULT=-1
+PVE03_NODE_NEW_VPS_SSH_PATH_STABLE=true
+PVE02_CLUSTER_SSH_PROBE_RC=0
+PVE02_NEW_MOLDOVA_NODE_PROBE=V3
+PVE02_ROLE=pve02
+PVE02_HOSTNAME=pve02
+PVE02_IPV4_ROUTE_RC=0
+PVE02_IPV4_ROUTE=37.221.65.115 via [PRIVATE_IP] dev vmbr0 src [PRIVATE_IP] uid 0 _    cache
+PVE02_IPV6_ROUTE_RC=2
+PVE02_IPV6_ROUTE=RTNETLINK answers: Network is unreachable
+PVE02_DNS_V4_RC=2
+PVE02_DNS_V4=NONE
+PVE02_DNS_V6_RC=2
+PVE02_DNS_V6=NONE
+PVE02_NETBIRD_STATUS_RC=0
+PVE02_NETBIRD_MANAGEMENT_CONNECTED=false
+PVE02_NETBIRD_SIGNAL_CONNECTED=false
+PVE02_OLD_MOLDOVA_HOSTS_LINE_COUNT=1
+PVE02_OLD_MOLDOVA_HOSTS_LINE_1=85.121.4.192 nb.pvepro.ru nb.gram1.ru # WORKERS2-73336-NETBIRD-RELAY
+PVE02_PING4_RC=0
+PVE02_TCP22_SUCCESS_COUNT=5
+PVE02_TCP22_MEDIAN_MS=58
+PVE02_TCP80_SUCCESS_COUNT=0
+PVE02_TCP80_MEDIAN_MS=-1
+PVE02_TCP443_SUCCESS_COUNT=0
+PVE02_TCP443_MEDIAN_MS=-1
+PVE02_SSH_BANNER_SUCCESS_COUNT=5
+PVE02_SSH_HOSTKEY_SCAN_1_RC=0
+PVE02_SSH_HOSTKEY_SCAN_1_FP=SHA256:ytu9AAnI2aNK3shYaQ8GeRWiVegcfIfVzXDczjOn5Kg
+PVE02_SSH_HOSTKEY_SCAN_2_RC=0
+PVE02_SSH_HOSTKEY_SCAN_2_FP=SHA256:ytu9AAnI2aNK3shYaQ8GeRWiVegcfIfVzXDczjOn5Kg
+PVE02_SSH_HOSTKEY_SCAN_3_RC=0
+PVE02_SSH_HOSTKEY_SCAN_3_FP=SHA256:ytu9AAnI2aNK3shYaQ8GeRWiVegcfIfVzXDczjOn5Kg
+PVE02_SSH_HOSTKEY_ALL3_CONSISTENT=true
+PVE02_SSH_HOSTKEY_FINGERPRINT=SHA256:ytu9AAnI2aNK3shYaQ8GeRWiVegcfIfVzXDczjOn5Kg
+PVE02_SSH_NOAUTH_ATTEMPT_1_RC=255
+PVE02_SSH_NOAUTH_ATTEMPT_1_MS=548
+PVE02_SSH_NOAUTH_ATTEMPT_1_MODE=AUTH_DENIED_AFTER_KEX
+PVE02_SSH_NOAUTH_ATTEMPT_2_RC=255
+PVE02_SSH_NOAUTH_ATTEMPT_2_MS=546
+PVE02_SSH_NOAUTH_ATTEMPT_2_MODE=AUTH_DENIED_AFTER_KEX
+PVE02_SSH_NOAUTH_ATTEMPT_3_RC=255
+PVE02_SSH_NOAUTH_ATTEMPT_3_MS=541
+PVE02_SSH_NOAUTH_ATTEMPT_3_MODE=AUTH_DENIED_AFTER_KEX
+PVE02_SSH_NOAUTH_ATTEMPT_4_RC=255
+PVE02_SSH_NOAUTH_ATTEMPT_4_MS=543
+PVE02_SSH_NOAUTH_ATTEMPT_4_MODE=AUTH_DENIED_AFTER_KEX
+PVE02_SSH_NOAUTH_ATTEMPT_5_RC=255
+PVE02_SSH_NOAUTH_ATTEMPT_5_MS=546
+PVE02_SSH_NOAUTH_ATTEMPT_5_MODE=AUTH_DENIED_AFTER_KEX
+PVE02_SSH_NOAUTH_TRANSPORT_SUCCESS_COUNT=5
+PVE02_SSH_NOAUTH_MEDIAN_MS=546
+PVE02_IPV6_TCP22_RESULT=-1
+PVE02_NODE_NEW_VPS_SSH_PATH_STABLE=true
+ALL_THREE_PVE_PROBED=true
+ALL_THREE_NEW_VPS_SSH_STABLE=true
+ALL_THREE_SEE_SAME_NEW_VPS_HOSTKEY=true
+NEW_VPS_ED25519_FINGERPRINT=SHA256:ytu9AAnI2aNK3shYaQ8GeRWiVegcfIfVzXDczjOn5Kg
+PVE_MANAGEMENT_CONNECTED_COUNT=0
+PVE_SIGNAL_CONNECTED_COUNT=0
+PVE_OLD_MOLDOVA_HOST_OVERRIDE_TOTAL=3
+DECISION=PASS_NEW_MOLDOVA_VPS_SSH_PATH_STABLE
+NEXT_GATE=BOOTSTRAP_ROOT_KEY_AND_STAGE_NETBIRD_MIGRATION
+TASK_RESULT=PASS_NEW_MOLDOVA_VPS_PREFLIGHT
+CHANGES_MADE=false
+ROLLBACK_STARTED=false
+ROLLBACK_RESTORED=null
+MUTATION_OUTCOME=READ_ONLY
+HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"SUPPORT-260929-NEW-MOLDOVA-VPS-PREFLIGHT-99106R1","status":"OK","changes_made":false,"rollback_started":false,"rollback_restored":null}
+
+OUTPUT_END
+CHAT_OUTPUT_END
diff --git a/runtime/latest.json b/runtime/latest.json
index b35455ac..516ed9db 100644
--- a/runtime/latest.json
+++ b/runtime/latest.json
@@ -1,38 +1,38 @@
 {
   "schema_version": 1,
   "channel": "homelab-runtime",
-  "command_id": "SUPPORT-260929-EDGE-FORUM-CERT-RENEW-FIX-9452R1",
+  "command_id": "SUPPORT-260929-NEW-MOLDOVA-VPS-PREFLIGHT-99106R1",
   "status": "OK",
   "rc": 0,
   "host": "pve01",
-  "mode": "change",
-  "component": "edge-forum-cert-renew-fix",
-  "started_at_utc": "2026-09-29T07:52:53Z",
-  "finished_at_utc": "2026-09-29T07:52:53Z",
+  "mode": "read-only",
+  "component": "new-moldova-vps-connectivity-preflight-fallback-ingress",
+  "started_at_utc": "2026-09-29T07:53:22Z",
+  "finished_at_utc": "2026-09-29T07:53:58Z",
   "reference_register_checked": true,
   "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66",
   "error_register_checked": true,
   "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0",
-  "command_sha256": "082a50795f335d198b20aefd4f32cc51082eacfb913fd365e6fd4c78a26601d5",
+  "command_sha256": "81b68454bbd48417a019c1bc8a72cb8acb8187b9d0cf0f4577e0d9bce75a7efc",
   "duplicate_failed_command_blocked": false,
   "block_reason": null,
   "execution_started": true,
-  "change_declared": true,
+  "change_declared": false,
   "result_contract_valid": true,
-  "result_contract_status": "OK",
+  "result_contract_status": null,
   "result_contract_error": null,
   "command_rc": 0,
   "changes_made": false,
   "rollback_started": false,
-  "rollback_restored": false,
+  "rollback_restored": null,
   "mutation_outcome": "NO_MUTATION",
   "sanitized": true,
   "secrets_included": false,
   "private_addresses_included": false,
   "raw_evidence_retained_locally": true,
-  "raw_evidence_sha256": "172a4be130b68a5da392580768ae784f76b4fafa619b4fdfb311187f1492cd7c",
-  "sanitized_output_sha256": "172a4be130b68a5da392580768ae784f76b4fafa619b4fdfb311187f1492cd7c",
+  "raw_evidence_sha256": "51d01e114307c39fea4a2e9c67c8b78462a4ae43c772af7975bd3b0759334245",
+  "sanitized_output_sha256": "eac628cfd2ef449e849cb5b9023361a3f835e8d3afe9d535e26d6cc5a3739f1f",
   "output_truncated_in_json": false,
   "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
-  "output": "EDGE_FORUM_CERT_RENEW_FIX=V1\nMODE=change\nEXPIRY_GATE=OPENSSL_X509_CHECKEND_0\nPVE03_SSH_OK=true\nEDGE_VM130_RUNNING=true\nEDGE_QGA_OK=true\nEDGE_GUEST_EXEC_OK=true\nEDGE_GUEST_PARSE_OK=true\nEDGE_GUEST_EXIT=-1\nFORUM5_PUBLIC_APEX_STRICT_OK_COUNT=0\nFORUM5_PUBLIC_WWW_STRICT_OK_COUNT=0\nDECISION=CERT_REPAIR_NOT_PROVEN\nNEXT_GATE=STOP_AND_RECONCILE_CERT_STATE\nTASK_RESULT=HOLD_EDGE_FORUM_CERT_RENEW_FIX\nCHANGES_MADE=false\nROLLBACK_STARTED=false\nROLLBACK_RESTORED=false\nMUTATION_OUTCOME=CERT_REPAIR_NOT_PROVEN\nHOMELAB_RESULT_CONTRACT={\"version\":1,\"command_id\":\"SUPPORT-260929-EDGE-FORUM-CERT-RENEW-FIX-9452R1\",\"status\":\"OK\",\"changes_made\":false,\"rollback_started\":false,\"rollback_restored\":false}\n"
+  "output": "NEW_MOLDOVA_VPS_PREFLIGHT=V3\nMODE=read-only\nNEW_IPV4=37.221.65.115\nNEW_IPV6=2001:678:6d4:6010::74c\nNEW_LABEL=nb-new.pvepro.ru\nOLD_MOLDOVA_RELAY_DELETED=true\nWINDOWS_INGRESS_SELECTED=PVE01_LAN\nPVE01_LOCAL_PROBE_RC=0\nPVE01_NEW_MOLDOVA_NODE_PROBE=V3\nPVE01_ROLE=pve01\nPVE01_HOSTNAME=pve01\nPVE01_IPV4_ROUTE_RC=0\nPVE01_IPV4_ROUTE=37.221.65.115 via [PRIVATE_IP] dev vmbr0 src [PRIVATE_IP] uid 0 _    cache\nPVE01_IPV6_ROUTE_RC=2\nPVE01_IPV6_ROUTE=RTNETLINK answers: Network is unreachable\nPVE01_DNS_V4_RC=2\nPVE01_DNS_V4=NONE\nPVE01_DNS_V6_RC=2\nPVE01_DNS_V6=NONE\nPVE01_NETBIRD_STATUS_RC=0\nPVE01_NETBIRD_MANAGEMENT_CONNECTED=false\nPVE01_NETBIRD_SIGNAL_CONNECTED=false\nPVE01_OLD_MOLDOVA_HOSTS_LINE_COUNT=1\nPVE01_OLD_MOLDOVA_HOSTS_LINE_1=85.121.4.192 nb.pvepro.ru nb.gram1.ru # WORKERS2-73318-NETBIRD-RELAY\nPVE01_PING4_RC=0\nPVE01_TCP22_SUCCESS_COUNT=5\nPVE01_TCP22_MEDIAN_MS=59\nPVE01_TCP80_SUCCESS_COUNT=0\nPVE01_TCP80_MEDIAN_MS=-1\nPVE01_TCP443_SUCCESS_COUNT=0\nPVE01_TCP443_MEDIAN_MS=-1\nPVE01_SSH_BANNER_SUCCESS_COUNT=5\nPVE01_SSH_HOSTKEY_SCAN_1_RC=0\nPVE01_SSH_HOSTKEY_SCAN_1_FP=SHA256:ytu9AAnI2aNK3shYaQ8GeRWiVegcfIfVzXDczjOn5Kg\nPVE01_SSH_HOSTKEY_SCAN_2_RC=0\nPVE01_SSH_HOSTKEY_SCAN_2_FP=SHA256:ytu9AAnI2aNK3shYaQ8GeRWiVegcfIfVzXDczjOn5Kg\nPVE01_SSH_HOSTKEY_SCAN_3_RC=0\nPVE01_SSH_HOSTKEY_SCAN_3_FP=SHA256:ytu9AAnI2aNK3shYaQ8GeRWiVegcfIfVzXDczjOn5Kg\nPVE01_SSH_HOSTKEY_ALL3_CONSISTENT=true\nPVE01_SSH_HOSTKEY_FINGERPRINT=SHA256:ytu9AAnI2aNK3shYaQ8GeRWiVegcfIfVzXDczjOn5Kg\nPVE01_SSH_NOAUTH_ATTEMPT_1_RC=255\nPVE01_SSH_NOAUTH_ATTEMPT_1_MS=523\nPVE01_SSH_NOAUTH_ATTEMPT_1_MODE=AUTH_DENIED_AFTER_KEX\nPVE01_SSH_NOAUTH_ATTEMPT_2_RC=255\nPVE01_SSH_NOAUTH_ATTEMPT_2_MS=526\nPVE01_SSH_NOAUTH_ATTEMPT_2_MODE=AUTH_DENIED_AFTER_KEX\nPVE01_SSH_NOAUTH_ATTEMPT_3_RC=255\nPVE01_SSH_NOAUTH_ATTEMPT_3_MS=519\nPVE01_SSH_NOAUTH_ATTEMPT_3_MODE=AUTH_DENIED_AFTER_KEX\nPVE01_SSH_NOAUTH_ATTEMPT_4_RC=255\nPVE01_SSH_NOAUTH_ATTEMPT_4_MS=525\nPVE01_SSH_NOAUTH_ATTEMPT_4_MODE=AUTH_DENIED_AFTER_KEX\nPVE01_SSH_NOAUTH_ATTEMPT_5_RC=255\nPVE01_SSH_NOAUTH_ATTEMPT_5_MS=525\nPVE01_SSH_NOAUTH_ATTEMPT_5_MODE=AUTH_DENIED_AFTER_KEX\nPVE01_SSH_NOAUTH_TRANSPORT_SUCCESS_COUNT=5\nPVE01_SSH_NOAUTH_MEDIAN_MS=525\nPVE01_IPV6_TCP22_RESULT=-1\nPVE01_NODE_NEW_VPS_SSH_PATH_STABLE=true\nPVESH_NODES_RC=0\nCLUSTER_NODE_COUNT=3\nCLUSTER_NODE_1=pve01\nCLUSTER_NODE_2=pve03\nCLUSTER_NODE_3=pve02\nPVE03_CLUSTER_SSH_PROBE_RC=0\nPVE03_NEW_MOLDOVA_NODE_PROBE=V3\nPVE03_ROLE=pve03\nPVE03_HOSTNAME=pve03\nPVE03_IPV4_ROUTE_RC=0\nPVE03_IPV4_ROUTE=37.221.65.115 via [PRIVATE_IP] dev vmbr0 src [PRIVATE_IP] uid 0 _    cache\nPVE03_IPV6_ROUTE_RC=2\nPVE03_IPV6_ROUTE=RTNETLINK answers: Network is unreachable\nPVE03_DNS_V4_RC=2\nPVE03_DNS_V4=NONE\nPVE03_DNS_V6_RC=2\nPVE03_DNS_V6=NONE\nPVE03_NETBIRD_STATUS_RC=0\nPVE03_NETBIRD_MANAGEMENT_CONNECTED=false\nPVE03_NETBIRD_SIGNAL_CONNECTED=false\nPVE03_OLD_MOLDOVA_HOSTS_LINE_COUNT=1\nPVE03_OLD_MOLDOVA_HOSTS_LINE_1=85.121.4.192 nb.pvepro.ru nb.gram1.ru # WORKERS2-73336-NETBIRD-RELAY\nPVE03_PING4_RC=0\nPVE03_TCP22_SUCCESS_COUNT=5\nPVE03_TCP22_MEDIAN_MS=59\nPVE03_TCP80_SUCCESS_COUNT=0\nPVE03_TCP80_MEDIAN_MS=-1\nPVE03_TCP443_SUCCESS_COUNT=0\nPVE03_TCP443_MEDIAN_MS=-1\nPVE03_SSH_BANNER_SUCCESS_COUNT=5\nPVE03_SSH_HOSTKEY_SCAN_1_RC=0\nPVE03_SSH_HOSTKEY_SCAN_1_FP=SHA256:ytu9AAnI2aNK3shYaQ8GeRWiVegcfIfVzXDczjOn5Kg\nPVE03_SSH_HOSTKEY_SCAN_2_RC=0\nPVE03_SSH_HOSTKEY_SCAN_2_FP=SHA256:ytu9AAnI2aNK3shYaQ8GeRWiVegcfIfVzXDczjOn5Kg\nPVE03_SSH_HOSTKEY_SCAN_3_RC=0\nPVE03_SSH_HOSTKEY_SCAN_3_FP=SHA256:ytu9AAnI2aNK3shYaQ8GeRWiVegcfIfVzXDczjOn5Kg\nPVE03_SSH_HOSTKEY_ALL3_CONSISTENT=true\nPVE03_SSH_HOSTKEY_FINGERPRINT=SHA256:ytu9AAnI2aNK3shYaQ8GeRWiVegcfIfVzXDczjOn5Kg\nPVE03_SSH_NOAUTH_ATTEMPT_1_RC=255\nPVE03_SSH_NOAUTH_ATTEMPT_1_MS=594\nPVE03_SSH_NOAUTH_ATTEMPT_1_MODE=AUTH_DENIED_AFTER_KEX\nPVE03_SSH_NOAUTH_ATTEMPT_2_RC=255\nPVE03_SSH_NOAUTH_ATTEMPT_2_MS=556\nPVE03_SSH_NOAUTH_ATTEMPT_2_MODE=AUTH_DENIED_AFTER_KEX\nPVE03_SSH_NOAUTH_ATTEMPT_3_RC=255\nPVE03_SSH_NOAUTH_ATTEMPT_3_MS=544\nPVE03_SSH_NOAUTH_ATTEMPT_3_MODE=AUTH_DENIED_AFTER_KEX\nPVE03_SSH_NOAUTH_ATTEMPT_4_RC=255\nPVE03_SSH_NOAUTH_ATTEMPT_4_MS=547\nPVE03_SSH_NOAUTH_ATTEMPT_4_MODE=AUTH_DENIED_AFTER_KEX\nPVE03_SSH_NOAUTH_ATTEMPT_5_RC=255\nPVE03_SSH_NOAUTH_ATTEMPT_5_MS=552\nPVE03_SSH_NOAUTH_ATTEMPT_5_MODE=AUTH_DENIED_AFTER_KEX\nPVE03_SSH_NOAUTH_TRANSPORT_SUCCESS_COUNT=5\nPVE03_SSH_NOAUTH_MEDIAN_MS=552\nPVE03_IPV6_TCP22_RESULT=-1\nPVE03_NODE_NEW_VPS_SSH_PATH_STABLE=true\nPVE02_CLUSTER_SSH_PROBE_RC=0\nPVE02_NEW_MOLDOVA_NODE_PROBE=V3\nPVE02_ROLE=pve02\nPVE02_HOSTNAME=pve02\nPVE02_IPV4_ROUTE_RC=0\nPVE02_IPV4_ROUTE=37.221.65.115 via [PRIVATE_IP] dev vmbr0 src [PRIVATE_IP] uid 0 _    cache\nPVE02_IPV6_ROUTE_RC=2\nPVE02_IPV6_ROUTE=RTNETLINK answers: Network is unreachable\nPVE02_DNS_V4_RC=2\nPVE02_DNS_V4=NONE\nPVE02_DNS_V6_RC=2\nPVE02_DNS_V6=NONE\nPVE02_NETBIRD_STATUS_RC=0\nPVE02_NETBIRD_MANAGEMENT_CONNECTED=false\nPVE02_NETBIRD_SIGNAL_CONNECTED=false\nPVE02_OLD_MOLDOVA_HOSTS_LINE_COUNT=1\nPVE02_OLD_MOLDOVA_HOSTS_LINE_1=85.121.4.192 nb.pvepro.ru nb.gram1.ru # WORKERS2-73336-NETBIRD-RELAY\nPVE02_PING4_RC=0\nPVE02_TCP22_SUCCESS_COUNT=5\nPVE02_TCP22_MEDIAN_MS=58\nPVE02_TCP80_SUCCESS_COUNT=0\nPVE02_TCP80_MEDIAN_MS=-1\nPVE02_TCP443_SUCCESS_COUNT=0\nPVE02_TCP443_MEDIAN_MS=-1\nPVE02_SSH_BANNER_SUCCESS_COUNT=5\nPVE02_SSH_HOSTKEY_SCAN_1_RC=0\nPVE02_SSH_HOSTKEY_SCAN_1_FP=SHA256:ytu9AAnI2aNK3shYaQ8GeRWiVegcfIfVzXDczjOn5Kg\nPVE02_SSH_HOSTKEY_SCAN_2_RC=0\nPVE02_SSH_HOSTKEY_SCAN_2_FP=SHA256:ytu9AAnI2aNK3shYaQ8GeRWiVegcfIfVzXDczjOn5Kg\nPVE02_SSH_HOSTKEY_SCAN_3_RC=0\nPVE02_SSH_HOSTKEY_SCAN_3_FP=SHA256:ytu9AAnI2aNK3shYaQ8GeRWiVegcfIfVzXDczjOn5Kg\nPVE02_SSH_HOSTKEY_ALL3_CONSISTENT=true\nPVE02_SSH_HOSTKEY_FINGERPRINT=SHA256:ytu9AAnI2aNK3shYaQ8GeRWiVegcfIfVzXDczjOn5Kg\nPVE02_SSH_NOAUTH_ATTEMPT_1_RC=255\nPVE02_SSH_NOAUTH_ATTEMPT_1_MS=548\nPVE02_SSH_NOAUTH_ATTEMPT_1_MODE=AUTH_DENIED_AFTER_KEX\nPVE02_SSH_NOAUTH_ATTEMPT_2_RC=255\nPVE02_SSH_NOAUTH_ATTEMPT_2_MS=546\nPVE02_SSH_NOAUTH_ATTEMPT_2_MODE=AUTH_DENIED_AFTER_KEX\nPVE02_SSH_NOAUTH_ATTEMPT_3_RC=255\nPVE02_SSH_NOAUTH_ATTEMPT_3_MS=541\nPVE02_SSH_NOAUTH_ATTEMPT_3_MODE=AUTH_DENIED_AFTER_KEX\nPVE02_SSH_NOAUTH_ATTEMPT_4_RC=255\nPVE02_SSH_NOAUTH_ATTEMPT_4_MS=543\nPVE02_SSH_NOAUTH_ATTEMPT_4_MODE=AUTH_DENIED_AFTER_KEX\nPVE02_SSH_NOAUTH_ATTEMPT_5_RC=255\nPVE02_SSH_NOAUTH_ATTEMPT_5_MS=546\nPVE02_SSH_NOAUTH_ATTEMPT_5_MODE=AUTH_DENIED_AFTER_KEX\nPVE02_SSH_NOAUTH_TRANSPORT_SUCCESS_COUNT=5\nPVE02_SSH_NOAUTH_MEDIAN_MS=546\nPVE02_IPV6_TCP22_RESULT=-1\nPVE02_NODE_NEW_VPS_SSH_PATH_STABLE=true\nALL_THREE_PVE_PROBED=true\nALL_THREE_NEW_VPS_SSH_STABLE=true\nALL_THREE_SEE_SAME_NEW_VPS_HOSTKEY=true\nNEW_VPS_ED25519_FINGERPRINT=SHA256:ytu9AAnI2aNK3shYaQ8GeRWiVegcfIfVzXDczjOn5Kg\nPVE_MANAGEMENT_CONNECTED_COUNT=0\nPVE_SIGNAL_CONNECTED_COUNT=0\nPVE_OLD_MOLDOVA_HOST_OVERRIDE_TOTAL=3\nDECISION=PASS_NEW_MOLDOVA_VPS_SSH_PATH_STABLE\nNEXT_GATE=BOOTSTRAP_ROOT_KEY_AND_STAGE_NETBIRD_MIGRATION\nTASK_RESULT=PASS_NEW_MOLDOVA_VPS_PREFLIGHT\nCHANGES_MADE=false\nROLLBACK_STARTED=false\nROLLBACK_RESTORED=null\nMUTATION_OUTCOME=READ_ONLY\nHOMELAB_RESULT_CONTRACT={\"version\":1,\"command_id\":\"SUPPORT-260929-NEW-MOLDOVA-VPS-PREFLIGHT-99106R1\",\"status\":\"OK\",\"changes_made\":false,\"rollback_started\":false,\"rollback_restored\":null}\n"
 }
diff --git a/runtime/latest.txt b/runtime/latest.txt
index 00012d29..813bcb8a 100644
--- a/runtime/latest.txt
+++ b/runtime/latest.txt
@@ -1,51 +1,215 @@
 CHAT_OUTPUT_BEGIN
-COMMAND_ID=SUPPORT-260929-EDGE-FORUM-CERT-RENEW-FIX-9452R1
+COMMAND_ID=SUPPORT-260929-NEW-MOLDOVA-VPS-PREFLIGHT-99106R1
 STATUS=OK
 RC=0
 HOST=pve01
-MODE=change
-COMPONENT=edge-forum-cert-renew-fix
+MODE=read-only
+COMPONENT=new-moldova-vps-connectivity-preflight-fallback-ingress
 REFERENCE_REGISTER_CHECK=OK
 REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
 ERROR_REGISTER_CHECK=OK
 ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
-COMMAND_SHA256=082a50795f335d198b20aefd4f32cc51082eacfb913fd365e6fd4c78a26601d5
+COMMAND_SHA256=81b68454bbd48417a019c1bc8a72cb8acb8187b9d0cf0f4577e0d9bce75a7efc
 DUPLICATE_FAILED_COMMAND_BLOCKED=false
 EXECUTION_STARTED=true
-CHANGE_DECLARED=true
+CHANGE_DECLARED=false
 RESULT_CONTRACT_VALID=true
-RESULT_CONTRACT_STATUS=OK
+RESULT_CONTRACT_STATUS=NOT_APPLICABLE
 RESULT_CONTRACT_ERROR=NONE
 COMMAND_RC=0
 CHANGES_MADE=false
 ROLLBACK_STARTED=false
-ROLLBACK_RESTORED=false
+ROLLBACK_RESTORED=null
 MUTATION_OUTCOME=NO_MUTATION
 SANITIZED=yes
 SECRETS_INCLUDED=no
 PRIVATE_ADDRESSES_INCLUDED=no
-RAW_EVIDENCE_SHA256=172a4be130b68a5da392580768ae784f76b4fafa619b4fdfb311187f1492cd7c
-SANITIZED_OUTPUT_SHA256=172a4be130b68a5da392580768ae784f76b4fafa619b4fdfb311187f1492cd7c
+RAW_EVIDENCE_SHA256=51d01e114307c39fea4a2e9c67c8b78462a4ae43c772af7975bd3b0759334245
+SANITIZED_OUTPUT_SHA256=eac628cfd2ef449e849cb5b9023361a3f835e8d3afe9d535e26d6cc5a3739f1f
 OUTPUT_BEGIN
-EDGE_FORUM_CERT_RENEW_FIX=V1
-MODE=change
-EXPIRY_GATE=OPENSSL_X509_CHECKEND_0
-PVE03_SSH_OK=true
-EDGE_VM130_RUNNING=true
-EDGE_QGA_OK=true
-EDGE_GUEST_EXEC_OK=true
-EDGE_GUEST_PARSE_OK=true
-EDGE_GUEST_EXIT=-1
-FORUM5_PUBLIC_APEX_STRICT_OK_COUNT=0
-FORUM5_PUBLIC_WWW_STRICT_OK_COUNT=0
-DECISION=CERT_REPAIR_NOT_PROVEN
-NEXT_GATE=STOP_AND_RECONCILE_CERT_STATE
-TASK_RESULT=HOLD_EDGE_FORUM_CERT_RENEW_FIX
+NEW_MOLDOVA_VPS_PREFLIGHT=V3
+MODE=read-only
+NEW_IPV4=37.221.65.115
+NEW_IPV6=2001:678:6d4:6010::74c
+NEW_LABEL=nb-new.pvepro.ru
+OLD_MOLDOVA_RELAY_DELETED=true
+WINDOWS_INGRESS_SELECTED=PVE01_LAN
+PVE01_LOCAL_PROBE_RC=0
+PVE01_NEW_MOLDOVA_NODE_PROBE=V3
+PVE01_ROLE=pve01
+PVE01_HOSTNAME=pve01
+PVE01_IPV4_ROUTE_RC=0
+PVE01_IPV4_ROUTE=37.221.65.115 via [PRIVATE_IP] dev vmbr0 src [PRIVATE_IP] uid 0 _    cache
+PVE01_IPV6_ROUTE_RC=2
+PVE01_IPV6_ROUTE=RTNETLINK answers: Network is unreachable
+PVE01_DNS_V4_RC=2
+PVE01_DNS_V4=NONE
+PVE01_DNS_V6_RC=2
+PVE01_DNS_V6=NONE
+PVE01_NETBIRD_STATUS_RC=0
+PVE01_NETBIRD_MANAGEMENT_CONNECTED=false
+PVE01_NETBIRD_SIGNAL_CONNECTED=false
+PVE01_OLD_MOLDOVA_HOSTS_LINE_COUNT=1
+PVE01_OLD_MOLDOVA_HOSTS_LINE_1=85.121.4.192 nb.pvepro.ru nb.gram1.ru # WORKERS2-73318-NETBIRD-RELAY
+PVE01_PING4_RC=0
+PVE01_TCP22_SUCCESS_COUNT=5
+PVE01_TCP22_MEDIAN_MS=59
+PVE01_TCP80_SUCCESS_COUNT=0
+PVE01_TCP80_MEDIAN_MS=-1
+PVE01_TCP443_SUCCESS_COUNT=0
+PVE01_TCP443_MEDIAN_MS=-1
+PVE01_SSH_BANNER_SUCCESS_COUNT=5
+PVE01_SSH_HOSTKEY_SCAN_1_RC=0
+PVE01_SSH_HOSTKEY_SCAN_1_FP=SHA256:ytu9AAnI2aNK3shYaQ8GeRWiVegcfIfVzXDczjOn5Kg
+PVE01_SSH_HOSTKEY_SCAN_2_RC=0
+PVE01_SSH_HOSTKEY_SCAN_2_FP=SHA256:ytu9AAnI2aNK3shYaQ8GeRWiVegcfIfVzXDczjOn5Kg
+PVE01_SSH_HOSTKEY_SCAN_3_RC=0
+PVE01_SSH_HOSTKEY_SCAN_3_FP=SHA256:ytu9AAnI2aNK3shYaQ8GeRWiVegcfIfVzXDczjOn5Kg
+PVE01_SSH_HOSTKEY_ALL3_CONSISTENT=true
+PVE01_SSH_HOSTKEY_FINGERPRINT=SHA256:ytu9AAnI2aNK3shYaQ8GeRWiVegcfIfVzXDczjOn5Kg
+PVE01_SSH_NOAUTH_ATTEMPT_1_RC=255
+PVE01_SSH_NOAUTH_ATTEMPT_1_MS=523
+PVE01_SSH_NOAUTH_ATTEMPT_1_MODE=AUTH_DENIED_AFTER_KEX
+PVE01_SSH_NOAUTH_ATTEMPT_2_RC=255
+PVE01_SSH_NOAUTH_ATTEMPT_2_MS=526
+PVE01_SSH_NOAUTH_ATTEMPT_2_MODE=AUTH_DENIED_AFTER_KEX
+PVE01_SSH_NOAUTH_ATTEMPT_3_RC=255
+PVE01_SSH_NOAUTH_ATTEMPT_3_MS=519
+PVE01_SSH_NOAUTH_ATTEMPT_3_MODE=AUTH_DENIED_AFTER_KEX
+PVE01_SSH_NOAUTH_ATTEMPT_4_RC=255
+PVE01_SSH_NOAUTH_ATTEMPT_4_MS=525
+PVE01_SSH_NOAUTH_ATTEMPT_4_MODE=AUTH_DENIED_AFTER_KEX
+PVE01_SSH_NOAUTH_ATTEMPT_5_RC=255
+PVE01_SSH_NOAUTH_ATTEMPT_5_MS=525
+PVE01_SSH_NOAUTH_ATTEMPT_5_MODE=AUTH_DENIED_AFTER_KEX
+PVE01_SSH_NOAUTH_TRANSPORT_SUCCESS_COUNT=5
+PVE01_SSH_NOAUTH_MEDIAN_MS=525
+PVE01_IPV6_TCP22_RESULT=-1
+PVE01_NODE_NEW_VPS_SSH_PATH_STABLE=true
+PVESH_NODES_RC=0
+CLUSTER_NODE_COUNT=3
+CLUSTER_NODE_1=pve01
+CLUSTER_NODE_2=pve03
+CLUSTER_NODE_3=pve02
+PVE03_CLUSTER_SSH_PROBE_RC=0
+PVE03_NEW_MOLDOVA_NODE_PROBE=V3
+PVE03_ROLE=pve03
+PVE03_HOSTNAME=pve03
+PVE03_IPV4_ROUTE_RC=0
+PVE03_IPV4_ROUTE=37.221.65.115 via [PRIVATE_IP] dev vmbr0 src [PRIVATE_IP] uid 0 _    cache
+PVE03_IPV6_ROUTE_RC=2
+PVE03_IPV6_ROUTE=RTNETLINK answers: Network is unreachable
+PVE03_DNS_V4_RC=2
+PVE03_DNS_V4=NONE
+PVE03_DNS_V6_RC=2
+PVE03_DNS_V6=NONE
+PVE03_NETBIRD_STATUS_RC=0
+PVE03_NETBIRD_MANAGEMENT_CONNECTED=false
+PVE03_NETBIRD_SIGNAL_CONNECTED=false
+PVE03_OLD_MOLDOVA_HOSTS_LINE_COUNT=1
+PVE03_OLD_MOLDOVA_HOSTS_LINE_1=85.121.4.192 nb.pvepro.ru nb.gram1.ru # WORKERS2-73336-NETBIRD-RELAY
+PVE03_PING4_RC=0
+PVE03_TCP22_SUCCESS_COUNT=5
+PVE03_TCP22_MEDIAN_MS=59
+PVE03_TCP80_SUCCESS_COUNT=0
+PVE03_TCP80_MEDIAN_MS=-1
+PVE03_TCP443_SUCCESS_COUNT=0
+PVE03_TCP443_MEDIAN_MS=-1
+PVE03_SSH_BANNER_SUCCESS_COUNT=5
+PVE03_SSH_HOSTKEY_SCAN_1_RC=0
+PVE03_SSH_HOSTKEY_SCAN_1_FP=SHA256:ytu9AAnI2aNK3shYaQ8GeRWiVegcfIfVzXDczjOn5Kg
+PVE03_SSH_HOSTKEY_SCAN_2_RC=0
+PVE03_SSH_HOSTKEY_SCAN_2_FP=SHA256:ytu9AAnI2aNK3shYaQ8GeRWiVegcfIfVzXDczjOn5Kg
+PVE03_SSH_HOSTKEY_SCAN_3_RC=0
+PVE03_SSH_HOSTKEY_SCAN_3_FP=SHA256:ytu9AAnI2aNK3shYaQ8GeRWiVegcfIfVzXDczjOn5Kg
+PVE03_SSH_HOSTKEY_ALL3_CONSISTENT=true
+PVE03_SSH_HOSTKEY_FINGERPRINT=SHA256:ytu9AAnI2aNK3shYaQ8GeRWiVegcfIfVzXDczjOn5Kg
+PVE03_SSH_NOAUTH_ATTEMPT_1_RC=255
+PVE03_SSH_NOAUTH_ATTEMPT_1_MS=594
+PVE03_SSH_NOAUTH_ATTEMPT_1_MODE=AUTH_DENIED_AFTER_KEX
+PVE03_SSH_NOAUTH_ATTEMPT_2_RC=255
+PVE03_SSH_NOAUTH_ATTEMPT_2_MS=556
+PVE03_SSH_NOAUTH_ATTEMPT_2_MODE=AUTH_DENIED_AFTER_KEX
+PVE03_SSH_NOAUTH_ATTEMPT_3_RC=255
+PVE03_SSH_NOAUTH_ATTEMPT_3_MS=544
+PVE03_SSH_NOAUTH_ATTEMPT_3_MODE=AUTH_DENIED_AFTER_KEX
+PVE03_SSH_NOAUTH_ATTEMPT_4_RC=255
+PVE03_SSH_NOAUTH_ATTEMPT_4_MS=547
+PVE03_SSH_NOAUTH_ATTEMPT_4_MODE=AUTH_DENIED_AFTER_KEX
+PVE03_SSH_NOAUTH_ATTEMPT_5_RC=255
+PVE03_SSH_NOAUTH_ATTEMPT_5_MS=552
+PVE03_SSH_NOAUTH_ATTEMPT_5_MODE=AUTH_DENIED_AFTER_KEX
+PVE03_SSH_NOAUTH_TRANSPORT_SUCCESS_COUNT=5
+PVE03_SSH_NOAUTH_MEDIAN_MS=552
+PVE03_IPV6_TCP22_RESULT=-1
+PVE03_NODE_NEW_VPS_SSH_PATH_STABLE=true
+PVE02_CLUSTER_SSH_PROBE_RC=0
+PVE02_NEW_MOLDOVA_NODE_PROBE=V3
+PVE02_ROLE=pve02
+PVE02_HOSTNAME=pve02
+PVE02_IPV4_ROUTE_RC=0
+PVE02_IPV4_ROUTE=37.221.65.115 via [PRIVATE_IP] dev vmbr0 src [PRIVATE_IP] uid 0 _    cache
+PVE02_IPV6_ROUTE_RC=2
+PVE02_IPV6_ROUTE=RTNETLINK answers: Network is unreachable
+PVE02_DNS_V4_RC=2
+PVE02_DNS_V4=NONE
+PVE02_DNS_V6_RC=2
+PVE02_DNS_V6=NONE
+PVE02_NETBIRD_STATUS_RC=0
+PVE02_NETBIRD_MANAGEMENT_CONNECTED=false
+PVE02_NETBIRD_SIGNAL_CONNECTED=false
+PVE02_OLD_MOLDOVA_HOSTS_LINE_COUNT=1
+PVE02_OLD_MOLDOVA_HOSTS_LINE_1=85.121.4.192 nb.pvepro.ru nb.gram1.ru # WORKERS2-73336-NETBIRD-RELAY
+PVE02_PING4_RC=0
+PVE02_TCP22_SUCCESS_COUNT=5
+PVE02_TCP22_MEDIAN_MS=58
+PVE02_TCP80_SUCCESS_COUNT=0
+PVE02_TCP80_MEDIAN_MS=-1
+PVE02_TCP443_SUCCESS_COUNT=0
+PVE02_TCP443_MEDIAN_MS=-1
+PVE02_SSH_BANNER_SUCCESS_COUNT=5
+PVE02_SSH_HOSTKEY_SCAN_1_RC=0
+PVE02_SSH_HOSTKEY_SCAN_1_FP=SHA256:ytu9AAnI2aNK3shYaQ8GeRWiVegcfIfVzXDczjOn5Kg
+PVE02_SSH_HOSTKEY_SCAN_2_RC=0
+PVE02_SSH_HOSTKEY_SCAN_2_FP=SHA256:ytu9AAnI2aNK3shYaQ8GeRWiVegcfIfVzXDczjOn5Kg
+PVE02_SSH_HOSTKEY_SCAN_3_RC=0
+PVE02_SSH_HOSTKEY_SCAN_3_FP=SHA256:ytu9AAnI2aNK3shYaQ8GeRWiVegcfIfVzXDczjOn5Kg
+PVE02_SSH_HOSTKEY_ALL3_CONSISTENT=true
+PVE02_SSH_HOSTKEY_FINGERPRINT=SHA256:ytu9AAnI2aNK3shYaQ8GeRWiVegcfIfVzXDczjOn5Kg
+PVE02_SSH_NOAUTH_ATTEMPT_1_RC=255
+PVE02_SSH_NOAUTH_ATTEMPT_1_MS=548
+PVE02_SSH_NOAUTH_ATTEMPT_1_MODE=AUTH_DENIED_AFTER_KEX
+PVE02_SSH_NOAUTH_ATTEMPT_2_RC=255
+PVE02_SSH_NOAUTH_ATTEMPT_2_MS=546
+PVE02_SSH_NOAUTH_ATTEMPT_2_MODE=AUTH_DENIED_AFTER_KEX
+PVE02_SSH_NOAUTH_ATTEMPT_3_RC=255
+PVE02_SSH_NOAUTH_ATTEMPT_3_MS=541
+PVE02_SSH_NOAUTH_ATTEMPT_3_MODE=AUTH_DENIED_AFTER_KEX
+PVE02_SSH_NOAUTH_ATTEMPT_4_RC=255
+PVE02_SSH_NOAUTH_ATTEMPT_4_MS=543
+PVE02_SSH_NOAUTH_ATTEMPT_4_MODE=AUTH_DENIED_AFTER_KEX
+PVE02_SSH_NOAUTH_ATTEMPT_5_RC=255
+PVE02_SSH_NOAUTH_ATTEMPT_5_MS=546
+PVE02_SSH_NOAUTH_ATTEMPT_5_MODE=AUTH_DENIED_AFTER_KEX
+PVE02_SSH_NOAUTH_TRANSPORT_SUCCESS_COUNT=5
+PVE02_SSH_NOAUTH_MEDIAN_MS=546
+PVE02_IPV6_TCP22_RESULT=-1
+PVE02_NODE_NEW_VPS_SSH_PATH_STABLE=true
+ALL_THREE_PVE_PROBED=true
+ALL_THREE_NEW_VPS_SSH_STABLE=true
+ALL_THREE_SEE_SAME_NEW_VPS_HOSTKEY=true
+NEW_VPS_ED25519_FINGERPRINT=SHA256:ytu9AAnI2aNK3shYaQ8GeRWiVegcfIfVzXDczjOn5Kg
+PVE_MANAGEMENT_CONNECTED_COUNT=0
+PVE_SIGNAL_CONNECTED_COUNT=0
+PVE_OLD_MOLDOVA_HOST_OVERRIDE_TOTAL=3
+DECISION=PASS_NEW_MOLDOVA_VPS_SSH_PATH_STABLE
+NEXT_GATE=BOOTSTRAP_ROOT_KEY_AND_STAGE_NETBIRD_MIGRATION
+TASK_RESULT=PASS_NEW_MOLDOVA_VPS_PREFLIGHT
 CHANGES_MADE=false
 ROLLBACK_STARTED=false
-ROLLBACK_RESTORED=false
-MUTATION_OUTCOME=CERT_REPAIR_NOT_PROVEN
-HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"SUPPORT-260929-EDGE-FORUM-CERT-RENEW-FIX-9452R1","status":"OK","changes_made":false,"rollback_started":false,"rollback_restored":false}
+ROLLBACK_RESTORED=null
+MUTATION_OUTCOME=READ_ONLY
+HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"SUPPORT-260929-NEW-MOLDOVA-VPS-PREFLIGHT-99106R1","status":"OK","changes_made":false,"rollback_started":false,"rollback_restored":null}
 
 OUTPUT_END
 CHAT_OUTPUT_END