diff --git a/runtime/history/SUPPORT-260921-HOMELAB-BACKUP-FINAL-SEAL-FIREWALL-1069R1.json b/runtime/history/SUPPORT-260921-HOMELAB-BACKUP-FINAL-SEAL-FIREWALL-1069R1.json
new file mode 100644
index 00000000..fbdeed49
--- /dev/null
+++ b/runtime/history/SUPPORT-260921-HOMELAB-BACKUP-FINAL-SEAL-FIREWALL-1069R1.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": 1,
+  "channel": "homelab-runtime",
+  "command_id": "SUPPORT-260921-HOMELAB-BACKUP-FINAL-SEAL-FIREWALL-1069R1",
+  "status": "FAIL",
+  "rc": 1,
+  "host": "pve01",
+  "mode": "change",
+  "component": "homelab-backup-final-seal-firewall",
+  "started_at_utc": "2026-09-21T07:09:18Z",
+  "finished_at_utc": "2026-09-21T07:14:08Z",
+  "reference_register_checked": true,
+  "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66",
+  "error_register_checked": true,
+  "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0",
+  "command_sha256": "4c2c663bfc95c8c8c4a772886655dc4e75d2451ae4a993516275dfd0a0c2d4f6",
+  "duplicate_failed_command_blocked": false,
+  "block_reason": null,
+  "execution_started": true,
+  "change_declared": true,
+  "result_contract_valid": true,
+  "result_contract_status": "FAIL",
+  "result_contract_error": null,
+  "command_rc": 1,
+  "changes_made": true,
+  "rollback_started": true,
+  "rollback_restored": true,
+  "mutation_outcome": "ROLLED_BACK",
+  "sanitized": true,
+  "secrets_included": false,
+  "private_addresses_included": false,
+  "raw_evidence_retained_locally": true,
+  "raw_evidence_sha256": "61cbd8ef7baee009d05060c4235d5b5c238d2e8ca4f367b7cafa5bfd82ed892b",
+  "sanitized_output_sha256": "61cbd8ef7baee009d05060c4235d5b5c238d2e8ca4f367b7cafa5bfd82ed892b",
+  "output_truncated_in_json": false,
+  "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
+  "output": "WORKERS2_BACKUP_FINAL_SEAL_FIREWALL_BEGIN=1\nCOMMAND_ID=SUPPORT-260921-HOMELAB-BACKUP-FINAL-SEAL-FIREWALL-1069R1\nMODE=change\nCOMPONENT=homelab-backup-final-seal-firewall\nMUTATION_BOUNDARY=PVE01_TCP25_FIREWALL_MONITORING_ONLY;NARROW_POSTFIX_MONITORING_RELAY;NO_REPEAT_BACKUPS;CORRECTED_CLOUDB;ALERTMANAGER_EMAIL;QUIESCED_GC;ISOLATED_PUSH;TWO_AUDITS;FINAL_SEALS\nPREAUDIT_ALLOWED_ISSUES=[\"ALERT_EMAIL\",\"CLOUDB_DRILL\",\"CLOUDB_TIMER\",\"SOURCE_OFFHOST\"]\nCLOUDB_PREFLIGHT=OK\nPREFLIGHT=OK\nFAILURE=MONITORING_SMTP_TCP\nFIREWALL_CHANGED=true\nPOSTFIX_CHANGED=true\nALERTMANAGER_CHANGED=false\nRETENTION_GC_STARTED=false\nSOURCE_COMMITTED=false\nROLLBACK_VERIFIED=true\nBACKUP_PLATFORM_STATUS=NOT_SEALED\nDR_STATUS=NOT_FINAL\nTASK_RESULT=FAIL_HOMELAB_BACKUP_FINAL_SEAL_FIREWALL\nHOMELAB_RESULT_CONTRACT={\"version\":1,\"command_id\":\"SUPPORT-260921-HOMELAB-BACKUP-FINAL-SEAL-FIREWALL-1069R1\",\"status\":\"FAIL\",\"changes_made\":true,\"rollback_started\":true,\"rollback_restored\":true}\nWORKERS2_BACKUP_FINAL_SEAL_FIREWALL_END=1\n"
+}
diff --git a/runtime/history/SUPPORT-260921-HOMELAB-BACKUP-FINAL-SEAL-FIREWALL-1069R1.txt b/runtime/history/SUPPORT-260921-HOMELAB-BACKUP-FINAL-SEAL-FIREWALL-1069R1.txt
new file mode 100644
index 00000000..590d148a
--- /dev/null
+++ b/runtime/history/SUPPORT-260921-HOMELAB-BACKUP-FINAL-SEAL-FIREWALL-1069R1.txt
@@ -0,0 +1,52 @@
+CHAT_OUTPUT_BEGIN
+COMMAND_ID=SUPPORT-260921-HOMELAB-BACKUP-FINAL-SEAL-FIREWALL-1069R1
+STATUS=FAIL
+RC=1
+HOST=pve01
+MODE=change
+COMPONENT=homelab-backup-final-seal-firewall
+REFERENCE_REGISTER_CHECK=OK
+REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
+ERROR_REGISTER_CHECK=OK
+ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
+COMMAND_SHA256=4c2c663bfc95c8c8c4a772886655dc4e75d2451ae4a993516275dfd0a0c2d4f6
+DUPLICATE_FAILED_COMMAND_BLOCKED=false
+EXECUTION_STARTED=true
+CHANGE_DECLARED=true
+RESULT_CONTRACT_VALID=true
+RESULT_CONTRACT_STATUS=FAIL
+RESULT_CONTRACT_ERROR=NONE
+COMMAND_RC=1
+CHANGES_MADE=true
+ROLLBACK_STARTED=true
+ROLLBACK_RESTORED=true
+MUTATION_OUTCOME=ROLLED_BACK
+SANITIZED=yes
+SECRETS_INCLUDED=no
+PRIVATE_ADDRESSES_INCLUDED=no
+RAW_EVIDENCE_SHA256=61cbd8ef7baee009d05060c4235d5b5c238d2e8ca4f367b7cafa5bfd82ed892b
+SANITIZED_OUTPUT_SHA256=61cbd8ef7baee009d05060c4235d5b5c238d2e8ca4f367b7cafa5bfd82ed892b
+OUTPUT_BEGIN
+WORKERS2_BACKUP_FINAL_SEAL_FIREWALL_BEGIN=1
+COMMAND_ID=SUPPORT-260921-HOMELAB-BACKUP-FINAL-SEAL-FIREWALL-1069R1
+MODE=change
+COMPONENT=homelab-backup-final-seal-firewall
+MUTATION_BOUNDARY=PVE01_TCP25_FIREWALL_MONITORING_ONLY;NARROW_POSTFIX_MONITORING_RELAY;NO_REPEAT_BACKUPS;CORRECTED_CLOUDB;ALERTMANAGER_EMAIL;QUIESCED_GC;ISOLATED_PUSH;TWO_AUDITS;FINAL_SEALS
+PREAUDIT_ALLOWED_ISSUES=["ALERT_EMAIL","CLOUDB_DRILL","CLOUDB_TIMER","SOURCE_OFFHOST"]
+CLOUDB_PREFLIGHT=OK
+PREFLIGHT=OK
+FAILURE=MONITORING_SMTP_TCP
+FIREWALL_CHANGED=true
+POSTFIX_CHANGED=true
+ALERTMANAGER_CHANGED=false
+RETENTION_GC_STARTED=false
+SOURCE_COMMITTED=false
+ROLLBACK_VERIFIED=true
+BACKUP_PLATFORM_STATUS=NOT_SEALED
+DR_STATUS=NOT_FINAL
+TASK_RESULT=FAIL_HOMELAB_BACKUP_FINAL_SEAL_FIREWALL
+HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"SUPPORT-260921-HOMELAB-BACKUP-FINAL-SEAL-FIREWALL-1069R1","status":"FAIL","changes_made":true,"rollback_started":true,"rollback_restored":true}
+WORKERS2_BACKUP_FINAL_SEAL_FIREWALL_END=1
+
+OUTPUT_END
+CHAT_OUTPUT_END
diff --git a/runtime/latest.json b/runtime/latest.json
index 1a18ef7b..fbdeed49 100644
--- a/runtime/latest.json
+++ b/runtime/latest.json
@@ -1,38 +1,38 @@
 {
   "schema_version": 1,
   "channel": "homelab-runtime",
-  "command_id": "SIGNALBOT-260921-MTS-FIX-CANDIDATE-BUILD-052CAND7",
-  "status": "OK",
-  "rc": 0,
+  "command_id": "SUPPORT-260921-HOMELAB-BACKUP-FINAL-SEAL-FIREWALL-1069R1",
+  "status": "FAIL",
+  "rc": 1,
   "host": "pve01",
   "mode": "change",
-  "component": "signalbot-mts-fix-candidate-build",
-  "started_at_utc": "2026-09-21T07:07:20Z",
-  "finished_at_utc": "2026-09-21T07:07:23Z",
+  "component": "homelab-backup-final-seal-firewall",
+  "started_at_utc": "2026-09-21T07:09:18Z",
+  "finished_at_utc": "2026-09-21T07:14:08Z",
   "reference_register_checked": true,
   "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66",
   "error_register_checked": true,
   "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0",
-  "command_sha256": "44414ee5945d79a9e0747ad31643100e28979fa51024f442a2ea1f97dfca6f8e",
+  "command_sha256": "4c2c663bfc95c8c8c4a772886655dc4e75d2451ae4a993516275dfd0a0c2d4f6",
   "duplicate_failed_command_blocked": false,
   "block_reason": null,
   "execution_started": true,
   "change_declared": true,
   "result_contract_valid": true,
-  "result_contract_status": "OK",
+  "result_contract_status": "FAIL",
   "result_contract_error": null,
-  "command_rc": 0,
+  "command_rc": 1,
   "changes_made": true,
-  "rollback_started": false,
-  "rollback_restored": null,
-  "mutation_outcome": "MUTATED",
+  "rollback_started": true,
+  "rollback_restored": true,
+  "mutation_outcome": "ROLLED_BACK",
   "sanitized": true,
   "secrets_included": false,
   "private_addresses_included": false,
   "raw_evidence_retained_locally": true,
-  "raw_evidence_sha256": "22ad5f4887ff9f21c19f2547d708ada01cdc8d639c8cffed3c48372164c8fc55",
-  "sanitized_output_sha256": "22ad5f4887ff9f21c19f2547d708ada01cdc8d639c8cffed3c48372164c8fc55",
+  "raw_evidence_sha256": "61cbd8ef7baee009d05060c4235d5b5c238d2e8ca4f367b7cafa5bfd82ed892b",
+  "sanitized_output_sha256": "61cbd8ef7baee009d05060c4235d5b5c238d2e8ca4f367b7cafa5bfd82ed892b",
   "output_truncated_in_json": false,
   "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
-  "output": "SIGNALBOT052CAND7_RESULT={\"outer_rc\":0,\"guest_exitcode\":0,\"evidence\":{\"p\":\"p\",\"tag\":\"8020-demonov-shadow:signalbot-052cand7-7c6ba881680b\",\"iid\":\"sha256:525cf1e50b232943e82bcd76c8cc2ea5f297bf7319db49bf6fd3470d60bfe555\",\"src\":\"b2b7d6ae48ba339d062dc097ffebbce3817759d0fd85564aa1e6f422f2e70149\",\"pkg\":\"f1b9f0b128eefea8a199feefcd68dba3b242e73174b83b72e995c8aa4c46d36f\",\"active\":true}}\nTASK_RESULT=PASS_SIGNALBOT_052CAND7_CANDIDATE_BUILT\nHOMELAB_RESULT_CONTRACT={\"version\":1,\"command_id\":\"SIGNALBOT-260921-MTS-FIX-CANDIDATE-BUILD-052CAND7\",\"status\":\"OK\",\"changes_made\":true,\"rollback_started\":false,\"rollback_restored\":null}\n"
+  "output": "WORKERS2_BACKUP_FINAL_SEAL_FIREWALL_BEGIN=1\nCOMMAND_ID=SUPPORT-260921-HOMELAB-BACKUP-FINAL-SEAL-FIREWALL-1069R1\nMODE=change\nCOMPONENT=homelab-backup-final-seal-firewall\nMUTATION_BOUNDARY=PVE01_TCP25_FIREWALL_MONITORING_ONLY;NARROW_POSTFIX_MONITORING_RELAY;NO_REPEAT_BACKUPS;CORRECTED_CLOUDB;ALERTMANAGER_EMAIL;QUIESCED_GC;ISOLATED_PUSH;TWO_AUDITS;FINAL_SEALS\nPREAUDIT_ALLOWED_ISSUES=[\"ALERT_EMAIL\",\"CLOUDB_DRILL\",\"CLOUDB_TIMER\",\"SOURCE_OFFHOST\"]\nCLOUDB_PREFLIGHT=OK\nPREFLIGHT=OK\nFAILURE=MONITORING_SMTP_TCP\nFIREWALL_CHANGED=true\nPOSTFIX_CHANGED=true\nALERTMANAGER_CHANGED=false\nRETENTION_GC_STARTED=false\nSOURCE_COMMITTED=false\nROLLBACK_VERIFIED=true\nBACKUP_PLATFORM_STATUS=NOT_SEALED\nDR_STATUS=NOT_FINAL\nTASK_RESULT=FAIL_HOMELAB_BACKUP_FINAL_SEAL_FIREWALL\nHOMELAB_RESULT_CONTRACT={\"version\":1,\"command_id\":\"SUPPORT-260921-HOMELAB-BACKUP-FINAL-SEAL-FIREWALL-1069R1\",\"status\":\"FAIL\",\"changes_made\":true,\"rollback_started\":true,\"rollback_restored\":true}\nWORKERS2_BACKUP_FINAL_SEAL_FIREWALL_END=1\n"
 }
diff --git a/runtime/latest.txt b/runtime/latest.txt
index fe11de9e..590d148a 100644
--- a/runtime/latest.txt
+++ b/runtime/latest.txt
@@ -1,35 +1,52 @@
 CHAT_OUTPUT_BEGIN
-COMMAND_ID=SIGNALBOT-260921-MTS-FIX-CANDIDATE-BUILD-052CAND7
-STATUS=OK
-RC=0
+COMMAND_ID=SUPPORT-260921-HOMELAB-BACKUP-FINAL-SEAL-FIREWALL-1069R1
+STATUS=FAIL
+RC=1
 HOST=pve01
 MODE=change
-COMPONENT=signalbot-mts-fix-candidate-build
+COMPONENT=homelab-backup-final-seal-firewall
 REFERENCE_REGISTER_CHECK=OK
 REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
 ERROR_REGISTER_CHECK=OK
 ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
-COMMAND_SHA256=44414ee5945d79a9e0747ad31643100e28979fa51024f442a2ea1f97dfca6f8e
+COMMAND_SHA256=4c2c663bfc95c8c8c4a772886655dc4e75d2451ae4a993516275dfd0a0c2d4f6
 DUPLICATE_FAILED_COMMAND_BLOCKED=false
 EXECUTION_STARTED=true
 CHANGE_DECLARED=true
 RESULT_CONTRACT_VALID=true
-RESULT_CONTRACT_STATUS=OK
+RESULT_CONTRACT_STATUS=FAIL
 RESULT_CONTRACT_ERROR=NONE
-COMMAND_RC=0
+COMMAND_RC=1
 CHANGES_MADE=true
-ROLLBACK_STARTED=false
-ROLLBACK_RESTORED=null
-MUTATION_OUTCOME=MUTATED
+ROLLBACK_STARTED=true
+ROLLBACK_RESTORED=true
+MUTATION_OUTCOME=ROLLED_BACK
 SANITIZED=yes
 SECRETS_INCLUDED=no
 PRIVATE_ADDRESSES_INCLUDED=no
-RAW_EVIDENCE_SHA256=22ad5f4887ff9f21c19f2547d708ada01cdc8d639c8cffed3c48372164c8fc55
-SANITIZED_OUTPUT_SHA256=22ad5f4887ff9f21c19f2547d708ada01cdc8d639c8cffed3c48372164c8fc55
+RAW_EVIDENCE_SHA256=61cbd8ef7baee009d05060c4235d5b5c238d2e8ca4f367b7cafa5bfd82ed892b
+SANITIZED_OUTPUT_SHA256=61cbd8ef7baee009d05060c4235d5b5c238d2e8ca4f367b7cafa5bfd82ed892b
 OUTPUT_BEGIN
-SIGNALBOT052CAND7_RESULT={"outer_rc":0,"guest_exitcode":0,"evidence":{"p":"p","tag":"8020-demonov-shadow:signalbot-052cand7-7c6ba881680b","iid":"sha256:525cf1e50b232943e82bcd76c8cc2ea5f297bf7319db49bf6fd3470d60bfe555","src":"b2b7d6ae48ba339d062dc097ffebbce3817759d0fd85564aa1e6f422f2e70149","pkg":"f1b9f0b128eefea8a199feefcd68dba3b242e73174b83b72e995c8aa4c46d36f","active":true}}
-TASK_RESULT=PASS_SIGNALBOT_052CAND7_CANDIDATE_BUILT
-HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"SIGNALBOT-260921-MTS-FIX-CANDIDATE-BUILD-052CAND7","status":"OK","changes_made":true,"rollback_started":false,"rollback_restored":null}
+WORKERS2_BACKUP_FINAL_SEAL_FIREWALL_BEGIN=1
+COMMAND_ID=SUPPORT-260921-HOMELAB-BACKUP-FINAL-SEAL-FIREWALL-1069R1
+MODE=change
+COMPONENT=homelab-backup-final-seal-firewall
+MUTATION_BOUNDARY=PVE01_TCP25_FIREWALL_MONITORING_ONLY;NARROW_POSTFIX_MONITORING_RELAY;NO_REPEAT_BACKUPS;CORRECTED_CLOUDB;ALERTMANAGER_EMAIL;QUIESCED_GC;ISOLATED_PUSH;TWO_AUDITS;FINAL_SEALS
+PREAUDIT_ALLOWED_ISSUES=["ALERT_EMAIL","CLOUDB_DRILL","CLOUDB_TIMER","SOURCE_OFFHOST"]
+CLOUDB_PREFLIGHT=OK
+PREFLIGHT=OK
+FAILURE=MONITORING_SMTP_TCP
+FIREWALL_CHANGED=true
+POSTFIX_CHANGED=true
+ALERTMANAGER_CHANGED=false
+RETENTION_GC_STARTED=false
+SOURCE_COMMITTED=false
+ROLLBACK_VERIFIED=true
+BACKUP_PLATFORM_STATUS=NOT_SEALED
+DR_STATUS=NOT_FINAL
+TASK_RESULT=FAIL_HOMELAB_BACKUP_FINAL_SEAL_FIREWALL
+HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"SUPPORT-260921-HOMELAB-BACKUP-FINAL-SEAL-FIREWALL-1069R1","status":"FAIL","changes_made":true,"rollback_started":true,"rollback_restored":true}
+WORKERS2_BACKUP_FINAL_SEAL_FIREWALL_END=1
 
 OUTPUT_END
 CHAT_OUTPUT_END