diff --git a/runtime/history/SUPPORT-260923-PVEPRO-TURNSTILE-CHECKPOINT14-NEW-TOKEN-923R1.json b/runtime/history/SUPPORT-260923-PVEPRO-TURNSTILE-CHECKPOINT14-NEW-TOKEN-923R1.json
new file mode 100644
index 00000000..4a89bc6a
--- /dev/null
+++ b/runtime/history/SUPPORT-260923-PVEPRO-TURNSTILE-CHECKPOINT14-NEW-TOKEN-923R1.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": 1,
+  "channel": "homelab-runtime",
+  "command_id": "SUPPORT-260923-PVEPRO-TURNSTILE-CHECKPOINT14-NEW-TOKEN-923R1",
+  "status": "FAIL",
+  "rc": 4,
+  "host": "pve01",
+  "mode": "change",
+  "component": "pvepro-turnstile-checkpoint14-new-token",
+  "started_at_utc": "2026-09-23T03:51:51Z",
+  "finished_at_utc": "2026-09-23T03:51:58Z",
+  "reference_register_checked": true,
+  "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66",
+  "error_register_checked": true,
+  "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0",
+  "command_sha256": "48839b8ed101c30349fcbf36e5226591ab7d3cd0ea1ba78395e091975d21f182",
+  "duplicate_failed_command_blocked": false,
+  "block_reason": null,
+  "execution_started": true,
+  "change_declared": true,
+  "result_contract_valid": true,
+  "result_contract_status": "FAIL",
+  "result_contract_error": null,
+  "command_rc": 4,
+  "changes_made": true,
+  "rollback_started": true,
+  "rollback_restored": true,
+  "mutation_outcome": "ROLLED_BACK",
+  "sanitized": true,
+  "secrets_included": false,
+  "private_addresses_included": false,
+  "raw_evidence_retained_locally": true,
+  "raw_evidence_sha256": "68a532bc2fc6632ce66df7b91440f2e34b9d1bc24b135859d1842e0613da001d",
+  "sanitized_output_sha256": "68a532bc2fc6632ce66df7b91440f2e34b9d1bc24b135859d1842e0613da001d",
+  "output_truncated_in_json": false,
+  "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
+  "output": "PVEPRO923_BEGIN=true\nCOMMAND_ID=SUPPORT-260923-PVEPRO-TURNSTILE-CHECKPOINT14-NEW-TOKEN-923R1\nMODE=change\nCOMPONENT=pvepro-turnstile-checkpoint14-new-token\nPREDECESSOR_914=PASS_PVEPRO914_MAIL_CHECKPOINT13\nPREDECESSOR_916=HOLD_PVEPRO916_EXTERNAL_CLOUDFLARE_TURNSTILE_CREDENTIAL_REQUIRED_NO_MUTATION\nPREDECESSOR_920=PASS_PVEPRO920_BACKUP_ARCHIVE_VERIFY_MONITORING\nPREDECESSOR_922=HOLD_PVEPRO922_ALL_SIX_EXISTING_TOKENS_403_TURNSTILE_NO_MUTATION\n922_PROOF=ALL_6_TOKENS_VALID;PVEPro_ACCOUNT_RESOLVED;ALL_6_TURNSTILE_CREATE_HTTP403_CODE10000\nTOKEN_REQUIREMENT=NEW_CUSTOM_TOKEN_WITH_ACCOUNT_TURNSTILE_SITES_EDIT_AND_ZONE_ZONE_READ_FOR_PVEPRO_RU\nTOKEN_SOURCE=LOCAL_WINDOWS_INTERACTIVE_SECURE_INPUT\nTOKEN_PERSISTENCE=NONE;ROOT_ONLY_TRANSIENT_FILE_DURING_RUN\nMUTATION_BOUNDARY=CREATE_DEDICATED_CLOUDFLARE_TURNSTILE_WIDGET;VM100_OPTIONS_CAPTCHA_AND_EXTRA_CAPTCHA_KEYS;NO_REGISTRATION_ENABLE;NO_MAIL;NO_VM_CONFIG;NO_BACKUP;NO_EDGE_CONFIG\nREFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66\nERROR_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0\nPROD_AGENT_RC=0\nPRE_TRANSPORT_RC=0\nPRE_GUEST|exited=1|exitcode=0\nXENFORO_CAPTCHA_PRE|provider=HCaptcha|captcha_sha=6fce54e29ddafccfe8f0400290ce24b406e0db36dd6d20f63bf05fe03b461200|extra_sha=35786c7117b4e38d0f169239752ce71158266ae2f6e4aa230fbbb87bd699c0e3|turn_site_present=false|turn_secret_present=false\nCF_TOKEN_VERIFY_HTTP=200\nCF_TOKEN_VERIFY_SUCCESS=true\nCF_ZONE_LOOKUP_HTTP=200\nCF_ZONE_MATCH_COUNT=1\nCF_ACCOUNT_SHA256=49ace22b1853724543e1b3b00f02d6a03acd8bd4f9046f8cf5c3c9b6343984f3\nCF_WIDGET_CREATE_HTTP=200\nCF_SITEVERIFY_SECRET_ACCEPTED=true\nCF_SITEVERIFY_ERROR_CLASS=invalid-input-response\nCF_WIDGET_CREATED=true\nCF_SITEKEY_SHA256=b4a0cad827d625f7009f904cbc6faead9d2ef55f3d271d9eb4c370f3327066f1\nCF_SECRET_SHA256=5c3443688eb734e706b29e909ab7e562e4593e510733e686d4dd2537407e617b\nCF_SETUP_RC=0\nAPPLY_TRANSPORT_RC=0\nAPPLY_GUEST|exited=1|exitcode=0\nTURNSTILE_APPLY|site_sha=b4a0cad827d625f7009f904cbc6faead9d2ef55f3d271d9eb4c370f3327066f1|secret_sha=5c3443688eb734e706b29e909ab7e562e4593e510733e686d4dd2537407e617b\nVERIFY_TRANSPORT_RC=0\nVERIFY_GUEST|exited=1|exitcode=21\nFAILURE=XENFORO_TURNSTILE_VERIFY_FAILED\nTURNSTILE_VERIFY|provider=Turnstile|site_sha=b4a0cad827d625f7009f904cbc6faead9d2ef55f3d271d9eb4c370f3327066f1|secret_sha=5c3443688eb734e706b29e909ab7e562e4593e510733e686d4dd2537407e617b|extra_sha=da04877fdb57a1f4719d9d04a2022254777c0883b7dba5cbdfc601047e0edd5d\nRESTORE_TRANSPORT_RC=0\nRESTORE_GUEST|exited=1|exitcode=0\nCF_WIDGET_DELETE_RESULT=OK\nTURNSTILE_ROLLBACK|xf_restored=true|cf_restored=true|restored=true\nCHECKPOINT14_TURNSTILE_COMPLETE=false\nCHECKPOINT14_OPEN=true\nPRODUCT_CHECKPOINTS_REMAINING=3\nDECISION=HOLD_PVEPRO923_TURNSTILE_CHECKPOINT14\nNEXT_GATE=RECONCILE_ONLY_PVEPRO923_FAILURE\nTASK_RESULT=HOLD_PVEPRO_TURNSTILE_CHECKPOINT14\nCHANGES_MADE_BY_923=true\nCLOUDFLARE_WIDGET_CREATED_BY_923=true\nXENFORO_OPTION_MUTATION_ATTEMPTED_BY_923=true\nXENFORO_OPTION_MUTATION_COMPLETED_BY_923=true\nREGISTRATION_MUTATION_BY_923=false\nMAIL_MUTATION_BY_923=false\nVM_CONFIG_MUTATION_BY_923=false\nBACKUP_MUTATION_BY_923=false\nEDGE_CONFIG_MUTATION_BY_923=false\nROLLBACK_STARTED=true\nROLLBACK_RESTORED=true\nHOMELAB_RESULT_CONTRACT={\"version\":1,\"command_id\":\"SUPPORT-260923-PVEPRO-TURNSTILE-CHECKPOINT14-NEW-TOKEN-923R1\",\"status\":\"FAIL\",\"changes_made\":true,\"rollback_started\":true,\"rollback_restored\":true}\nPVEPRO923_END=true\n"
+}
diff --git a/runtime/history/SUPPORT-260923-PVEPRO-TURNSTILE-CHECKPOINT14-NEW-TOKEN-923R1.txt b/runtime/history/SUPPORT-260923-PVEPRO-TURNSTILE-CHECKPOINT14-NEW-TOKEN-923R1.txt
new file mode 100644
index 00000000..066d7a7c
--- /dev/null
+++ b/runtime/history/SUPPORT-260923-PVEPRO-TURNSTILE-CHECKPOINT14-NEW-TOKEN-923R1.txt
@@ -0,0 +1,93 @@
+CHAT_OUTPUT_BEGIN
+COMMAND_ID=SUPPORT-260923-PVEPRO-TURNSTILE-CHECKPOINT14-NEW-TOKEN-923R1
+STATUS=FAIL
+RC=4
+HOST=pve01
+MODE=change
+COMPONENT=pvepro-turnstile-checkpoint14-new-token
+REFERENCE_REGISTER_CHECK=OK
+REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
+ERROR_REGISTER_CHECK=OK
+ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
+COMMAND_SHA256=48839b8ed101c30349fcbf36e5226591ab7d3cd0ea1ba78395e091975d21f182
+DUPLICATE_FAILED_COMMAND_BLOCKED=false
+EXECUTION_STARTED=true
+CHANGE_DECLARED=true
+RESULT_CONTRACT_VALID=true
+RESULT_CONTRACT_STATUS=FAIL
+RESULT_CONTRACT_ERROR=NONE
+COMMAND_RC=4
+CHANGES_MADE=true
+ROLLBACK_STARTED=true
+ROLLBACK_RESTORED=true
+MUTATION_OUTCOME=ROLLED_BACK
+SANITIZED=yes
+SECRETS_INCLUDED=no
+PRIVATE_ADDRESSES_INCLUDED=no
+RAW_EVIDENCE_SHA256=68a532bc2fc6632ce66df7b91440f2e34b9d1bc24b135859d1842e0613da001d
+SANITIZED_OUTPUT_SHA256=68a532bc2fc6632ce66df7b91440f2e34b9d1bc24b135859d1842e0613da001d
+OUTPUT_BEGIN
+PVEPRO923_BEGIN=true
+COMMAND_ID=SUPPORT-260923-PVEPRO-TURNSTILE-CHECKPOINT14-NEW-TOKEN-923R1
+MODE=change
+COMPONENT=pvepro-turnstile-checkpoint14-new-token
+PREDECESSOR_914=PASS_PVEPRO914_MAIL_CHECKPOINT13
+PREDECESSOR_916=HOLD_PVEPRO916_EXTERNAL_CLOUDFLARE_TURNSTILE_CREDENTIAL_REQUIRED_NO_MUTATION
+PREDECESSOR_920=PASS_PVEPRO920_BACKUP_ARCHIVE_VERIFY_MONITORING
+PREDECESSOR_922=HOLD_PVEPRO922_ALL_SIX_EXISTING_TOKENS_403_TURNSTILE_NO_MUTATION
+922_PROOF=ALL_6_TOKENS_VALID;PVEPro_ACCOUNT_RESOLVED;ALL_6_TURNSTILE_CREATE_HTTP403_CODE10000
+TOKEN_REQUIREMENT=NEW_CUSTOM_TOKEN_WITH_ACCOUNT_TURNSTILE_SITES_EDIT_AND_ZONE_ZONE_READ_FOR_PVEPRO_RU
+TOKEN_SOURCE=LOCAL_WINDOWS_INTERACTIVE_SECURE_INPUT
+TOKEN_PERSISTENCE=NONE;ROOT_ONLY_TRANSIENT_FILE_DURING_RUN
+MUTATION_BOUNDARY=CREATE_DEDICATED_CLOUDFLARE_TURNSTILE_WIDGET;VM100_OPTIONS_CAPTCHA_AND_EXTRA_CAPTCHA_KEYS;NO_REGISTRATION_ENABLE;NO_MAIL;NO_VM_CONFIG;NO_BACKUP;NO_EDGE_CONFIG
+REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
+ERROR_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
+PROD_AGENT_RC=0
+PRE_TRANSPORT_RC=0
+PRE_GUEST|exited=1|exitcode=0
+XENFORO_CAPTCHA_PRE|provider=HCaptcha|captcha_sha=6fce54e29ddafccfe8f0400290ce24b406e0db36dd6d20f63bf05fe03b461200|extra_sha=35786c7117b4e38d0f169239752ce71158266ae2f6e4aa230fbbb87bd699c0e3|turn_site_present=false|turn_secret_present=false
+CF_TOKEN_VERIFY_HTTP=200
+CF_TOKEN_VERIFY_SUCCESS=true
+CF_ZONE_LOOKUP_HTTP=200
+CF_ZONE_MATCH_COUNT=1
+CF_ACCOUNT_SHA256=49ace22b1853724543e1b3b00f02d6a03acd8bd4f9046f8cf5c3c9b6343984f3
+CF_WIDGET_CREATE_HTTP=200
+CF_SITEVERIFY_SECRET_ACCEPTED=true
+CF_SITEVERIFY_ERROR_CLASS=invalid-input-response
+CF_WIDGET_CREATED=true
+CF_SITEKEY_SHA256=b4a0cad827d625f7009f904cbc6faead9d2ef55f3d271d9eb4c370f3327066f1
+CF_SECRET_SHA256=5c3443688eb734e706b29e909ab7e562e4593e510733e686d4dd2537407e617b
+CF_SETUP_RC=0
+APPLY_TRANSPORT_RC=0
+APPLY_GUEST|exited=1|exitcode=0
+TURNSTILE_APPLY|site_sha=b4a0cad827d625f7009f904cbc6faead9d2ef55f3d271d9eb4c370f3327066f1|secret_sha=5c3443688eb734e706b29e909ab7e562e4593e510733e686d4dd2537407e617b
+VERIFY_TRANSPORT_RC=0
+VERIFY_GUEST|exited=1|exitcode=21
+FAILURE=XENFORO_TURNSTILE_VERIFY_FAILED
+TURNSTILE_VERIFY|provider=Turnstile|site_sha=b4a0cad827d625f7009f904cbc6faead9d2ef55f3d271d9eb4c370f3327066f1|secret_sha=5c3443688eb734e706b29e909ab7e562e4593e510733e686d4dd2537407e617b|extra_sha=da04877fdb57a1f4719d9d04a2022254777c0883b7dba5cbdfc601047e0edd5d
+RESTORE_TRANSPORT_RC=0
+RESTORE_GUEST|exited=1|exitcode=0
+CF_WIDGET_DELETE_RESULT=OK
+TURNSTILE_ROLLBACK|xf_restored=true|cf_restored=true|restored=true
+CHECKPOINT14_TURNSTILE_COMPLETE=false
+CHECKPOINT14_OPEN=true
+PRODUCT_CHECKPOINTS_REMAINING=3
+DECISION=HOLD_PVEPRO923_TURNSTILE_CHECKPOINT14
+NEXT_GATE=RECONCILE_ONLY_PVEPRO923_FAILURE
+TASK_RESULT=HOLD_PVEPRO_TURNSTILE_CHECKPOINT14
+CHANGES_MADE_BY_923=true
+CLOUDFLARE_WIDGET_CREATED_BY_923=true
+XENFORO_OPTION_MUTATION_ATTEMPTED_BY_923=true
+XENFORO_OPTION_MUTATION_COMPLETED_BY_923=true
+REGISTRATION_MUTATION_BY_923=false
+MAIL_MUTATION_BY_923=false
+VM_CONFIG_MUTATION_BY_923=false
+BACKUP_MUTATION_BY_923=false
+EDGE_CONFIG_MUTATION_BY_923=false
+ROLLBACK_STARTED=true
+ROLLBACK_RESTORED=true
+HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"SUPPORT-260923-PVEPRO-TURNSTILE-CHECKPOINT14-NEW-TOKEN-923R1","status":"FAIL","changes_made":true,"rollback_started":true,"rollback_restored":true}
+PVEPRO923_END=true
+
+OUTPUT_END
+CHAT_OUTPUT_END
diff --git a/runtime/latest.json b/runtime/latest.json
index 94376b9b..4a89bc6a 100644
--- a/runtime/latest.json
+++ b/runtime/latest.json
@@ -1,38 +1,38 @@
 {
   "schema_version": 1,
   "channel": "homelab-runtime",
-  "command_id": "SUPPORT-260923-SPB-TLS-BRIDGE-HELPER-DIRECT-RCA-9170R1",
-  "status": "OK",
-  "rc": 0,
+  "command_id": "SUPPORT-260923-PVEPRO-TURNSTILE-CHECKPOINT14-NEW-TOKEN-923R1",
+  "status": "FAIL",
+  "rc": 4,
   "host": "pve01",
-  "mode": "read-only",
-  "component": "spb-tls-bridge-helper-direct-rca",
-  "started_at_utc": "2026-09-23T03:44:23Z",
-  "finished_at_utc": "2026-09-23T03:44:23Z",
+  "mode": "change",
+  "component": "pvepro-turnstile-checkpoint14-new-token",
+  "started_at_utc": "2026-09-23T03:51:51Z",
+  "finished_at_utc": "2026-09-23T03:51:58Z",
   "reference_register_checked": true,
   "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66",
   "error_register_checked": true,
   "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0",
-  "command_sha256": "71b0278a98e187b10016b0dd1b83e7dec57c785db334a86b1204d86bd3052509",
+  "command_sha256": "48839b8ed101c30349fcbf36e5226591ab7d3cd0ea1ba78395e091975d21f182",
   "duplicate_failed_command_blocked": false,
   "block_reason": null,
   "execution_started": true,
-  "change_declared": false,
+  "change_declared": true,
   "result_contract_valid": true,
-  "result_contract_status": null,
+  "result_contract_status": "FAIL",
   "result_contract_error": null,
-  "command_rc": 0,
-  "changes_made": false,
-  "rollback_started": false,
-  "rollback_restored": null,
-  "mutation_outcome": "NO_MUTATION",
+  "command_rc": 4,
+  "changes_made": true,
+  "rollback_started": true,
+  "rollback_restored": true,
+  "mutation_outcome": "ROLLED_BACK",
   "sanitized": true,
   "secrets_included": false,
   "private_addresses_included": false,
   "raw_evidence_retained_locally": true,
-  "raw_evidence_sha256": "031a7b324f016bfb3107ff09b56ba8171539a0b31b0704d159fca7eef434b673",
-  "sanitized_output_sha256": "031a7b324f016bfb3107ff09b56ba8171539a0b31b0704d159fca7eef434b673",
+  "raw_evidence_sha256": "68a532bc2fc6632ce66df7b91440f2e34b9d1bc24b135859d1842e0613da001d",
+  "sanitized_output_sha256": "68a532bc2fc6632ce66df7b91440f2e34b9d1bc24b135859d1842e0613da001d",
   "output_truncated_in_json": false,
   "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
-  "output": "HELPER_DIRECT_RCA_BEGIN=true\nPREDECESSOR=SUPPORT-260923-SPB-TLS-BRIDGE-9164-SOURCE-RCA-9169R1\nPREDECESSOR_STATUS=OK\nPREDECESSOR_CHANGES_MADE=false\nBRIDGE_AUTHORITY=SUPPORT-260923-SPB-TLS-BRIDGE-EXEC-9164R1\nBRIDGE_AUTHORITY_ROOT_ARRAY_SELECTED=true\nBRIDGE_AUTHORITY_GUEST_RC=1\nHELPER_EXPECTED_SHA256=2c64a7a40fd3d1166fc1faecad67be96ef36215bd3fa3a6cd840ff428943dcfb\nMUTATION_BOUNDARY=READ_ONLY_WINDOWS_ROUTE_RECOVERY_AND_DIRECT_SPB_PROBE;NO_SPB_WRITE;NO_VM130_WRITE;NO_DNS_WRITE;NO_CERT_WRITE\nWINDOWS_ROUTE_SOURCE_FILE_COUNT=0\nSPB_ENDPOINT_CANDIDATE_COUNT=0\nHELPER_PATH_CANDIDATE_COUNT=0\nROUTE_HAS_PAGEANT=false\nROUTE_HAS_PINNED_SPB_HOSTKEY=false\nROUTE_HAS_DPAPI=false\nROUTE_HAS_PROTECTED_DATA=false\nROUTE_HAS_SECURESTRING=false\nROUTE_HAS_SUDO_S=false\nROUTE_HAS_SUDO_N=false\nROUTE_HAS_CREDENTIAL_CACHE_MARKER=false\nDIRECT_SPB_PROBE_RC=NOT_RUN\nDIRECT_SPB_REMOTE_UID=UNKNOWN\nDIRECT_SPB_REMOTE_USER=UNKNOWN\nDIRECT_SPB_REMOTE_HOST_SHA256=UNKNOWN\nDIRECT_SPB_SUDO_N_RC=UNKNOWN\nHELPER_DIRECT_RCA_DECISION=ROUTE_NOT_UNIQUELY_RECOVERED\nHELPER_DIRECT_RCA_COMPLETE=true\nCHANGES_MADE=NO\nTASK_COMPLETE=true\nTASK_RESULT=PASS_SPB_TLS_BRIDGE_HELPER_DIRECT_RCA\nDECISION=READ_EXACT_9170_THEN_READ_HELPER_BY_RECOVERED_ROUTE\nNEXT_GATE=EXACT_9170_ROUTE_AND_SUDO_CONTRACT\nHOMELAB_RESULT_CONTRACT={\"version\":1,\"command_id\":\"SUPPORT-260923-SPB-TLS-BRIDGE-HELPER-DIRECT-RCA-9170R1\",\"status\":\"OK\",\"changes_made\":false,\"rollback_started\":false,\"rollback_restored\":null}\n"
+  "output": "PVEPRO923_BEGIN=true\nCOMMAND_ID=SUPPORT-260923-PVEPRO-TURNSTILE-CHECKPOINT14-NEW-TOKEN-923R1\nMODE=change\nCOMPONENT=pvepro-turnstile-checkpoint14-new-token\nPREDECESSOR_914=PASS_PVEPRO914_MAIL_CHECKPOINT13\nPREDECESSOR_916=HOLD_PVEPRO916_EXTERNAL_CLOUDFLARE_TURNSTILE_CREDENTIAL_REQUIRED_NO_MUTATION\nPREDECESSOR_920=PASS_PVEPRO920_BACKUP_ARCHIVE_VERIFY_MONITORING\nPREDECESSOR_922=HOLD_PVEPRO922_ALL_SIX_EXISTING_TOKENS_403_TURNSTILE_NO_MUTATION\n922_PROOF=ALL_6_TOKENS_VALID;PVEPro_ACCOUNT_RESOLVED;ALL_6_TURNSTILE_CREATE_HTTP403_CODE10000\nTOKEN_REQUIREMENT=NEW_CUSTOM_TOKEN_WITH_ACCOUNT_TURNSTILE_SITES_EDIT_AND_ZONE_ZONE_READ_FOR_PVEPRO_RU\nTOKEN_SOURCE=LOCAL_WINDOWS_INTERACTIVE_SECURE_INPUT\nTOKEN_PERSISTENCE=NONE;ROOT_ONLY_TRANSIENT_FILE_DURING_RUN\nMUTATION_BOUNDARY=CREATE_DEDICATED_CLOUDFLARE_TURNSTILE_WIDGET;VM100_OPTIONS_CAPTCHA_AND_EXTRA_CAPTCHA_KEYS;NO_REGISTRATION_ENABLE;NO_MAIL;NO_VM_CONFIG;NO_BACKUP;NO_EDGE_CONFIG\nREFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66\nERROR_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0\nPROD_AGENT_RC=0\nPRE_TRANSPORT_RC=0\nPRE_GUEST|exited=1|exitcode=0\nXENFORO_CAPTCHA_PRE|provider=HCaptcha|captcha_sha=6fce54e29ddafccfe8f0400290ce24b406e0db36dd6d20f63bf05fe03b461200|extra_sha=35786c7117b4e38d0f169239752ce71158266ae2f6e4aa230fbbb87bd699c0e3|turn_site_present=false|turn_secret_present=false\nCF_TOKEN_VERIFY_HTTP=200\nCF_TOKEN_VERIFY_SUCCESS=true\nCF_ZONE_LOOKUP_HTTP=200\nCF_ZONE_MATCH_COUNT=1\nCF_ACCOUNT_SHA256=49ace22b1853724543e1b3b00f02d6a03acd8bd4f9046f8cf5c3c9b6343984f3\nCF_WIDGET_CREATE_HTTP=200\nCF_SITEVERIFY_SECRET_ACCEPTED=true\nCF_SITEVERIFY_ERROR_CLASS=invalid-input-response\nCF_WIDGET_CREATED=true\nCF_SITEKEY_SHA256=b4a0cad827d625f7009f904cbc6faead9d2ef55f3d271d9eb4c370f3327066f1\nCF_SECRET_SHA256=5c3443688eb734e706b29e909ab7e562e4593e510733e686d4dd2537407e617b\nCF_SETUP_RC=0\nAPPLY_TRANSPORT_RC=0\nAPPLY_GUEST|exited=1|exitcode=0\nTURNSTILE_APPLY|site_sha=b4a0cad827d625f7009f904cbc6faead9d2ef55f3d271d9eb4c370f3327066f1|secret_sha=5c3443688eb734e706b29e909ab7e562e4593e510733e686d4dd2537407e617b\nVERIFY_TRANSPORT_RC=0\nVERIFY_GUEST|exited=1|exitcode=21\nFAILURE=XENFORO_TURNSTILE_VERIFY_FAILED\nTURNSTILE_VERIFY|provider=Turnstile|site_sha=b4a0cad827d625f7009f904cbc6faead9d2ef55f3d271d9eb4c370f3327066f1|secret_sha=5c3443688eb734e706b29e909ab7e562e4593e510733e686d4dd2537407e617b|extra_sha=da04877fdb57a1f4719d9d04a2022254777c0883b7dba5cbdfc601047e0edd5d\nRESTORE_TRANSPORT_RC=0\nRESTORE_GUEST|exited=1|exitcode=0\nCF_WIDGET_DELETE_RESULT=OK\nTURNSTILE_ROLLBACK|xf_restored=true|cf_restored=true|restored=true\nCHECKPOINT14_TURNSTILE_COMPLETE=false\nCHECKPOINT14_OPEN=true\nPRODUCT_CHECKPOINTS_REMAINING=3\nDECISION=HOLD_PVEPRO923_TURNSTILE_CHECKPOINT14\nNEXT_GATE=RECONCILE_ONLY_PVEPRO923_FAILURE\nTASK_RESULT=HOLD_PVEPRO_TURNSTILE_CHECKPOINT14\nCHANGES_MADE_BY_923=true\nCLOUDFLARE_WIDGET_CREATED_BY_923=true\nXENFORO_OPTION_MUTATION_ATTEMPTED_BY_923=true\nXENFORO_OPTION_MUTATION_COMPLETED_BY_923=true\nREGISTRATION_MUTATION_BY_923=false\nMAIL_MUTATION_BY_923=false\nVM_CONFIG_MUTATION_BY_923=false\nBACKUP_MUTATION_BY_923=false\nEDGE_CONFIG_MUTATION_BY_923=false\nROLLBACK_STARTED=true\nROLLBACK_RESTORED=true\nHOMELAB_RESULT_CONTRACT={\"version\":1,\"command_id\":\"SUPPORT-260923-PVEPRO-TURNSTILE-CHECKPOINT14-NEW-TOKEN-923R1\",\"status\":\"FAIL\",\"changes_made\":true,\"rollback_started\":true,\"rollback_restored\":true}\nPVEPRO923_END=true\n"
 }
diff --git a/runtime/latest.txt b/runtime/latest.txt
index ee4e31a9..066d7a7c 100644
--- a/runtime/latest.txt
+++ b/runtime/latest.txt
@@ -1,65 +1,93 @@
 CHAT_OUTPUT_BEGIN
-COMMAND_ID=SUPPORT-260923-SPB-TLS-BRIDGE-HELPER-DIRECT-RCA-9170R1
-STATUS=OK
-RC=0
+COMMAND_ID=SUPPORT-260923-PVEPRO-TURNSTILE-CHECKPOINT14-NEW-TOKEN-923R1
+STATUS=FAIL
+RC=4
 HOST=pve01
-MODE=read-only
-COMPONENT=spb-tls-bridge-helper-direct-rca
+MODE=change
+COMPONENT=pvepro-turnstile-checkpoint14-new-token
 REFERENCE_REGISTER_CHECK=OK
 REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
 ERROR_REGISTER_CHECK=OK
 ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
-COMMAND_SHA256=71b0278a98e187b10016b0dd1b83e7dec57c785db334a86b1204d86bd3052509
+COMMAND_SHA256=48839b8ed101c30349fcbf36e5226591ab7d3cd0ea1ba78395e091975d21f182
 DUPLICATE_FAILED_COMMAND_BLOCKED=false
 EXECUTION_STARTED=true
-CHANGE_DECLARED=false
+CHANGE_DECLARED=true
 RESULT_CONTRACT_VALID=true
-RESULT_CONTRACT_STATUS=NOT_APPLICABLE
+RESULT_CONTRACT_STATUS=FAIL
 RESULT_CONTRACT_ERROR=NONE
-COMMAND_RC=0
-CHANGES_MADE=false
-ROLLBACK_STARTED=false
-ROLLBACK_RESTORED=null
-MUTATION_OUTCOME=NO_MUTATION
+COMMAND_RC=4
+CHANGES_MADE=true
+ROLLBACK_STARTED=true
+ROLLBACK_RESTORED=true
+MUTATION_OUTCOME=ROLLED_BACK
 SANITIZED=yes
 SECRETS_INCLUDED=no
 PRIVATE_ADDRESSES_INCLUDED=no
-RAW_EVIDENCE_SHA256=031a7b324f016bfb3107ff09b56ba8171539a0b31b0704d159fca7eef434b673
-SANITIZED_OUTPUT_SHA256=031a7b324f016bfb3107ff09b56ba8171539a0b31b0704d159fca7eef434b673
+RAW_EVIDENCE_SHA256=68a532bc2fc6632ce66df7b91440f2e34b9d1bc24b135859d1842e0613da001d
+SANITIZED_OUTPUT_SHA256=68a532bc2fc6632ce66df7b91440f2e34b9d1bc24b135859d1842e0613da001d
 OUTPUT_BEGIN
-HELPER_DIRECT_RCA_BEGIN=true
-PREDECESSOR=SUPPORT-260923-SPB-TLS-BRIDGE-9164-SOURCE-RCA-9169R1
-PREDECESSOR_STATUS=OK
-PREDECESSOR_CHANGES_MADE=false
-BRIDGE_AUTHORITY=SUPPORT-260923-SPB-TLS-BRIDGE-EXEC-9164R1
-BRIDGE_AUTHORITY_ROOT_ARRAY_SELECTED=true
-BRIDGE_AUTHORITY_GUEST_RC=1
-HELPER_EXPECTED_SHA256=2c64a7a40fd3d1166fc1faecad67be96ef36215bd3fa3a6cd840ff428943dcfb
-MUTATION_BOUNDARY=READ_ONLY_WINDOWS_ROUTE_RECOVERY_AND_DIRECT_SPB_PROBE;NO_SPB_WRITE;NO_VM130_WRITE;NO_DNS_WRITE;NO_CERT_WRITE
-WINDOWS_ROUTE_SOURCE_FILE_COUNT=0
-SPB_ENDPOINT_CANDIDATE_COUNT=0
-HELPER_PATH_CANDIDATE_COUNT=0
-ROUTE_HAS_PAGEANT=false
-ROUTE_HAS_PINNED_SPB_HOSTKEY=false
-ROUTE_HAS_DPAPI=false
-ROUTE_HAS_PROTECTED_DATA=false
-ROUTE_HAS_SECURESTRING=false
-ROUTE_HAS_SUDO_S=false
-ROUTE_HAS_SUDO_N=false
-ROUTE_HAS_CREDENTIAL_CACHE_MARKER=false
-DIRECT_SPB_PROBE_RC=NOT_RUN
-DIRECT_SPB_REMOTE_UID=UNKNOWN
-DIRECT_SPB_REMOTE_USER=UNKNOWN
-DIRECT_SPB_REMOTE_HOST_SHA256=UNKNOWN
-DIRECT_SPB_SUDO_N_RC=UNKNOWN
-HELPER_DIRECT_RCA_DECISION=ROUTE_NOT_UNIQUELY_RECOVERED
-HELPER_DIRECT_RCA_COMPLETE=true
-CHANGES_MADE=NO
-TASK_COMPLETE=true
-TASK_RESULT=PASS_SPB_TLS_BRIDGE_HELPER_DIRECT_RCA
-DECISION=READ_EXACT_9170_THEN_READ_HELPER_BY_RECOVERED_ROUTE
-NEXT_GATE=EXACT_9170_ROUTE_AND_SUDO_CONTRACT
-HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"SUPPORT-260923-SPB-TLS-BRIDGE-HELPER-DIRECT-RCA-9170R1","status":"OK","changes_made":false,"rollback_started":false,"rollback_restored":null}
+PVEPRO923_BEGIN=true
+COMMAND_ID=SUPPORT-260923-PVEPRO-TURNSTILE-CHECKPOINT14-NEW-TOKEN-923R1
+MODE=change
+COMPONENT=pvepro-turnstile-checkpoint14-new-token
+PREDECESSOR_914=PASS_PVEPRO914_MAIL_CHECKPOINT13
+PREDECESSOR_916=HOLD_PVEPRO916_EXTERNAL_CLOUDFLARE_TURNSTILE_CREDENTIAL_REQUIRED_NO_MUTATION
+PREDECESSOR_920=PASS_PVEPRO920_BACKUP_ARCHIVE_VERIFY_MONITORING
+PREDECESSOR_922=HOLD_PVEPRO922_ALL_SIX_EXISTING_TOKENS_403_TURNSTILE_NO_MUTATION
+922_PROOF=ALL_6_TOKENS_VALID;PVEPro_ACCOUNT_RESOLVED;ALL_6_TURNSTILE_CREATE_HTTP403_CODE10000
+TOKEN_REQUIREMENT=NEW_CUSTOM_TOKEN_WITH_ACCOUNT_TURNSTILE_SITES_EDIT_AND_ZONE_ZONE_READ_FOR_PVEPRO_RU
+TOKEN_SOURCE=LOCAL_WINDOWS_INTERACTIVE_SECURE_INPUT
+TOKEN_PERSISTENCE=NONE;ROOT_ONLY_TRANSIENT_FILE_DURING_RUN
+MUTATION_BOUNDARY=CREATE_DEDICATED_CLOUDFLARE_TURNSTILE_WIDGET;VM100_OPTIONS_CAPTCHA_AND_EXTRA_CAPTCHA_KEYS;NO_REGISTRATION_ENABLE;NO_MAIL;NO_VM_CONFIG;NO_BACKUP;NO_EDGE_CONFIG
+REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
+ERROR_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
+PROD_AGENT_RC=0
+PRE_TRANSPORT_RC=0
+PRE_GUEST|exited=1|exitcode=0
+XENFORO_CAPTCHA_PRE|provider=HCaptcha|captcha_sha=6fce54e29ddafccfe8f0400290ce24b406e0db36dd6d20f63bf05fe03b461200|extra_sha=35786c7117b4e38d0f169239752ce71158266ae2f6e4aa230fbbb87bd699c0e3|turn_site_present=false|turn_secret_present=false
+CF_TOKEN_VERIFY_HTTP=200
+CF_TOKEN_VERIFY_SUCCESS=true
+CF_ZONE_LOOKUP_HTTP=200
+CF_ZONE_MATCH_COUNT=1
+CF_ACCOUNT_SHA256=49ace22b1853724543e1b3b00f02d6a03acd8bd4f9046f8cf5c3c9b6343984f3
+CF_WIDGET_CREATE_HTTP=200
+CF_SITEVERIFY_SECRET_ACCEPTED=true
+CF_SITEVERIFY_ERROR_CLASS=invalid-input-response
+CF_WIDGET_CREATED=true
+CF_SITEKEY_SHA256=b4a0cad827d625f7009f904cbc6faead9d2ef55f3d271d9eb4c370f3327066f1
+CF_SECRET_SHA256=5c3443688eb734e706b29e909ab7e562e4593e510733e686d4dd2537407e617b
+CF_SETUP_RC=0
+APPLY_TRANSPORT_RC=0
+APPLY_GUEST|exited=1|exitcode=0
+TURNSTILE_APPLY|site_sha=b4a0cad827d625f7009f904cbc6faead9d2ef55f3d271d9eb4c370f3327066f1|secret_sha=5c3443688eb734e706b29e909ab7e562e4593e510733e686d4dd2537407e617b
+VERIFY_TRANSPORT_RC=0
+VERIFY_GUEST|exited=1|exitcode=21
+FAILURE=XENFORO_TURNSTILE_VERIFY_FAILED
+TURNSTILE_VERIFY|provider=Turnstile|site_sha=b4a0cad827d625f7009f904cbc6faead9d2ef55f3d271d9eb4c370f3327066f1|secret_sha=5c3443688eb734e706b29e909ab7e562e4593e510733e686d4dd2537407e617b|extra_sha=da04877fdb57a1f4719d9d04a2022254777c0883b7dba5cbdfc601047e0edd5d
+RESTORE_TRANSPORT_RC=0
+RESTORE_GUEST|exited=1|exitcode=0
+CF_WIDGET_DELETE_RESULT=OK
+TURNSTILE_ROLLBACK|xf_restored=true|cf_restored=true|restored=true
+CHECKPOINT14_TURNSTILE_COMPLETE=false
+CHECKPOINT14_OPEN=true
+PRODUCT_CHECKPOINTS_REMAINING=3
+DECISION=HOLD_PVEPRO923_TURNSTILE_CHECKPOINT14
+NEXT_GATE=RECONCILE_ONLY_PVEPRO923_FAILURE
+TASK_RESULT=HOLD_PVEPRO_TURNSTILE_CHECKPOINT14
+CHANGES_MADE_BY_923=true
+CLOUDFLARE_WIDGET_CREATED_BY_923=true
+XENFORO_OPTION_MUTATION_ATTEMPTED_BY_923=true
+XENFORO_OPTION_MUTATION_COMPLETED_BY_923=true
+REGISTRATION_MUTATION_BY_923=false
+MAIL_MUTATION_BY_923=false
+VM_CONFIG_MUTATION_BY_923=false
+BACKUP_MUTATION_BY_923=false
+EDGE_CONFIG_MUTATION_BY_923=false
+ROLLBACK_STARTED=true
+ROLLBACK_RESTORED=true
+HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"SUPPORT-260923-PVEPRO-TURNSTILE-CHECKPOINT14-NEW-TOKEN-923R1","status":"FAIL","changes_made":true,"rollback_started":true,"rollback_restored":true}
+PVEPRO923_END=true
 
 OUTPUT_END
 CHAT_OUTPUT_END