runtime: publish SUPPORT-260913-INFRA-DR-BACKUPV2-SPB-NGINX-TLS-FAILURE-CLASSIFIER-316R1

runtime/history/SUPPORT-260913-INFRA-DR-BACKUPV2-SPB-NGINX-TLS-FAILURE-CLASSIFIER-316R1.json

@@ -0,0 +1,38 @@
+{
+  "schema_version": 1,
+  "channel": "homelab-runtime",
+  "command_id": "SUPPORT-260913-INFRA-DR-BACKUPV2-SPB-NGINX-TLS-FAILURE-CLASSIFIER-316R1",
+  "status": "OK",
+  "rc": 0,
+  "host": "pve01",
+  "mode": "read-only",
+  "component": "infra-dr-backupv2-spb-nginx-tls-failure-classifier",
+  "started_at_utc": "2026-09-13T15:46:56Z",
+  "finished_at_utc": "2026-09-13T15:47:00Z",
+  "reference_register_checked": true,
+  "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66",
+  "error_register_checked": true,
+  "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0",
+  "command_sha256": "a3473c7f472ba6ccf6bbe87d10cb5ce777d3f94ab43482ffa0fb9b5be2fbf274",
+  "duplicate_failed_command_blocked": false,
+  "block_reason": null,
+  "execution_started": true,
+  "change_declared": false,
+  "result_contract_valid": true,
+  "result_contract_status": null,
+  "result_contract_error": null,
+  "command_rc": 0,
+  "changes_made": false,
+  "rollback_started": false,
+  "rollback_restored": null,
+  "mutation_outcome": "NO_MUTATION",
+  "sanitized": true,
+  "secrets_included": false,
+  "private_addresses_included": false,
+  "raw_evidence_retained_locally": true,
+  "raw_evidence_sha256": "f003fbd39d97bca796f7a0517b27162ef3d6ca89c64771eba4444d5dbc80a44b",
+  "sanitized_output_sha256": "f003fbd39d97bca796f7a0517b27162ef3d6ca89c64771eba4444d5dbc80a44b",
+  "output_truncated_in_json": false,
+  "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
+  "output": "SPB316_BEGIN=\nCOMMAND_ID=SUPPORT-260913-INFRA-DR-BACKUPV2-SPB-NGINX-TLS-FAILURE-CLASSIFIER-316R1\nANCHOR315_COMMIT=2581e478d622bb8503fe4211fa8a4e88f7651aef\nMODE=READ_ONLY_SPB_NGINX_TLS_FAILURE_CLASSIFIER\nCHANGES_MADE=false\nLIVE_TAR_DB_DATA_ALLOWED=NO\nCLOUD_WRITE_ATTEMPTS=0\nEXTERNAL_MUTATIONS=0\nSYSTEMD_MUTATIONS=0\nAUXILIARY_OR_REJECTED_VPS_PROBED=0\nERROR_REGISTER_FRESH_READ=OK\nERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0\nREFERENCE_FRESH_READ=OK\nREFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66\nRUNNER_SHA256=PASS\nFORWARDED_AGENT_READY=YES\nSPB_HOSTKEY_PIN=PASS\nSPB_ACCESS=PASS\nSPB_REMOTE_UID=1000\nSPB_NGINX_TEST_RC=1\nSPB_NGINX_STDERR_BYTES=548\nSPB_NGINX_STDERR_SHA256=fadd50e27b14a485257554b196f46881479adc3074f518af221c51ca89cee423\nSPB_CERT_REF_COUNT=16\nSPB_KEY_REF_COUNT=16\nSPB_KEY_REF_UNREADABLE=16\nSPB_CERT_REF_UNREADABLE=16\nSPB_INCLUDE_MATCH_COUNT=34\nSPB_INCLUDE_UNREADABLE=0\nSPB_RENEWAL_CONFIG_COUNT=15\nSPB_CERTBOT_PRESENT=YES\nSPB_TRACE_STATE=USED\nSPB_TRACE_EXTRA_EACCES_COUNT=1\nSPB_PERMISSION_PATH_COUNT=1\nSPB_TLS_KEY_PERMISSION_COUNT=0\nSPB_TLS_CERT_PERMISSION_COUNT=1\nSPB_CONFIG_INCLUDE_PERMISSION_COUNT=0\nSPB_EXPECTED_RUNTIME_PERMISSION_COUNT=0\nSPB_OTHER_PERMISSION_COUNT=0\nSPB_NONPERMISSION_FATAL_COUNT=0\nSPB_NGINX_FAILURE_CLASS=TLS_CERT_PERMISSION\nSPB_REISSUE_TLS_POLICY_COMPATIBLE=NO\nSPB_TLS_RECOVERY_STRATEGY=REISSUE_TLS_ON_RESTORE\nSPB_TLS_REISSUE_DEPENDENCY=DNS_AND_PUBLIC_HTTP_HTTPS_ROUTING\nSPB_POLICY_READY=NO\nROLE_HOLDS=[{\"reason\":\"SPB_NGINX_TLS_CERT_PERMISSION\",\"role\":\"SPB_INGRESS\"}]\nPOLICY_CLOSURE_COMPLETE=NO\nSTATUS=OK\nPHASE=COMPLETE\nNEXT_GATE=VPS_POLICY_CLOSURE_REQUIRED\nSPB316_END=\n"
+}

runtime/history/SUPPORT-260913-INFRA-DR-BACKUPV2-SPB-NGINX-TLS-FAILURE-CLASSIFIER-316R1.txt

@@ -0,0 +1,82 @@
+CHAT_OUTPUT_BEGIN
+COMMAND_ID=SUPPORT-260913-INFRA-DR-BACKUPV2-SPB-NGINX-TLS-FAILURE-CLASSIFIER-316R1
+STATUS=OK
+RC=0
+HOST=pve01
+MODE=read-only
+COMPONENT=infra-dr-backupv2-spb-nginx-tls-failure-classifier
+REFERENCE_REGISTER_CHECK=OK
+REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
+ERROR_REGISTER_CHECK=OK
+ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
+COMMAND_SHA256=a3473c7f472ba6ccf6bbe87d10cb5ce777d3f94ab43482ffa0fb9b5be2fbf274
+DUPLICATE_FAILED_COMMAND_BLOCKED=false
+EXECUTION_STARTED=true
+CHANGE_DECLARED=false
+RESULT_CONTRACT_VALID=true
+RESULT_CONTRACT_STATUS=NOT_APPLICABLE
+RESULT_CONTRACT_ERROR=NONE
+COMMAND_RC=0
+CHANGES_MADE=false
+ROLLBACK_STARTED=false
+ROLLBACK_RESTORED=null
+MUTATION_OUTCOME=NO_MUTATION
+SANITIZED=yes
+SECRETS_INCLUDED=no
+PRIVATE_ADDRESSES_INCLUDED=no
+RAW_EVIDENCE_SHA256=f003fbd39d97bca796f7a0517b27162ef3d6ca89c64771eba4444d5dbc80a44b
+SANITIZED_OUTPUT_SHA256=f003fbd39d97bca796f7a0517b27162ef3d6ca89c64771eba4444d5dbc80a44b
+OUTPUT_BEGIN
+SPB316_BEGIN=
+COMMAND_ID=SUPPORT-260913-INFRA-DR-BACKUPV2-SPB-NGINX-TLS-FAILURE-CLASSIFIER-316R1
+ANCHOR315_COMMIT=2581e478d622bb8503fe4211fa8a4e88f7651aef
+MODE=READ_ONLY_SPB_NGINX_TLS_FAILURE_CLASSIFIER
+CHANGES_MADE=false
+LIVE_TAR_DB_DATA_ALLOWED=NO
+CLOUD_WRITE_ATTEMPTS=0
+EXTERNAL_MUTATIONS=0
+SYSTEMD_MUTATIONS=0
+AUXILIARY_OR_REJECTED_VPS_PROBED=0
+ERROR_REGISTER_FRESH_READ=OK
+ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
+REFERENCE_FRESH_READ=OK
+REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
+RUNNER_SHA256=PASS
+FORWARDED_AGENT_READY=YES
+SPB_HOSTKEY_PIN=PASS
+SPB_ACCESS=PASS
+SPB_REMOTE_UID=1000
+SPB_NGINX_TEST_RC=1
+SPB_NGINX_STDERR_BYTES=548
+SPB_NGINX_STDERR_SHA256=fadd50e27b14a485257554b196f46881479adc3074f518af221c51ca89cee423
+SPB_CERT_REF_COUNT=16
+SPB_KEY_REF_COUNT=16
+SPB_KEY_REF_UNREADABLE=16
+SPB_CERT_REF_UNREADABLE=16
+SPB_INCLUDE_MATCH_COUNT=34
+SPB_INCLUDE_UNREADABLE=0
+SPB_RENEWAL_CONFIG_COUNT=15
+SPB_CERTBOT_PRESENT=YES
+SPB_TRACE_STATE=USED
+SPB_TRACE_EXTRA_EACCES_COUNT=1
+SPB_PERMISSION_PATH_COUNT=1
+SPB_TLS_KEY_PERMISSION_COUNT=0
+SPB_TLS_CERT_PERMISSION_COUNT=1
+SPB_CONFIG_INCLUDE_PERMISSION_COUNT=0
+SPB_EXPECTED_RUNTIME_PERMISSION_COUNT=0
+SPB_OTHER_PERMISSION_COUNT=0
+SPB_NONPERMISSION_FATAL_COUNT=0
+SPB_NGINX_FAILURE_CLASS=TLS_CERT_PERMISSION
+SPB_REISSUE_TLS_POLICY_COMPATIBLE=NO
+SPB_TLS_RECOVERY_STRATEGY=REISSUE_TLS_ON_RESTORE
+SPB_TLS_REISSUE_DEPENDENCY=DNS_AND_PUBLIC_HTTP_HTTPS_ROUTING
+SPB_POLICY_READY=NO
+ROLE_HOLDS=[{"reason":"SPB_NGINX_TLS_CERT_PERMISSION","role":"SPB_INGRESS"}]
+POLICY_CLOSURE_COMPLETE=NO
+STATUS=OK
+PHASE=COMPLETE
+NEXT_GATE=VPS_POLICY_CLOSURE_REQUIRED
+SPB316_END=
+
+OUTPUT_END
+CHAT_OUTPUT_END

runtime/latest.json

@@ -1,19 +1,19 @@
 {
   "schema_version": 1,
   "channel": "homelab-runtime",
-  "command_id": "SUPPORT-260913-INFRA-DR-BACKUPV2-VPS-POLICY-CLOSURE-315R1",
+  "command_id": "SUPPORT-260913-INFRA-DR-BACKUPV2-SPB-NGINX-TLS-FAILURE-CLASSIFIER-316R1",
   "status": "OK",
   "rc": 0,
   "host": "pve01",
   "mode": "read-only",
-  "component": "infra-dr-backupv2-vps-policy-closure",
-  "started_at_utc": "2026-09-13T15:20:53Z",
-  "finished_at_utc": "2026-09-13T15:21:02Z",
+  "component": "infra-dr-backupv2-spb-nginx-tls-failure-classifier",
+  "started_at_utc": "2026-09-13T15:46:56Z",
+  "finished_at_utc": "2026-09-13T15:47:00Z",
   "reference_register_checked": true,
   "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66",
   "error_register_checked": true,
   "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0",
-  "command_sha256": "7c9e4287929960f12eb2543fc6f15cc42f6e23cc917ef8bea0f4aaf7f1eeb493",
+  "command_sha256": "a3473c7f472ba6ccf6bbe87d10cb5ce777d3f94ab43482ffa0fb9b5be2fbf274",
   "duplicate_failed_command_blocked": false,
   "block_reason": null,
   "execution_started": true,
@@ -30,9 +30,9 @@
   "secrets_included": false,
   "private_addresses_included": false,
   "raw_evidence_retained_locally": true,
-  "raw_evidence_sha256": "e5ff92ae09f1c1239a59ef78745e2fc4af44f8fac3fc7df13e264c5b076ffee1",
-  "sanitized_output_sha256": "e5ff92ae09f1c1239a59ef78745e2fc4af44f8fac3fc7df13e264c5b076ffee1",
+  "raw_evidence_sha256": "f003fbd39d97bca796f7a0517b27162ef3d6ca89c64771eba4444d5dbc80a44b",
+  "sanitized_output_sha256": "f003fbd39d97bca796f7a0517b27162ef3d6ca89c64771eba4444d5dbc80a44b",
   "output_truncated_in_json": false,
   "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
-  "output": "VPS315_BEGIN=\nCOMMAND_ID=SUPPORT-260913-INFRA-DR-BACKUPV2-VPS-POLICY-CLOSURE-315R1\nANCHOR314_COMMIT=e25be13ca38281333f21f1397f53fef70d4da379\nMODE=READ_ONLY_VPS_POLICY_CLOSURE_TLS_REISSUE_SQLITE\nCHANGES_MADE=false\nLIVE_TAR_DB_DATA_ALLOWED=NO\nCLOUD_WRITE_ATTEMPTS=0\nEXTERNAL_MUTATIONS=0\nSYSTEMD_MUTATIONS=0\nFORWARDED_AGENT_READY={\"expected\":true,\"fingerprints\":[\"SHA256:JMCyBDSD7PKqwwKndzDGAO4Lgm55nEmec9Ssn6QGtKg\"],\"present\":true}\nUS_OPERATOR_KEY_READY={\"fingerprint_match\":true,\"fingerprints\":[\"SHA256:wipXiBB3cpAwyWap9LcB185WjEEmDxtRJsI/UuMVAp0\"],\"present\":true}\nROLE_POLICY={\"access\":\"PASS\",\"complete\":true,\"hostkey\":{\"expected\":\"SHA256:Ef+HsZb8lIXoadvYBXuGKIL3H7NyJMmf9EYCoJRoSv8\",\"observed\":[\"SHA256:Ef+HsZb8lIXoadvYBXuGKIL3H7NyJMmf9EYCoJRoSv8\"],\"status\":\"PASS\"},\"policy\":{\"cert_ref_count\":15,\"certbot\":true,\"dependency\":\"DNS_AND_PUBLIC_HTTP_HTTPS_ROUTING\",\"http_listen_count\":32,\"key_ref_count\":15,\"live_tar_db_data_allowed\":false,\"nginx_failure_class\":\"PERMISSION_OTHER\",\"ready\":false,\"server_name_count\":28,\"strategy\":\"REISSUE_TLS_ON_RESTORE\"},\"role\":\"SPB_INGRESS\",\"ssh\":{\"complete\":true,\"rc\":0,\"rows\":[\"POLICY_BEGIN\",\"ROLE=SPB_INGRESS\",\"REMOTE_UID=1000\",\"REMOTE_USER=edgeadmin\",\"SUDO_NONINTERACTIVE=NO\",\"SPB_CERTBOT=YES\",\"SPB_CERTBOT_VERSION=certbot 4.0.0\",\"SPB_SERVER_NAME_COUNT=28\",\"SPB_HTTP_LISTEN_COUNT=32\",\"SPB_CERT_REF_COUNT=15\",\"SPB_KEY_REF_COUNT=15\",\"SPB_RENEWAL_CONFIG_COUNT=15\",\"SPB_KEY_REF_TOTAL=15\",\"SPB_KEY_REF_UNREADABLE=15\",\"SPB_NGINX_TEST_RC=1\",\"SPB_NGINX_FAILURE_CLASS=PERMISSION_OTHER\",\"SPB_NGINX_STDERR_BYTES=547\",\"SPB_NGINX_STDERR_SHA256=ae48c7d965f36c1608e99cfd28a1e0a8634d597bababc841136fca184ffc73a3\",\"SPB_TLS_RECOVERY_STRATEGY=REISSUE_TLS_ON_RESTORE\",\"SPB_TLS_REISSUE_DEPENDENCY=DNS_AND_PUBLIC_HTTP_HTTPS_ROUTING\",\"LIVE_TAR_DB_DATA_ALLOWED=NO\",\"POLICY_END\"],\"stderr_bytes\":0,\"stderr_sha256\":\"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\"}}\nROLE_POLICY={\"access\":\"PASS\",\"complete\":true,\"hostkey\":{\"expected\":\"SHA256:805Q9eh/fePUci42dfY58I6q0lFiiPHn0/M+mckypmE\",\"observed\":[\"SHA256:805Q9eh/fePUci42dfY58I6q0lFiiPHn0/M+mckypmE\"],\"status\":\"PASS\"},\"policy\":{\"acme_json_ok\":true,\"live_tar_db_data_allowed\":false,\"method\":\"PYTHON_SQLITE3_BACKUP_API\",\"ready\":true,\"sqlite_count\":4,\"sqlite_quickcheck_ok\":4},\"role\":\"US_NETBIRD\",\"ssh\":{\"complete\":true,\"rc\":0,\"rows\":[\"POLICY_BEGIN\",\"ROLE=US_NETBIRD\",\"REMOTE_UID=0\",\"REMOTE_USER=root\",\"SUDO_NONINTERACTIVE=YES\",\"US_PYTHON3=YES\",\"US_PYTHON_SQLITE_BACKUP_API=YES\",\"US_SQLITE_CHECK=events.db|quick_check=OK|journal=delete|pages=10|bytes=40960\",\"US_SQLITE_CHECK=geonames_20260602.db|quick_check=OK|journal=delete|pages=1766|bytes=7233536\",\"US_SQLITE_CHECK=idp.db|quick_check=OK|journal=delete|pages=28|bytes=114688\",\"US_SQLITE_CHECK=store.db|quick_check=OK|journal=delete|pages=137|bytes=561152\",\"US_ACME_JSON=600|0|0|28394|json=OK\",\"US_SQLITE_ONLINE_BACKUP_METHOD=PYTHON_SQLITE3_BACKUP_API\",\"LIVE_TAR_DB_DATA_ALLOWED=NO\",\"POLICY_END\"],\"stderr_bytes\":0,\"stderr_sha256\":\"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\"}}\nPOLICIES=[{\"cert_ref_count\":15,\"certbot\":true,\"dependency\":\"DNS_AND_PUBLIC_HTTP_HTTPS_ROUTING\",\"http_listen_count\":32,\"key_ref_count\":15,\"live_tar_db_data_allowed\":false,\"nginx_failure_class\":\"PERMISSION_OTHER\",\"ready\":false,\"role\":\"SPB_INGRESS\",\"server_name_count\":28,\"strategy\":\"REISSUE_TLS_ON_RESTORE\"},{\"acme_json_ok\":true,\"live_tar_db_data_allowed\":false,\"method\":\"PYTHON_SQLITE3_BACKUP_API\",\"ready\":true,\"role\":\"US_NETBIRD\",\"sqlite_count\":4,\"sqlite_quickcheck_ok\":4}]\nROLE_HOLDS=[{\"reason\":\"POLICY_NOT_READY\",\"role\":\"SPB_INGRESS\"}]\nPOLICY_CLOSURE_COMPLETE=NO\nSPB_TLS_POLICY=REISSUE_TLS_ON_RESTORE\nUS_SQLITE_BACKUP_POLICY=PYTHON_SQLITE3_BACKUP_API\nSTATUS=OK\nPHASE=COMPLETE\nNEXT_GATE=VPS_POLICY_CLOSURE_REQUIRED\nVPS315_END=\n"
+  "output": "SPB316_BEGIN=\nCOMMAND_ID=SUPPORT-260913-INFRA-DR-BACKUPV2-SPB-NGINX-TLS-FAILURE-CLASSIFIER-316R1\nANCHOR315_COMMIT=2581e478d622bb8503fe4211fa8a4e88f7651aef\nMODE=READ_ONLY_SPB_NGINX_TLS_FAILURE_CLASSIFIER\nCHANGES_MADE=false\nLIVE_TAR_DB_DATA_ALLOWED=NO\nCLOUD_WRITE_ATTEMPTS=0\nEXTERNAL_MUTATIONS=0\nSYSTEMD_MUTATIONS=0\nAUXILIARY_OR_REJECTED_VPS_PROBED=0\nERROR_REGISTER_FRESH_READ=OK\nERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0\nREFERENCE_FRESH_READ=OK\nREFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66\nRUNNER_SHA256=PASS\nFORWARDED_AGENT_READY=YES\nSPB_HOSTKEY_PIN=PASS\nSPB_ACCESS=PASS\nSPB_REMOTE_UID=1000\nSPB_NGINX_TEST_RC=1\nSPB_NGINX_STDERR_BYTES=548\nSPB_NGINX_STDERR_SHA256=fadd50e27b14a485257554b196f46881479adc3074f518af221c51ca89cee423\nSPB_CERT_REF_COUNT=16\nSPB_KEY_REF_COUNT=16\nSPB_KEY_REF_UNREADABLE=16\nSPB_CERT_REF_UNREADABLE=16\nSPB_INCLUDE_MATCH_COUNT=34\nSPB_INCLUDE_UNREADABLE=0\nSPB_RENEWAL_CONFIG_COUNT=15\nSPB_CERTBOT_PRESENT=YES\nSPB_TRACE_STATE=USED\nSPB_TRACE_EXTRA_EACCES_COUNT=1\nSPB_PERMISSION_PATH_COUNT=1\nSPB_TLS_KEY_PERMISSION_COUNT=0\nSPB_TLS_CERT_PERMISSION_COUNT=1\nSPB_CONFIG_INCLUDE_PERMISSION_COUNT=0\nSPB_EXPECTED_RUNTIME_PERMISSION_COUNT=0\nSPB_OTHER_PERMISSION_COUNT=0\nSPB_NONPERMISSION_FATAL_COUNT=0\nSPB_NGINX_FAILURE_CLASS=TLS_CERT_PERMISSION\nSPB_REISSUE_TLS_POLICY_COMPATIBLE=NO\nSPB_TLS_RECOVERY_STRATEGY=REISSUE_TLS_ON_RESTORE\nSPB_TLS_REISSUE_DEPENDENCY=DNS_AND_PUBLIC_HTTP_HTTPS_ROUTING\nSPB_POLICY_READY=NO\nROLE_HOLDS=[{\"reason\":\"SPB_NGINX_TLS_CERT_PERMISSION\",\"role\":\"SPB_INGRESS\"}]\nPOLICY_CLOSURE_COMPLETE=NO\nSTATUS=OK\nPHASE=COMPLETE\nNEXT_GATE=VPS_POLICY_CLOSURE_REQUIRED\nSPB316_END=\n"
 }

runtime/latest.txt

@@ -1,15 +1,15 @@
 CHAT_OUTPUT_BEGIN
-COMMAND_ID=SUPPORT-260913-INFRA-DR-BACKUPV2-VPS-POLICY-CLOSURE-315R1
+COMMAND_ID=SUPPORT-260913-INFRA-DR-BACKUPV2-SPB-NGINX-TLS-FAILURE-CLASSIFIER-316R1
 STATUS=OK
 RC=0
 HOST=pve01
 MODE=read-only
-COMPONENT=infra-dr-backupv2-vps-policy-closure
+COMPONENT=infra-dr-backupv2-spb-nginx-tls-failure-classifier
 REFERENCE_REGISTER_CHECK=OK
 REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
 ERROR_REGISTER_CHECK=OK
 ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
-COMMAND_SHA256=7c9e4287929960f12eb2543fc6f15cc42f6e23cc917ef8bea0f4aaf7f1eeb493
+COMMAND_SHA256=a3473c7f472ba6ccf6bbe87d10cb5ce777d3f94ab43482ffa0fb9b5be2fbf274
 DUPLICATE_FAILED_COMMAND_BLOCKED=false
 EXECUTION_STARTED=true
 CHANGE_DECLARED=false
@@ -24,31 +24,59 @@ MUTATION_OUTCOME=NO_MUTATION
 SANITIZED=yes
 SECRETS_INCLUDED=no
 PRIVATE_ADDRESSES_INCLUDED=no
-RAW_EVIDENCE_SHA256=e5ff92ae09f1c1239a59ef78745e2fc4af44f8fac3fc7df13e264c5b076ffee1
-SANITIZED_OUTPUT_SHA256=e5ff92ae09f1c1239a59ef78745e2fc4af44f8fac3fc7df13e264c5b076ffee1
+RAW_EVIDENCE_SHA256=f003fbd39d97bca796f7a0517b27162ef3d6ca89c64771eba4444d5dbc80a44b
+SANITIZED_OUTPUT_SHA256=f003fbd39d97bca796f7a0517b27162ef3d6ca89c64771eba4444d5dbc80a44b
 OUTPUT_BEGIN
-VPS315_BEGIN=
-COMMAND_ID=SUPPORT-260913-INFRA-DR-BACKUPV2-VPS-POLICY-CLOSURE-315R1
-ANCHOR314_COMMIT=e25be13ca38281333f21f1397f53fef70d4da379
-MODE=READ_ONLY_VPS_POLICY_CLOSURE_TLS_REISSUE_SQLITE
+SPB316_BEGIN=
+COMMAND_ID=SUPPORT-260913-INFRA-DR-BACKUPV2-SPB-NGINX-TLS-FAILURE-CLASSIFIER-316R1
+ANCHOR315_COMMIT=2581e478d622bb8503fe4211fa8a4e88f7651aef
+MODE=READ_ONLY_SPB_NGINX_TLS_FAILURE_CLASSIFIER
 CHANGES_MADE=false
 LIVE_TAR_DB_DATA_ALLOWED=NO
 CLOUD_WRITE_ATTEMPTS=0
 EXTERNAL_MUTATIONS=0
 SYSTEMD_MUTATIONS=0
-FORWARDED_AGENT_READY={"expected":true,"fingerprints":["SHA256:JMCyBDSD7PKqwwKndzDGAO4Lgm55nEmec9Ssn6QGtKg"],"present":true}
-US_OPERATOR_KEY_READY={"fingerprint_match":true,"fingerprints":["SHA256:wipXiBB3cpAwyWap9LcB185WjEEmDxtRJsI/UuMVAp0"],"present":true}
-ROLE_POLICY={"access":"PASS","complete":true,"hostkey":{"expected":"SHA256:Ef+HsZb8lIXoadvYBXuGKIL3H7NyJMmf9EYCoJRoSv8","observed":["SHA256:Ef+HsZb8lIXoadvYBXuGKIL3H7NyJMmf9EYCoJRoSv8"],"status":"PASS"},"policy":{"cert_ref_count":15,"certbot":true,"dependency":"DNS_AND_PUBLIC_HTTP_HTTPS_ROUTING","http_listen_count":32,"key_ref_count":15,"live_tar_db_data_allowed":false,"nginx_failure_class":"PERMISSION_OTHER","ready":false,"server_name_count":28,"strategy":"REISSUE_TLS_ON_RESTORE"},"role":"SPB_INGRESS","ssh":{"complete":true,"rc":0,"rows":["POLICY_BEGIN","ROLE=SPB_INGRESS","REMOTE_UID=1000","REMOTE_USER=edgeadmin","SUDO_NONINTERACTIVE=NO","SPB_CERTBOT=YES","SPB_CERTBOT_VERSION=certbot 4.0.0","SPB_SERVER_NAME_COUNT=28","SPB_HTTP_LISTEN_COUNT=32","SPB_CERT_REF_COUNT=15","SPB_KEY_REF_COUNT=15","SPB_RENEWAL_CONFIG_COUNT=15","SPB_KEY_REF_TOTAL=15","SPB_KEY_REF_UNREADABLE=15","SPB_NGINX_TEST_RC=1","SPB_NGINX_FAILURE_CLASS=PERMISSION_OTHER","SPB_NGINX_STDERR_BYTES=547","SPB_NGINX_STDERR_SHA256=ae48c7d965f36c1608e99cfd28a1e0a8634d597bababc841136fca184ffc73a3","SPB_TLS_RECOVERY_STRATEGY=REISSUE_TLS_ON_RESTORE","SPB_TLS_REISSUE_DEPENDENCY=DNS_AND_PUBLIC_HTTP_HTTPS_ROUTING","LIVE_TAR_DB_DATA_ALLOWED=NO","POLICY_END"],"stderr_bytes":0,"stderr_sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"}}
-ROLE_POLICY={"access":"PASS","complete":true,"hostkey":{"expected":"SHA256:805Q9eh/fePUci42dfY58I6q0lFiiPHn0/M+mckypmE","observed":["SHA256:805Q9eh/fePUci42dfY58I6q0lFiiPHn0/M+mckypmE"],"status":"PASS"},"policy":{"acme_json_ok":true,"live_tar_db_data_allowed":false,"method":"PYTHON_SQLITE3_BACKUP_API","ready":true,"sqlite_count":4,"sqlite_quickcheck_ok":4},"role":"US_NETBIRD","ssh":{"complete":true,"rc":0,"rows":["POLICY_BEGIN","ROLE=US_NETBIRD","REMOTE_UID=0","REMOTE_USER=root","SUDO_NONINTERACTIVE=YES","US_PYTHON3=YES","US_PYTHON_SQLITE_BACKUP_API=YES","US_SQLITE_CHECK=events.db|quick_check=OK|journal=delete|pages=10|bytes=40960","US_SQLITE_CHECK=geonames_20260602.db|quick_check=OK|journal=delete|pages=1766|bytes=7233536","US_SQLITE_CHECK=idp.db|quick_check=OK|journal=delete|pages=28|bytes=114688","US_SQLITE_CHECK=store.db|quick_check=OK|journal=delete|pages=137|bytes=561152","US_ACME_JSON=600|0|0|28394|json=OK","US_SQLITE_ONLINE_BACKUP_METHOD=PYTHON_SQLITE3_BACKUP_API","LIVE_TAR_DB_DATA_ALLOWED=NO","POLICY_END"],"stderr_bytes":0,"stderr_sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"}}
-POLICIES=[{"cert_ref_count":15,"certbot":true,"dependency":"DNS_AND_PUBLIC_HTTP_HTTPS_ROUTING","http_listen_count":32,"key_ref_count":15,"live_tar_db_data_allowed":false,"nginx_failure_class":"PERMISSION_OTHER","ready":false,"role":"SPB_INGRESS","server_name_count":28,"strategy":"REISSUE_TLS_ON_RESTORE"},{"acme_json_ok":true,"live_tar_db_data_allowed":false,"method":"PYTHON_SQLITE3_BACKUP_API","ready":true,"role":"US_NETBIRD","sqlite_count":4,"sqlite_quickcheck_ok":4}]
-ROLE_HOLDS=[{"reason":"POLICY_NOT_READY","role":"SPB_INGRESS"}]
+AUXILIARY_OR_REJECTED_VPS_PROBED=0
+ERROR_REGISTER_FRESH_READ=OK
+ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
+REFERENCE_FRESH_READ=OK
+REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
+RUNNER_SHA256=PASS
+FORWARDED_AGENT_READY=YES
+SPB_HOSTKEY_PIN=PASS
+SPB_ACCESS=PASS
+SPB_REMOTE_UID=1000
+SPB_NGINX_TEST_RC=1
+SPB_NGINX_STDERR_BYTES=548
+SPB_NGINX_STDERR_SHA256=fadd50e27b14a485257554b196f46881479adc3074f518af221c51ca89cee423
+SPB_CERT_REF_COUNT=16
+SPB_KEY_REF_COUNT=16
+SPB_KEY_REF_UNREADABLE=16
+SPB_CERT_REF_UNREADABLE=16
+SPB_INCLUDE_MATCH_COUNT=34
+SPB_INCLUDE_UNREADABLE=0
+SPB_RENEWAL_CONFIG_COUNT=15
+SPB_CERTBOT_PRESENT=YES
+SPB_TRACE_STATE=USED
+SPB_TRACE_EXTRA_EACCES_COUNT=1
+SPB_PERMISSION_PATH_COUNT=1
+SPB_TLS_KEY_PERMISSION_COUNT=0
+SPB_TLS_CERT_PERMISSION_COUNT=1
+SPB_CONFIG_INCLUDE_PERMISSION_COUNT=0
+SPB_EXPECTED_RUNTIME_PERMISSION_COUNT=0
+SPB_OTHER_PERMISSION_COUNT=0
+SPB_NONPERMISSION_FATAL_COUNT=0
+SPB_NGINX_FAILURE_CLASS=TLS_CERT_PERMISSION
+SPB_REISSUE_TLS_POLICY_COMPATIBLE=NO
+SPB_TLS_RECOVERY_STRATEGY=REISSUE_TLS_ON_RESTORE
+SPB_TLS_REISSUE_DEPENDENCY=DNS_AND_PUBLIC_HTTP_HTTPS_ROUTING
+SPB_POLICY_READY=NO
+ROLE_HOLDS=[{"reason":"SPB_NGINX_TLS_CERT_PERMISSION","role":"SPB_INGRESS"}]
 POLICY_CLOSURE_COMPLETE=NO
-SPB_TLS_POLICY=REISSUE_TLS_ON_RESTORE
-US_SQLITE_BACKUP_POLICY=PYTHON_SQLITE3_BACKUP_API
 STATUS=OK
 PHASE=COMPLETE
 NEXT_GATE=VPS_POLICY_CLOSURE_REQUIRED
-VPS315_END=
+SPB316_END=
 
 OUTPUT_END
 CHAT_OUTPUT_END