diff --git a/runtime/history/SUPPORT-260911-INFRA-DR-VPS-US-HOSTKEY-LIVE-DIAG-215R1.json b/runtime/history/SUPPORT-260911-INFRA-DR-VPS-US-HOSTKEY-LIVE-DIAG-215R1.json
new file mode 100644
index 00000000..928281c1
--- /dev/null
+++ b/runtime/history/SUPPORT-260911-INFRA-DR-VPS-US-HOSTKEY-LIVE-DIAG-215R1.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": 1,
+  "channel": "homelab-runtime",
+  "command_id": "SUPPORT-260911-INFRA-DR-VPS-US-HOSTKEY-LIVE-DIAG-215R1",
+  "status": "OK",
+  "rc": 0,
+  "host": "pve01",
+  "mode": "read-only",
+  "component": "infra-dr-vps-us-hostkey-live-diag",
+  "started_at_utc": "2026-09-11T13:45:36Z",
+  "finished_at_utc": "2026-09-11T13:45:36Z",
+  "reference_register_checked": true,
+  "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66",
+  "error_register_checked": true,
+  "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0",
+  "command_sha256": "8aa7c3918677380ced49720b07213e2357393b5b6a058fd20fb65f68712db4c8",
+  "duplicate_failed_command_blocked": false,
+  "block_reason": null,
+  "execution_started": true,
+  "change_declared": false,
+  "result_contract_valid": true,
+  "result_contract_status": null,
+  "result_contract_error": null,
+  "command_rc": 0,
+  "changes_made": false,
+  "rollback_started": false,
+  "rollback_restored": null,
+  "mutation_outcome": "NO_MUTATION",
+  "sanitized": true,
+  "secrets_included": false,
+  "private_addresses_included": false,
+  "raw_evidence_retained_locally": true,
+  "raw_evidence_sha256": "0662b718b9321b74bd15d9ec7657080ac15bd579f2139683d65353b95bb4bc2e",
+  "sanitized_output_sha256": "0662b718b9321b74bd15d9ec7657080ac15bd579f2139683d65353b95bb4bc2e",
+  "output_truncated_in_json": false,
+  "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
+  "output": "VPS215_BEGIN\nCOMMAND_ID=SUPPORT-260911-INFRA-DR-VPS-US-HOSTKEY-LIVE-DIAG-215R1\nROLE=US_NETBIRD\nMODE=HOSTKEY_DIAG_NO_TRUST_CHANGE\nTARGET=46.16.34.129\nUSER=root\nEXPECTED_HOSTKEY=SHA256:CcvO+J97741AHilFAN5Vd7tAzDy+i3B1z7mnBCaIh4g\nEXTERNAL_SSH_HANDSHAKE_ATTEMPTS=1\nUS_PLINK_RC=1\nUS_DIAG=Server also has ecdsa-sha2-nistp256/rsa-sha2-512/rsa-sha2-256 host keys, but we don't know any of them\nUS_DIAG=Host key fingerprint is:\nUS_DIAG=Host key not in manually configured list\nUS_DIAG=FATAL ERROR: Host key not in manually configured list\nHOSTKEY_ACCEPTED=false\nAUTH_SECRET_USED=false\nCHANGES_MADE=false\nVPS215_DECISION=US_LIVE_HOSTKEY_DIAG_CAPTURED_NO_TRUST_CHANGE\nVPS215_END\n"
+}
diff --git a/runtime/history/SUPPORT-260911-INFRA-DR-VPS-US-HOSTKEY-LIVE-DIAG-215R1.txt b/runtime/history/SUPPORT-260911-INFRA-DR-VPS-US-HOSTKEY-LIVE-DIAG-215R1.txt
new file mode 100644
index 00000000..4cfac2bc
--- /dev/null
+++ b/runtime/history/SUPPORT-260911-INFRA-DR-VPS-US-HOSTKEY-LIVE-DIAG-215R1.txt
@@ -0,0 +1,50 @@
+CHAT_OUTPUT_BEGIN
+COMMAND_ID=SUPPORT-260911-INFRA-DR-VPS-US-HOSTKEY-LIVE-DIAG-215R1
+STATUS=OK
+RC=0
+HOST=pve01
+MODE=read-only
+COMPONENT=infra-dr-vps-us-hostkey-live-diag
+REFERENCE_REGISTER_CHECK=OK
+REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
+ERROR_REGISTER_CHECK=OK
+ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
+COMMAND_SHA256=8aa7c3918677380ced49720b07213e2357393b5b6a058fd20fb65f68712db4c8
+DUPLICATE_FAILED_COMMAND_BLOCKED=false
+EXECUTION_STARTED=true
+CHANGE_DECLARED=false
+RESULT_CONTRACT_VALID=true
+RESULT_CONTRACT_STATUS=NOT_APPLICABLE
+RESULT_CONTRACT_ERROR=NONE
+COMMAND_RC=0
+CHANGES_MADE=false
+ROLLBACK_STARTED=false
+ROLLBACK_RESTORED=null
+MUTATION_OUTCOME=NO_MUTATION
+SANITIZED=yes
+SECRETS_INCLUDED=no
+PRIVATE_ADDRESSES_INCLUDED=no
+RAW_EVIDENCE_SHA256=0662b718b9321b74bd15d9ec7657080ac15bd579f2139683d65353b95bb4bc2e
+SANITIZED_OUTPUT_SHA256=0662b718b9321b74bd15d9ec7657080ac15bd579f2139683d65353b95bb4bc2e
+OUTPUT_BEGIN
+VPS215_BEGIN
+COMMAND_ID=SUPPORT-260911-INFRA-DR-VPS-US-HOSTKEY-LIVE-DIAG-215R1
+ROLE=US_NETBIRD
+MODE=HOSTKEY_DIAG_NO_TRUST_CHANGE
+TARGET=46.16.34.129
+USER=root
+EXPECTED_HOSTKEY=SHA256:CcvO+J97741AHilFAN5Vd7tAzDy+i3B1z7mnBCaIh4g
+EXTERNAL_SSH_HANDSHAKE_ATTEMPTS=1
+US_PLINK_RC=1
+US_DIAG=Server also has ecdsa-sha2-nistp256/rsa-sha2-512/rsa-sha2-256 host keys, but we don't know any of them
+US_DIAG=Host key fingerprint is:
+US_DIAG=Host key not in manually configured list
+US_DIAG=FATAL ERROR: Host key not in manually configured list
+HOSTKEY_ACCEPTED=false
+AUTH_SECRET_USED=false
+CHANGES_MADE=false
+VPS215_DECISION=US_LIVE_HOSTKEY_DIAG_CAPTURED_NO_TRUST_CHANGE
+VPS215_END
+
+OUTPUT_END
+CHAT_OUTPUT_END
diff --git a/runtime/latest.json b/runtime/latest.json
index 36be42a6..928281c1 100644
--- a/runtime/latest.json
+++ b/runtime/latest.json
@@ -1,19 +1,19 @@
 {
   "schema_version": 1,
   "channel": "homelab-runtime",
-  "command_id": "SUPPORT-260911-INFRA-DR-VPS-US-NETBIRD-LIVE-INVENTORY-214R1",
+  "command_id": "SUPPORT-260911-INFRA-DR-VPS-US-HOSTKEY-LIVE-DIAG-215R1",
   "status": "OK",
   "rc": 0,
   "host": "pve01",
   "mode": "read-only",
-  "component": "infra-dr-vps-us-netbird-live-inventory",
-  "started_at_utc": "2026-09-11T13:41:05Z",
-  "finished_at_utc": "2026-09-11T13:41:05Z",
+  "component": "infra-dr-vps-us-hostkey-live-diag",
+  "started_at_utc": "2026-09-11T13:45:36Z",
+  "finished_at_utc": "2026-09-11T13:45:36Z",
   "reference_register_checked": true,
   "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66",
   "error_register_checked": true,
   "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0",
-  "command_sha256": "97b4e0ec99fb36ea94885ed18af208c727c66a6d5fe34b78cfb6dbc6e1ba06e6",
+  "command_sha256": "8aa7c3918677380ced49720b07213e2357393b5b6a058fd20fb65f68712db4c8",
   "duplicate_failed_command_blocked": false,
   "block_reason": null,
   "execution_started": true,
@@ -30,9 +30,9 @@
   "secrets_included": false,
   "private_addresses_included": false,
   "raw_evidence_retained_locally": true,
-  "raw_evidence_sha256": "2802a48f7e911fd44d0672d2875f9ff3389559af72f832f23b8f4d80d78a2c92",
-  "sanitized_output_sha256": "2802a48f7e911fd44d0672d2875f9ff3389559af72f832f23b8f4d80d78a2c92",
+  "raw_evidence_sha256": "0662b718b9321b74bd15d9ec7657080ac15bd579f2139683d65353b95bb4bc2e",
+  "sanitized_output_sha256": "0662b718b9321b74bd15d9ec7657080ac15bd579f2139683d65353b95bb4bc2e",
   "output_truncated_in_json": false,
   "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
-  "output": "VPS214_BEGIN\nCOMMAND_ID=SUPPORT-260911-INFRA-DR-VPS-US-NETBIRD-LIVE-INVENTORY-214R1\nROLE=US_NETBIRD\nMODE=READ_ONLY_LIVE_INVENTORY_ATTEMPT\nTARGET=46.16.34.129\nUSER=root\nPINNED_HOSTKEY=SHA256:CcvO+J97741AHilFAN5Vd7tAzDy+i3B1z7mnBCaIh4g\nEXTERNAL_SSH_ATTEMPTS=1\nUS_PLINK_RC=1\nUS_STDERR=FATAL ERROR: Host key not in manually configured list\nCHANGES_MADE=false\nVPS214_DECISION=US_AUTH_OR_TRANSPORT_FAILED_NO_MUTATION\nVPS214_END\n"
+  "output": "VPS215_BEGIN\nCOMMAND_ID=SUPPORT-260911-INFRA-DR-VPS-US-HOSTKEY-LIVE-DIAG-215R1\nROLE=US_NETBIRD\nMODE=HOSTKEY_DIAG_NO_TRUST_CHANGE\nTARGET=46.16.34.129\nUSER=root\nEXPECTED_HOSTKEY=SHA256:CcvO+J97741AHilFAN5Vd7tAzDy+i3B1z7mnBCaIh4g\nEXTERNAL_SSH_HANDSHAKE_ATTEMPTS=1\nUS_PLINK_RC=1\nUS_DIAG=Server also has ecdsa-sha2-nistp256/rsa-sha2-512/rsa-sha2-256 host keys, but we don't know any of them\nUS_DIAG=Host key fingerprint is:\nUS_DIAG=Host key not in manually configured list\nUS_DIAG=FATAL ERROR: Host key not in manually configured list\nHOSTKEY_ACCEPTED=false\nAUTH_SECRET_USED=false\nCHANGES_MADE=false\nVPS215_DECISION=US_LIVE_HOSTKEY_DIAG_CAPTURED_NO_TRUST_CHANGE\nVPS215_END\n"
 }
diff --git a/runtime/latest.txt b/runtime/latest.txt
index c60ba0b4..4cfac2bc 100644
--- a/runtime/latest.txt
+++ b/runtime/latest.txt
@@ -1,15 +1,15 @@
 CHAT_OUTPUT_BEGIN
-COMMAND_ID=SUPPORT-260911-INFRA-DR-VPS-US-NETBIRD-LIVE-INVENTORY-214R1
+COMMAND_ID=SUPPORT-260911-INFRA-DR-VPS-US-HOSTKEY-LIVE-DIAG-215R1
 STATUS=OK
 RC=0
 HOST=pve01
 MODE=read-only
-COMPONENT=infra-dr-vps-us-netbird-live-inventory
+COMPONENT=infra-dr-vps-us-hostkey-live-diag
 REFERENCE_REGISTER_CHECK=OK
 REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
 ERROR_REGISTER_CHECK=OK
 ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
-COMMAND_SHA256=97b4e0ec99fb36ea94885ed18af208c727c66a6d5fe34b78cfb6dbc6e1ba06e6
+COMMAND_SHA256=8aa7c3918677380ced49720b07213e2357393b5b6a058fd20fb65f68712db4c8
 DUPLICATE_FAILED_COMMAND_BLOCKED=false
 EXECUTION_STARTED=true
 CHANGE_DECLARED=false
@@ -24,22 +24,27 @@ MUTATION_OUTCOME=NO_MUTATION
 SANITIZED=yes
 SECRETS_INCLUDED=no
 PRIVATE_ADDRESSES_INCLUDED=no
-RAW_EVIDENCE_SHA256=2802a48f7e911fd44d0672d2875f9ff3389559af72f832f23b8f4d80d78a2c92
-SANITIZED_OUTPUT_SHA256=2802a48f7e911fd44d0672d2875f9ff3389559af72f832f23b8f4d80d78a2c92
+RAW_EVIDENCE_SHA256=0662b718b9321b74bd15d9ec7657080ac15bd579f2139683d65353b95bb4bc2e
+SANITIZED_OUTPUT_SHA256=0662b718b9321b74bd15d9ec7657080ac15bd579f2139683d65353b95bb4bc2e
 OUTPUT_BEGIN
-VPS214_BEGIN
-COMMAND_ID=SUPPORT-260911-INFRA-DR-VPS-US-NETBIRD-LIVE-INVENTORY-214R1
+VPS215_BEGIN
+COMMAND_ID=SUPPORT-260911-INFRA-DR-VPS-US-HOSTKEY-LIVE-DIAG-215R1
 ROLE=US_NETBIRD
-MODE=READ_ONLY_LIVE_INVENTORY_ATTEMPT
+MODE=HOSTKEY_DIAG_NO_TRUST_CHANGE
 TARGET=46.16.34.129
 USER=root
-PINNED_HOSTKEY=SHA256:CcvO+J97741AHilFAN5Vd7tAzDy+i3B1z7mnBCaIh4g
-EXTERNAL_SSH_ATTEMPTS=1
+EXPECTED_HOSTKEY=SHA256:CcvO+J97741AHilFAN5Vd7tAzDy+i3B1z7mnBCaIh4g
+EXTERNAL_SSH_HANDSHAKE_ATTEMPTS=1
 US_PLINK_RC=1
-US_STDERR=FATAL ERROR: Host key not in manually configured list
+US_DIAG=Server also has ecdsa-sha2-nistp256/rsa-sha2-512/rsa-sha2-256 host keys, but we don't know any of them
+US_DIAG=Host key fingerprint is:
+US_DIAG=Host key not in manually configured list
+US_DIAG=FATAL ERROR: Host key not in manually configured list
+HOSTKEY_ACCEPTED=false
+AUTH_SECRET_USED=false
 CHANGES_MADE=false
-VPS214_DECISION=US_AUTH_OR_TRANSPORT_FAILED_NO_MUTATION
-VPS214_END
+VPS215_DECISION=US_LIVE_HOSTKEY_DIAG_CAPTURED_NO_TRUST_CHANGE
+VPS215_END
 
 OUTPUT_END
 CHAT_OUTPUT_END