diff --git a/runtime/history/SUPPORT-260918-INFRA-VPS-BACKUPV2-USNETBIRD-LIVE-ROUTE-RECOVERY-READONLY-517R6R2.json b/runtime/history/SUPPORT-260918-INFRA-VPS-BACKUPV2-USNETBIRD-LIVE-ROUTE-RECOVERY-READONLY-517R6R2.json
new file mode 100644
index 00000000..c5c1c38a
--- /dev/null
+++ b/runtime/history/SUPPORT-260918-INFRA-VPS-BACKUPV2-USNETBIRD-LIVE-ROUTE-RECOVERY-READONLY-517R6R2.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": 1,
+  "channel": "homelab-runtime",
+  "command_id": "SUPPORT-260918-INFRA-VPS-BACKUPV2-USNETBIRD-LIVE-ROUTE-RECOVERY-READONLY-517R6R2",
+  "status": "OK",
+  "rc": 0,
+  "host": "pve01",
+  "mode": "read-only",
+  "component": "infra-vps-backupv2-usnetbird-live-route-recovery-readonly",
+  "started_at_utc": "2026-09-18T12:08:00Z",
+  "finished_at_utc": "2026-09-18T12:08:10Z",
+  "reference_register_checked": true,
+  "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66",
+  "error_register_checked": true,
+  "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0",
+  "command_sha256": "09d774c8091546ed03878736c254275dc8e43ccacaa4a713dcac3245b3481d7a",
+  "duplicate_failed_command_blocked": false,
+  "block_reason": null,
+  "execution_started": true,
+  "change_declared": false,
+  "result_contract_valid": true,
+  "result_contract_status": null,
+  "result_contract_error": null,
+  "command_rc": 0,
+  "changes_made": false,
+  "rollback_started": false,
+  "rollback_restored": null,
+  "mutation_outcome": "NO_MUTATION",
+  "sanitized": true,
+  "secrets_included": false,
+  "private_addresses_included": false,
+  "raw_evidence_retained_locally": true,
+  "raw_evidence_sha256": "15f145e7fd22a0597846b11df033170f7bf3919d92cb419b510bb1b5adc0ef57",
+  "sanitized_output_sha256": "660e8194bf2e8ac1d595d334f8872357f96fd72b959e182ca4ae03efdee63b48",
+  "output_truncated_in_json": false,
+  "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
+  "output": "VPS517R6R2_SAFE_REPORT={\"changes_made\":false,\"cloud_reads\":0,\"cloud_writes\":0,\"command_id\":\"SUPPORT-260918-INFRA-VPS-BACKUPV2-USNETBIRD-LIVE-ROUTE-RECOVERY-READONLY-517R6R2\",\"decision\":\"PASS_CURRENT_USNETBIRD_TARGET_FRESH_BUT_SOURCE_MAY_BE_LOCAL_ONLY\",\"external_ssh_attempts\":0,\"journald\":[],\"known_hosts_evidence\":[{\"file\":\"[SENSITIVE_PATH]\nVPS517R6R2_DECISION=PASS_CURRENT_USNETBIRD_TARGET_FRESH_BUT_SOURCE_MAY_BE_LOCAL_ONLY\nVPS517R6R2_NEXT_GATE=USE_EXACT_CURRENT_BACKUPV2_ACCESS_ROUTE_FOR_INVENTORY_IF_REMOTE_OR_INSPECT_EXACT_GENERATION_MANIFEST_IF_LOCAL_ONLY\nHOMELAB_RESULT_CONTRACT={\"version\":1,\"command_id\":\"SUPPORT-260918-INFRA-VPS-BACKUPV2-USNETBIRD-LIVE-ROUTE-RECOVERY-READONLY-517R6R2\",\"status\":\"OK\",\"changes_made\":false,\"rollback_started\":false,\"rollback_restored\":null}\n"
+}
diff --git a/runtime/history/SUPPORT-260918-INFRA-VPS-BACKUPV2-USNETBIRD-LIVE-ROUTE-RECOVERY-READONLY-517R6R2.txt b/runtime/history/SUPPORT-260918-INFRA-VPS-BACKUPV2-USNETBIRD-LIVE-ROUTE-RECOVERY-READONLY-517R6R2.txt
new file mode 100644
index 00000000..d1f1c1d5
--- /dev/null
+++ b/runtime/history/SUPPORT-260918-INFRA-VPS-BACKUPV2-USNETBIRD-LIVE-ROUTE-RECOVERY-READONLY-517R6R2.txt
@@ -0,0 +1,36 @@
+CHAT_OUTPUT_BEGIN
+COMMAND_ID=SUPPORT-260918-INFRA-VPS-BACKUPV2-USNETBIRD-LIVE-ROUTE-RECOVERY-READONLY-517R6R2
+STATUS=OK
+RC=0
+HOST=pve01
+MODE=read-only
+COMPONENT=infra-vps-backupv2-usnetbird-live-route-recovery-readonly
+REFERENCE_REGISTER_CHECK=OK
+REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
+ERROR_REGISTER_CHECK=OK
+ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
+COMMAND_SHA256=09d774c8091546ed03878736c254275dc8e43ccacaa4a713dcac3245b3481d7a
+DUPLICATE_FAILED_COMMAND_BLOCKED=false
+EXECUTION_STARTED=true
+CHANGE_DECLARED=false
+RESULT_CONTRACT_VALID=true
+RESULT_CONTRACT_STATUS=NOT_APPLICABLE
+RESULT_CONTRACT_ERROR=NONE
+COMMAND_RC=0
+CHANGES_MADE=false
+ROLLBACK_STARTED=false
+ROLLBACK_RESTORED=null
+MUTATION_OUTCOME=NO_MUTATION
+SANITIZED=yes
+SECRETS_INCLUDED=no
+PRIVATE_ADDRESSES_INCLUDED=no
+RAW_EVIDENCE_SHA256=15f145e7fd22a0597846b11df033170f7bf3919d92cb419b510bb1b5adc0ef57
+SANITIZED_OUTPUT_SHA256=660e8194bf2e8ac1d595d334f8872357f96fd72b959e182ca4ae03efdee63b48
+OUTPUT_BEGIN
+VPS517R6R2_SAFE_REPORT={"changes_made":false,"cloud_reads":0,"cloud_writes":0,"command_id":"SUPPORT-260918-INFRA-VPS-BACKUPV2-USNETBIRD-LIVE-ROUTE-RECOVERY-READONLY-517R6R2","decision":"PASS_CURRENT_USNETBIRD_TARGET_FRESH_BUT_SOURCE_MAY_BE_LOCAL_ONLY","external_ssh_attempts":0,"journald":[],"known_hosts_evidence":[{"file":"[SENSITIVE_PATH]
+VPS517R6R2_DECISION=PASS_CURRENT_USNETBIRD_TARGET_FRESH_BUT_SOURCE_MAY_BE_LOCAL_ONLY
+VPS517R6R2_NEXT_GATE=USE_EXACT_CURRENT_BACKUPV2_ACCESS_ROUTE_FOR_INVENTORY_IF_REMOTE_OR_INSPECT_EXACT_GENERATION_MANIFEST_IF_LOCAL_ONLY
+HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"SUPPORT-260918-INFRA-VPS-BACKUPV2-USNETBIRD-LIVE-ROUTE-RECOVERY-READONLY-517R6R2","status":"OK","changes_made":false,"rollback_started":false,"rollback_restored":null}
+
+OUTPUT_END
+CHAT_OUTPUT_END
diff --git a/runtime/latest.json b/runtime/latest.json
index 6dc0360d..c5c1c38a 100644
--- a/runtime/latest.json
+++ b/runtime/latest.json
@@ -1,19 +1,19 @@
 {
   "schema_version": 1,
   "channel": "homelab-runtime",
-  "command_id": "SUPPORT-260918-INFRA-VPS-P0B-OFFCLUSTER-SSH-ROUTE-RECOVERY-READONLY-517R6R1",
+  "command_id": "SUPPORT-260918-INFRA-VPS-BACKUPV2-USNETBIRD-LIVE-ROUTE-RECOVERY-READONLY-517R6R2",
   "status": "OK",
   "rc": 0,
   "host": "pve01",
   "mode": "read-only",
-  "component": "infra-vps-p0b-offcluster-ssh-route-recovery-readonly",
-  "started_at_utc": "2026-09-18T12:03:39Z",
-  "finished_at_utc": "2026-09-18T12:03:49Z",
+  "component": "infra-vps-backupv2-usnetbird-live-route-recovery-readonly",
+  "started_at_utc": "2026-09-18T12:08:00Z",
+  "finished_at_utc": "2026-09-18T12:08:10Z",
   "reference_register_checked": true,
   "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66",
   "error_register_checked": true,
   "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0",
-  "command_sha256": "6800b1a135b1615cdbde79c3bbb253ad9475c922d9fc5a6a1b85d2fdaa868c3b",
+  "command_sha256": "09d774c8091546ed03878736c254275dc8e43ccacaa4a713dcac3245b3481d7a",
   "duplicate_failed_command_blocked": false,
   "block_reason": null,
   "execution_started": true,
@@ -30,9 +30,9 @@
   "secrets_included": false,
   "private_addresses_included": false,
   "raw_evidence_retained_locally": true,
-  "raw_evidence_sha256": "543bf5e941c8b7155187c399009341fda70af91f035bf7534bfc257144ae72c8",
-  "sanitized_output_sha256": "920b4948fd47d21eae49146602648b8cbe44fbcc918cf09e0b77b76f0290ef19",
+  "raw_evidence_sha256": "15f145e7fd22a0597846b11df033170f7bf3919d92cb419b510bb1b5adc0ef57",
+  "sanitized_output_sha256": "660e8194bf2e8ac1d595d334f8872357f96fd72b959e182ca4ae03efdee63b48",
   "output_truncated_in_json": false,
   "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
-  "output": "VPS517R6R1_SAFE_REPORT={\"changes_made\":false,\"cloud_reads\":0,\"cloud_writes\":0,\"command_id\":\"SUPPORT-260918-INFRA-VPS-P0B-OFFCLUSTER-SSH-ROUTE-RECOVERY-READONLY-517R6R1\",\"decision\":\"PASS_P0B_OFFCLUSTER_ARTIFACTS_RECOVERED_NO_SSH_ROUTE_YET\",\"external_ssh_attempts\":0,\"key_candidates\":[{\"bytes\":728,\"derive_rc\":255,\"encrypted_or_unreadable\":true,\"kind\":\"private_candidate\",\"mode\":\"0o664\",\"path\":\"/mnt/staging/homelab-standalone-cloud-b-control-v2-20260811T000336Z-3938878/configs-restore/docs/operations/manual-vps-ssh-hostkey-verification-closure-20260624T200554Z.md\",\"sha256\":\"bd11d48ed4750168e3d62e88b9097fcea242c8d7d3be5b79e761b6d4ac09a1ef\",\"stderr_bytes\":703,\"stderr_sha256\":\"e0111766cd57949da48b79cd0860c3b6ffbfe27c77dafd9659078c715fa27d61\"},{\"bytes\":330,\"derive_rc\":255,\"encrypted_or_unreadable\":true,\"kind\":\"private_candidate\",\"mode\":\"0o664\",\"path\":\"/mnt/staging/homelab-standalone-cloud-b-control-v2-20260811T000336Z-3938878/configs-restore/docs/operations/manual-vps-ssh-hostkey-verification-commit-20260624T200554Z.md\",\"sha256\":\"3636df730abb271dbba4dbf265ce99e23b876e2e7fe82973031bc09b0e8a1fbe\",\"stderr_bytes\":701,\"stderr_sha256\":\"ab65131ae5b83430a3716dd1458976c0d768af2379ee9240cec43a4b2afccf8e\"},{\"bytes\":104,\"kind\":\"public_candidate\",\"mode\":\"0o644\",\"path\":\"/srv/homelab-ops/tasks/snikket-vm150-rebuild-v2/assets/recovery-authorized-key.pub\",\"sha256\":\"2b56e9802862c8b5a42e99052ce2138f9762ac329db2e93c32ab8e852e888dc0\"},{\"bytes\":336,\"derive_rc\":255,\"encrypted_or_unreadable\":true,\"kind\":\"private_candidate\",\"mode\":\"0o644\",\"path\":\"/etc/systemd/system/ssh.service.wants/sshd-keygen.service\",\"sha256\":\"229006e93cdb44d2ee4d8f43bcea346e4566b443455f1fa71aa636505d2e17b0\",\"stderr_bytes\":475,\"stderr_sha256\":\"aa0b8296fd7729ed51af633b59da19b9508d496080292ff3ad643eced9250146\"},{\"bytes\":336,\"derive_rc\":255,\"encrypted_or_unreadable\":true,\"kind\":\"private_candidate\",\"mode\":\"0o644\",\"path\":\"/etc/systemd/system/sshd.service.wants/sshd-keygen.service\",\"sha256\":\"229006e93cdb44d2ee4d8f43bcea346e4566b443455f1fa71aa636505d2e17b0\",\"stderr_bytes\":477,\"stderr_sha256\":\"9c4edfecde1f945ac35dee4c54ebd1dc9a4bb67f8dd5123765c7958edf043eb2\"},{\"bytes\":336,\"derive_rc\":255,\"encrypted_or_unreadable\":true,\"kind\":\"private_candidate\",\"mode\":\"0o644\",\"path\":\"/etc/systemd/system/ssh.socket.wants/sshd-keygen.service\",\"sha256\":\"229006e93cdb44d2ee4d8f43bcea346e4566b443455f1fa71aa636505d2e17b0\",\"stderr_bytes\":473,\"stderr_sha256\":\"3713e7f42e60ae3a3896574d9ecf8e2d75a2e8ec2c77fb46e954706fb1c6224f\"},{\"bytes\":336,\"derive_rc\":255,\"encrypted_or_unreadable\":true,\"kind\":\"private_candidate\",\"mode\":\"0o644\",\"path\":\"/etc/systemd/system/sshd@.service.wants/sshd-keygen.service\",\"sha256\":\"229006e93cdb44d2ee4d8f43bcea346e4566b443455f1fa71aa636505d2e17b0\",\"stderr_bytes\":479,\"stderr_sha256\":\"dd8b0ec44ac35e62d7f476fdffaf9bbc9c1eeaec5949a976b5a16c896387bcbf\"},{\"bytes\":104,\"kind\":\"public_candidate\",\"mode\":\"0o644\",\"path\":\"/root/homelab-ops-cr-2026-0078/tasks/snikket-vm150-rebuild-v2/assets/recovery-authorized-key.pub\",\"sha256\":\"2b56e9802862c8b5a42e99052ce2138f9762ac329db2e93c32ab8e852e888dc0\"},{\"bytes\":104,\"kind\":\"public_candidate\",\"mode\":\"0o644\",\"path\":\"/root/homelab-ops-cr-2026-0085/tasks/snikket-vm150-rebuild-v2/assets/recovery-authorized-key.pub\",\"sha256\":\"2b56e9802862c8b5a42e99052ce2138f9762ac329db2e93c32ab8e852e888dc0\"},{\"bytes\":104,\"kind\":\"public_candidate\",\"mode\":\"0o600\",\"path\":\"/root/homelab-ops-cr-2026-0080/tasks/snikket-vm150-rebuild-v2/assets/recovery-authorized-key.pub\",\"sha256\":\"2b56e9802862c8b5a42e99052ce2138f9762ac329db2e93c32ab8e852e888dc0\"},{\"bytes\":104,\"kind\":\"public_candidate\",\"mode\":\"0o644\",\"path\":\"/root/homelab-ops-cr0101-main/tasks/snikket-vm150-rebuild-v2/assets/recovery-authorized-key.pub\",\"sha256\":\"2b56e9802862c8b5a42e99052ce2138f9762ac329db2e93c32ab8e852e888dc0\"},{\"bytes\":104,\"kind\":\"public_candidate\",\"mode\":\"0o644\",\"path\":\"/root/homelab-ops-cr-2026-0081/tasks/snikket-vm150-rebuild-v2/assets/recovery-authorized-key.pub\",\"sha256\":\"2b56e9802862c8b5a42e99052ce2138f9762ac329db2e93c32ab8e852e888dc0\"},{\"bytes\":104,\"kind\":\"public_candidate\",\"mode\":\"0o644\",\"path\":\"/root/homelab-ops-cr0099-main/tasks/snikket-vm150-rebuild-v2/assets/recovery-authorized-key.pub\",\"sha256\":\"2b56e9802862c8b5a42e99052ce2138f9762ac329db2e93c32ab8e852e888dc0\"},{\"bytes\":104,\"kind\":\"public_candidate\",\"mode\":\"0o644\",\"path\":\"/root/gram23-prospective-operations-v1/tasks/snikket-vm150-rebuild-v2/assets/recovery-authorized-key.pub\",\"sha256\":\"2b56e9802862c8b5a42e99052ce2138f9762ac329db2e93c32ab8e852e888dc0\"},{\"bytes\":104,\"kind\":\"public_candidate\",\"mode\":\"0o644\",\"path\":\"/root/homelab-ops-cr-2026-0086/tasks/snikket-vm150-rebuild-v2/assets/recovery-authorized-key.pub\",\"sha256\":\"2b56e9802862c8b5a42e99052ce2138f9762ac329db2e93c32ab8e852e888dc0\"},{\"bytes\":104,\"kind\":\"public_candidate\",\"mode\":\"0o644\",\"path\":\"/root/homelab-ops-cr-2026-0096-current-main/tasks/snikket-vm150-rebuild-v2/assets/recovery-authorized-key.pub\",\"sha256\":\"2b56e9802862c8b5a42e99052ce2138f9762ac329db2e93c32ab8e852e888dc0\"},{\"bytes\":104,\"kind\":\"public_candidate\",\"mode\":\"0o644\",\"path\":\"/root/homelab-ops-cr-2026-0082/tasks/snikket-vm150-rebuild-v2/assets/recovery-authorized-key.pub\",\"sha256\":\"2b56e9802862c8b5a42e99052ce2138f9762ac329db2e93c32ab8e852e888dc0\"},{\"bytes\":104,\"kind\":\"public_candidate\",\"mode\":\"0o644\",\"path\":\"/root/homelab-ops-demonov-shadow-orchestrator-v1/tasks/snikket-vm150-rebuild-v2/assets/recovery-authorized-key.pub\",\"sha256\":\"2b56e9802862c8b5a42e99052ce2138f9762ac329db2e93c32ab8e852e888dc0\"},{\"bytes\":104,\"kind\":\"public_candidate\",\"mode\":\"0o644\",\"path\":\"/root/homelab-ops-cr0100/tasks/snikket-vm150-rebuild-v2/assets/recovery-authorized-key.pub\",\"sha256\":\"2b56e9802862c8b5a42e99052ce2138f9762ac329db2e93c32ab8e852e888dc0\"},{\"bytes\":104,\"kind\":\"public_candidate\",\"mode\":\"0o644\",\"path\":\"/root/homelab-ops-cr0099/tasks/snikket-vm150-rebuild-v2/assets/recovery-authorized-key.pub\",\"sha256\":\"2b56e9802862c8b5a42e99052ce2138f9762ac329db2e93c32ab8e852e888dc0\"},{\"bytes\":104,\"kind\":\"public_candidate\",\"mode\":\"0o644\",\"path\":\"/root/homelab-ops-cr0099-v2-main/tasks/snikket-vm150-rebuild-v2/assets/recovery-authorized-key.pub\",\"sha256\":\"2b56e9802862c8b5a42e99052ce2138f9762ac329db2e93c32ab8e852e888dc0\"},{\"bytes\":104,\"kind\":\"public_candidate\",\"mode\":\"0o644\",\"path\":\"/root/homelab-ops-cr-2026-0083/tasks/snikket-vm150-rebuild-v2/assets/recovery-authorized-key.pub\",\"sha256\":\"2b56e9802862c8b5a42e99052ce2138f9762ac329db2e93c32ab8e852e888dc0\"},{\"bytes\":104,\"kind\":\"public_candidate\",\"mode\":\"0o600\",\"path\":\"/root/homelab-ops-cr-2026-0095/tasks/snikket-vm150-rebuild-v2/assets/recovery-authorized-key.pub\",\"sha256\":\"2b56e9802862c8b5a42e99052ce2138f9762ac329db2e93c32ab8e852e888dc0\"},{\"bytes\":104,\"kind\":\"public_candidate\",\"mode\":\"0o644\",\"path\":\"[SENSITIVE_PATH]  \\\"generation\\\": \\\"control-bootstrap-v2-pve01-20260916T120057Z\\\",\"},{\"line\":5,\"text\":\"  \\\"state_file\\\": \\\"/var/lib/homelab-backup/cloud-quorum/control-bootstrap-v2/control-bootstrap-v2-pve01-20260916T120057Z.json\\\",\"},{\"line\":6,\"text\":\"  \\\"restore_evidence\\\": \\\"/var/lib/homelab-backup/control-restore-validation/control-bootstrap/control-bootstrap-v2-pve01-20260916T120057Z.json\\\",\"}],\"path\":\"/var/lib/homelab-health/control-backup.json\",\"sha256\":\"73dd99554a94e3ace1b9eca9a61d6b55eec705b52915edfa8b2913c6908d6362\"}],\"mode\":\"read-only\",\"route_references\":[{\"line\":1,\"path\":\"/var/lib/homelab-backup-v2/state/us-netbird.json\",\"text\":\"{\\\"consecutive_failures\\\":0,\\\"failure_backoff_seconds\\\":0,\\\"generation\\\":\\\"v2-us-netbird-20260918T041032Z-d7648be4c16b\\\",\\\"green_verified\\\":false,\\\"last_attempt_epoch\\\":1789704670,\\\"last_success_epoch\\\":1789704670,\\\"logical_id\\\":\\\"us-netbird\\\",\\\"manifest_sha256\\\":\\\"f82c761cafe8aa43d90d0b4b6124933799b5087d34daf880791d850d0d15cee5\\\",\\\"payload_sha256\\\":\\\"e41e3e012442ef41da1c667d7f5fbe4fd52786b0bb5ffca195660750c773efbf\\\",\\\"replicas\\\":[{\\\"crypt\\\":\\\"pve01-mail-05-crypt\\\",\\\"physical\\\":\\\"pve01-mail-05\\\"},{\\\"crypt\\\":\\\"pve03-mail-04-crypt\\\",\\\"physical\\\":\\\"pve03-mail-04\\\"}],\\\"result\\\":\\\"SUCCESS\\\",\\\"retry_after_epoch\\\":0,\\\"schema\\\":1,\\\"updated_at_utc\\\":\\\"2026-09-18T04:11:10Z\\\"}\"},{\"line\":1,\"path\":\"/var/lib/homelab-backup-v2/cold-bootstrap/us-netbird.json\",\"text\":\"{\\\"anchor_505_commit\\\":\\\"915310304ba96ded6bffaaf88edafeda6a89efa0\\\",\\\"anchor_506r4_commit\\\":\\\"3e4e0227fb6f13cdca56fba320218b5f8aa5ed26\\\",\\\"cloud_deletions\\\":0,\\\"cloud_writes\\\":0,\\\"command_id\\\":\\\"SUPPORT-260917-INFRA-DR-BACKUPV2-P0B-REFRESHABLE-ESCROW-REPAIR-FINAL-CLOSE-507R1\\\",\\\"credential_envelope\\\":\\\"cms-signed-then-enveloped-v1\\\",\\\"external_cloud_read_verified\\\":true,\\\"kit_metadata_sha256\\\":\\\"74fc0439133247a56bcbd6d580bc38f6b5e818b80524ab869725b47d66cf09cc\\\",\\\"kit_root\\\":\\\"/root/.local/share/homelab-backup-v2-cold-bootstrap-v1\\\",\\\"offcluster_host\\\":\\\"us-netbird\\\",\\\"parts_manifest_sha256\\\":\\\"1748416b7934f11ec18b51ada36d87f5b23a2839d50db3d8364f06f1f40bb677\\\",\\\"plaintext_config_persistent_offcluster\\\":false,\\\"proof_generation\\\":\\\"control-bootstrap-v2-pve01-20260916T120057Z\\\",\\\"rclone_binary_sha256\\\":\\\"20df3d5eac5d4e187ce638e4216354e7fa6778c3c51f0caf48c48acca9686354\\\",\\\"recover_script_sha256\\\":\\\"8d2af941d2c6d8252c302ee563631331e580ccfa67505cb0551942647fff0363\\\",\\\"recovery_cert_sha256\\\":\\\"fb4ad5cdf7aca806b8e2b236ed338724f8a053f70c8f5dba7e26139ace25a4f9\\\",\\\"refreshable_credentials_persisted_encrypted\\\":true,\\\"remote_base_sha256\\\":\\\"ab759e05b26cb46267512140c3966041bee602666c7411ad72e41b15c027595a\\\",\\\"retention_mutation\\\":false,\\\"schema\\\":\\\"homelab-backup-v2-cold-bootstrap-binding-v2\\\",\\\"status\\\":\\\"ACCEPTED\\\"}\"}],\"schema_version\":1,\"ssh_config_expansion\":[{\"alias\":\"us-netbird\",\"hostname\":\"us-netbird\",\"identityfile_basenames\":[\"id_rsa\",\"id_ecdsa\",\"id_ecdsa_sk\",\"id_ed25519\",\"id_ed25519_sk\",\"id_xmss\"],\"port\":\"22\",\"rc\":0,\"user\":\"root\"},{\"alias\":\"mail.pvepro.ru\",\"hostname\":\"mail.pvepro.ru\",\"identityfile_basenames\":[\"id_rsa\",\"id_ecdsa\",\"id_ecdsa_sk\",\"id_ed25519\",\"id_ed25519_sk\",\"id_xmss\"],\"port\":\"22\",\"rc\":0,\"user\":\"root\"},{\"alias\":\"mail.netbird.selfhosted\",\"hostname\":\"mail.netbird.selfhosted\",\"identityfile_basenames\":[\"id_rsa\",\"id_ecdsa\",\"id_ecdsa_sk\",\"id_ed25519\",\"id_ed25519_sk\",\"id_xmss\"],\"port\":\"22\",\"rc\":0,\"user\":\"root\"},{\"alias\":\"relay.pvepro.ru\",\"hostname\":\"relay.pvepro.ru\",\"identityfile_basenames\":[\"id_rsa\",\"id_ecdsa\",\"id_ecdsa_sk\",\"id_ed25519\",\"id_ed25519_sk\",\"id_xmss\"],\"port\":\"22\",\"rc\":0,\"user\":\"root\"},{\"alias\":\"relay.netbird.selfhosted\",\"hostname\":\"relay.netbird.selfhosted\",\"identityfile_basenames\":[\"id_rsa\",\"id_ecdsa\",\"id_ecdsa_sk\",\"id_ed25519\",\"id_ed25519_sk\",\"id_xmss\"],\"port\":\"22\",\"rc\":0,\"user\":\"root\"}]}\nVPS517R6R1_DECISION=PASS_P0B_OFFCLUSTER_ARTIFACTS_RECOVERED_NO_SSH_ROUTE_YET\nVPS517R6R1_NEXT_GATE=USE_EXACT_RECOVERED_ROUTE_IF_PASS_ELSE_TARGETED_CLOUD_P0B_READ_ONLY\nHOMELAB_RESULT_CONTRACT={\"version\":1,\"command_id\":\"SUPPORT-260918-INFRA-VPS-P0B-OFFCLUSTER-SSH-ROUTE-RECOVERY-READONLY-517R6R1\",\"status\":\"OK\",\"changes_made\":false,\"rollback_started\":false,\"rollback_restored\":null}\n"
+  "output": "VPS517R6R2_SAFE_REPORT={\"changes_made\":false,\"cloud_reads\":0,\"cloud_writes\":0,\"command_id\":\"SUPPORT-260918-INFRA-VPS-BACKUPV2-USNETBIRD-LIVE-ROUTE-RECOVERY-READONLY-517R6R2\",\"decision\":\"PASS_CURRENT_USNETBIRD_TARGET_FRESH_BUT_SOURCE_MAY_BE_LOCAL_ONLY\",\"external_ssh_attempts\":0,\"journald\":[],\"known_hosts_evidence\":[{\"file\":\"[SENSITIVE_PATH]\nVPS517R6R2_DECISION=PASS_CURRENT_USNETBIRD_TARGET_FRESH_BUT_SOURCE_MAY_BE_LOCAL_ONLY\nVPS517R6R2_NEXT_GATE=USE_EXACT_CURRENT_BACKUPV2_ACCESS_ROUTE_FOR_INVENTORY_IF_REMOTE_OR_INSPECT_EXACT_GENERATION_MANIFEST_IF_LOCAL_ONLY\nHOMELAB_RESULT_CONTRACT={\"version\":1,\"command_id\":\"SUPPORT-260918-INFRA-VPS-BACKUPV2-USNETBIRD-LIVE-ROUTE-RECOVERY-READONLY-517R6R2\",\"status\":\"OK\",\"changes_made\":false,\"rollback_started\":false,\"rollback_restored\":null}\n"
 }
diff --git a/runtime/latest.txt b/runtime/latest.txt
index 09b8993d..d1f1c1d5 100644
--- a/runtime/latest.txt
+++ b/runtime/latest.txt
@@ -1,15 +1,15 @@
 CHAT_OUTPUT_BEGIN
-COMMAND_ID=SUPPORT-260918-INFRA-VPS-P0B-OFFCLUSTER-SSH-ROUTE-RECOVERY-READONLY-517R6R1
+COMMAND_ID=SUPPORT-260918-INFRA-VPS-BACKUPV2-USNETBIRD-LIVE-ROUTE-RECOVERY-READONLY-517R6R2
 STATUS=OK
 RC=0
 HOST=pve01
 MODE=read-only
-COMPONENT=infra-vps-p0b-offcluster-ssh-route-recovery-readonly
+COMPONENT=infra-vps-backupv2-usnetbird-live-route-recovery-readonly
 REFERENCE_REGISTER_CHECK=OK
 REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
 ERROR_REGISTER_CHECK=OK
 ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
-COMMAND_SHA256=6800b1a135b1615cdbde79c3bbb253ad9475c922d9fc5a6a1b85d2fdaa868c3b
+COMMAND_SHA256=09d774c8091546ed03878736c254275dc8e43ccacaa4a713dcac3245b3481d7a
 DUPLICATE_FAILED_COMMAND_BLOCKED=false
 EXECUTION_STARTED=true
 CHANGE_DECLARED=false
@@ -24,13 +24,13 @@ MUTATION_OUTCOME=NO_MUTATION
 SANITIZED=yes
 SECRETS_INCLUDED=no
 PRIVATE_ADDRESSES_INCLUDED=no
-RAW_EVIDENCE_SHA256=543bf5e941c8b7155187c399009341fda70af91f035bf7534bfc257144ae72c8
-SANITIZED_OUTPUT_SHA256=920b4948fd47d21eae49146602648b8cbe44fbcc918cf09e0b77b76f0290ef19
+RAW_EVIDENCE_SHA256=15f145e7fd22a0597846b11df033170f7bf3919d92cb419b510bb1b5adc0ef57
+SANITIZED_OUTPUT_SHA256=660e8194bf2e8ac1d595d334f8872357f96fd72b959e182ca4ae03efdee63b48
 OUTPUT_BEGIN
-VPS517R6R1_SAFE_REPORT={"changes_made":false,"cloud_reads":0,"cloud_writes":0,"command_id":"SUPPORT-260918-INFRA-VPS-P0B-OFFCLUSTER-SSH-ROUTE-RECOVERY-READONLY-517R6R1","decision":"PASS_P0B_OFFCLUSTER_ARTIFACTS_RECOVERED_NO_SSH_ROUTE_YET","external_ssh_attempts":0,"key_candidates":[{"bytes":728,"derive_rc":255,"encrypted_or_unreadable":true,"kind":"private_candidate","mode":"0o664","path":"/mnt/staging/homelab-standalone-cloud-b-control-v2-20260811T000336Z-3938878/configs-restore/docs/operations/manual-vps-ssh-hostkey-verification-closure-20260624T200554Z.md","sha256":"bd11d48ed4750168e3d62e88b9097fcea242c8d7d3be5b79e761b6d4ac09a1ef","stderr_bytes":703,"stderr_sha256":"e0111766cd57949da48b79cd0860c3b6ffbfe27c77dafd9659078c715fa27d61"},{"bytes":330,"derive_rc":255,"encrypted_or_unreadable":true,"kind":"private_candidate","mode":"0o664","path":"/mnt/staging/homelab-standalone-cloud-b-control-v2-20260811T000336Z-3938878/configs-restore/docs/operations/manual-vps-ssh-hostkey-verification-commit-20260624T200554Z.md","sha256":"3636df730abb271dbba4dbf265ce99e23b876e2e7fe82973031bc09b0e8a1fbe","stderr_bytes":701,"stderr_sha256":"ab65131ae5b83430a3716dd1458976c0d768af2379ee9240cec43a4b2afccf8e"},{"bytes":104,"kind":"public_candidate","mode":"0o644","path":"/srv/homelab-ops/tasks/snikket-vm150-rebuild-v2/assets/recovery-authorized-key.pub","sha256":"2b56e9802862c8b5a42e99052ce2138f9762ac329db2e93c32ab8e852e888dc0"},{"bytes":336,"derive_rc":255,"encrypted_or_unreadable":true,"kind":"private_candidate","mode":"0o644","path":"/etc/systemd/system/ssh.service.wants/sshd-keygen.service","sha256":"229006e93cdb44d2ee4d8f43bcea346e4566b443455f1fa71aa636505d2e17b0","stderr_bytes":475,"stderr_sha256":"aa0b8296fd7729ed51af633b59da19b9508d496080292ff3ad643eced9250146"},{"bytes":336,"derive_rc":255,"encrypted_or_unreadable":true,"kind":"private_candidate","mode":"0o644","path":"/etc/systemd/system/sshd.service.wants/sshd-keygen.service","sha256":"229006e93cdb44d2ee4d8f43bcea346e4566b443455f1fa71aa636505d2e17b0","stderr_bytes":477,"stderr_sha256":"9c4edfecde1f945ac35dee4c54ebd1dc9a4bb67f8dd5123765c7958edf043eb2"},{"bytes":336,"derive_rc":255,"encrypted_or_unreadable":true,"kind":"private_candidate","mode":"0o644","path":"/etc/systemd/system/ssh.socket.wants/sshd-keygen.service","sha256":"229006e93cdb44d2ee4d8f43bcea346e4566b443455f1fa71aa636505d2e17b0","stderr_bytes":473,"stderr_sha256":"3713e7f42e60ae3a3896574d9ecf8e2d75a2e8ec2c77fb46e954706fb1c6224f"},{"bytes":336,"derive_rc":255,"encrypted_or_unreadable":true,"kind":"private_candidate","mode":"0o644","path":"/etc/systemd/system/sshd@.service.wants/sshd-keygen.service","sha256":"229006e93cdb44d2ee4d8f43bcea346e4566b443455f1fa71aa636505d2e17b0","stderr_bytes":479,"stderr_sha256":"dd8b0ec44ac35e62d7f476fdffaf9bbc9c1eeaec5949a976b5a16c896387bcbf"},{"bytes":104,"kind":"public_candidate","mode":"0o644","path":"/root/homelab-ops-cr-2026-0078/tasks/snikket-vm150-rebuild-v2/assets/recovery-authorized-key.pub","sha256":"2b56e9802862c8b5a42e99052ce2138f9762ac329db2e93c32ab8e852e888dc0"},{"bytes":104,"kind":"public_candidate","mode":"0o644","path":"/root/homelab-ops-cr-2026-0085/tasks/snikket-vm150-rebuild-v2/assets/recovery-authorized-key.pub","sha256":"2b56e9802862c8b5a42e99052ce2138f9762ac329db2e93c32ab8e852e888dc0"},{"bytes":104,"kind":"public_candidate","mode":"0o600","path":"/root/homelab-ops-cr-2026-0080/tasks/snikket-vm150-rebuild-v2/assets/recovery-authorized-key.pub","sha256":"2b56e9802862c8b5a42e99052ce2138f9762ac329db2e93c32ab8e852e888dc0"},{"bytes":104,"kind":"public_candidate","mode":"0o644","path":"/root/homelab-ops-cr0101-main/tasks/snikket-vm150-rebuild-v2/assets/recovery-authorized-key.pub","sha256":"2b56e9802862c8b5a42e99052ce2138f9762ac329db2e93c32ab8e852e888dc0"},{"bytes":104,"kind":"public_candidate","mode":"0o644","path":"/root/homelab-ops-cr-2026-0081/tasks/snikket-vm150-rebuild-v2/assets/recovery-authorized-key.pub","sha256":"2b56e9802862c8b5a42e99052ce2138f9762ac329db2e93c32ab8e852e888dc0"},{"bytes":104,"kind":"public_candidate","mode":"0o644","path":"/root/homelab-ops-cr0099-main/tasks/snikket-vm150-rebuild-v2/assets/recovery-authorized-key.pub","sha256":"2b56e9802862c8b5a42e99052ce2138f9762ac329db2e93c32ab8e852e888dc0"},{"bytes":104,"kind":"public_candidate","mode":"0o644","path":"/root/gram23-prospective-operations-v1/tasks/snikket-vm150-rebuild-v2/assets/recovery-authorized-key.pub","sha256":"2b56e9802862c8b5a42e99052ce2138f9762ac329db2e93c32ab8e852e888dc0"},{"bytes":104,"kind":"public_candidate","mode":"0o644","path":"/root/homelab-ops-cr-2026-0086/tasks/snikket-vm150-rebuild-v2/assets/recovery-authorized-key.pub","sha256":"2b56e9802862c8b5a42e99052ce2138f9762ac329db2e93c32ab8e852e888dc0"},{"bytes":104,"kind":"public_candidate","mode":"0o644","path":"/root/homelab-ops-cr-2026-0096-current-main/tasks/snikket-vm150-rebuild-v2/assets/recovery-authorized-key.pub","sha256":"2b56e9802862c8b5a42e99052ce2138f9762ac329db2e93c32ab8e852e888dc0"},{"bytes":104,"kind":"public_candidate","mode":"0o644","path":"/root/homelab-ops-cr-2026-0082/tasks/snikket-vm150-rebuild-v2/assets/recovery-authorized-key.pub","sha256":"2b56e9802862c8b5a42e99052ce2138f9762ac329db2e93c32ab8e852e888dc0"},{"bytes":104,"kind":"public_candidate","mode":"0o644","path":"/root/homelab-ops-demonov-shadow-orchestrator-v1/tasks/snikket-vm150-rebuild-v2/assets/recovery-authorized-key.pub","sha256":"2b56e9802862c8b5a42e99052ce2138f9762ac329db2e93c32ab8e852e888dc0"},{"bytes":104,"kind":"public_candidate","mode":"0o644","path":"/root/homelab-ops-cr0100/tasks/snikket-vm150-rebuild-v2/assets/recovery-authorized-key.pub","sha256":"2b56e9802862c8b5a42e99052ce2138f9762ac329db2e93c32ab8e852e888dc0"},{"bytes":104,"kind":"public_candidate","mode":"0o644","path":"/root/homelab-ops-cr0099/tasks/snikket-vm150-rebuild-v2/assets/recovery-authorized-key.pub","sha256":"2b56e9802862c8b5a42e99052ce2138f9762ac329db2e93c32ab8e852e888dc0"},{"bytes":104,"kind":"public_candidate","mode":"0o644","path":"/root/homelab-ops-cr0099-v2-main/tasks/snikket-vm150-rebuild-v2/assets/recovery-authorized-key.pub","sha256":"2b56e9802862c8b5a42e99052ce2138f9762ac329db2e93c32ab8e852e888dc0"},{"bytes":104,"kind":"public_candidate","mode":"0o644","path":"/root/homelab-ops-cr-2026-0083/tasks/snikket-vm150-rebuild-v2/assets/recovery-authorized-key.pub","sha256":"2b56e9802862c8b5a42e99052ce2138f9762ac329db2e93c32ab8e852e888dc0"},{"bytes":104,"kind":"public_candidate","mode":"0o600","path":"/root/homelab-ops-cr-2026-0095/tasks/snikket-vm150-rebuild-v2/assets/recovery-authorized-key.pub","sha256":"2b56e9802862c8b5a42e99052ce2138f9762ac329db2e93c32ab8e852e888dc0"},{"bytes":104,"kind":"public_candidate","mode":"0o644","path":"[SENSITIVE_PATH]  \"generation\": \"control-bootstrap-v2-pve01-20260916T120057Z\","},{"line":5,"text":"  \"state_file\": \"/var/lib/homelab-backup/cloud-quorum/control-bootstrap-v2/control-bootstrap-v2-pve01-20260916T120057Z.json\","},{"line":6,"text":"  \"restore_evidence\": \"/var/lib/homelab-backup/control-restore-validation/control-bootstrap/control-bootstrap-v2-pve01-20260916T120057Z.json\","}],"path":"/var/lib/homelab-health/control-backup.json","sha256":"73dd99554a94e3ace1b9eca9a61d6b55eec705b52915edfa8b2913c6908d6362"}],"mode":"read-only","route_references":[{"line":1,"path":"/var/lib/homelab-backup-v2/state/us-netbird.json","text":"{\"consecutive_failures\":0,\"failure_backoff_seconds\":0,\"generation\":\"v2-us-netbird-20260918T041032Z-d7648be4c16b\",\"green_verified\":false,\"last_attempt_epoch\":1789704670,\"last_success_epoch\":1789704670,\"logical_id\":\"us-netbird\",\"manifest_sha256\":\"f82c761cafe8aa43d90d0b4b6124933799b5087d34daf880791d850d0d15cee5\",\"payload_sha256\":\"e41e3e012442ef41da1c667d7f5fbe4fd52786b0bb5ffca195660750c773efbf\",\"replicas\":[{\"crypt\":\"pve01-mail-05-crypt\",\"physical\":\"pve01-mail-05\"},{\"crypt\":\"pve03-mail-04-crypt\",\"physical\":\"pve03-mail-04\"}],\"result\":\"SUCCESS\",\"retry_after_epoch\":0,\"schema\":1,\"updated_at_utc\":\"2026-09-18T04:11:10Z\"}"},{"line":1,"path":"/var/lib/homelab-backup-v2/cold-bootstrap/us-netbird.json","text":"{\"anchor_505_commit\":\"915310304ba96ded6bffaaf88edafeda6a89efa0\",\"anchor_506r4_commit\":\"3e4e0227fb6f13cdca56fba320218b5f8aa5ed26\",\"cloud_deletions\":0,\"cloud_writes\":0,\"command_id\":\"SUPPORT-260917-INFRA-DR-BACKUPV2-P0B-REFRESHABLE-ESCROW-REPAIR-FINAL-CLOSE-507R1\",\"credential_envelope\":\"cms-signed-then-enveloped-v1\",\"external_cloud_read_verified\":true,\"kit_metadata_sha256\":\"74fc0439133247a56bcbd6d580bc38f6b5e818b80524ab869725b47d66cf09cc\",\"kit_root\":\"/root/.local/share/homelab-backup-v2-cold-bootstrap-v1\",\"offcluster_host\":\"us-netbird\",\"parts_manifest_sha256\":\"1748416b7934f11ec18b51ada36d87f5b23a2839d50db3d8364f06f1f40bb677\",\"plaintext_config_persistent_offcluster\":false,\"proof_generation\":\"control-bootstrap-v2-pve01-20260916T120057Z\",\"rclone_binary_sha256\":\"20df3d5eac5d4e187ce638e4216354e7fa6778c3c51f0caf48c48acca9686354\",\"recover_script_sha256\":\"8d2af941d2c6d8252c302ee563631331e580ccfa67505cb0551942647fff0363\",\"recovery_cert_sha256\":\"fb4ad5cdf7aca806b8e2b236ed338724f8a053f70c8f5dba7e26139ace25a4f9\",\"refreshable_credentials_persisted_encrypted\":true,\"remote_base_sha256\":\"ab759e05b26cb46267512140c3966041bee602666c7411ad72e41b15c027595a\",\"retention_mutation\":false,\"schema\":\"homelab-backup-v2-cold-bootstrap-binding-v2\",\"status\":\"ACCEPTED\"}"}],"schema_version":1,"ssh_config_expansion":[{"alias":"us-netbird","hostname":"us-netbird","identityfile_basenames":["id_rsa","id_ecdsa","id_ecdsa_sk","id_ed25519","id_ed25519_sk","id_xmss"],"port":"22","rc":0,"user":"root"},{"alias":"mail.pvepro.ru","hostname":"mail.pvepro.ru","identityfile_basenames":["id_rsa","id_ecdsa","id_ecdsa_sk","id_ed25519","id_ed25519_sk","id_xmss"],"port":"22","rc":0,"user":"root"},{"alias":"mail.netbird.selfhosted","hostname":"mail.netbird.selfhosted","identityfile_basenames":["id_rsa","id_ecdsa","id_ecdsa_sk","id_ed25519","id_ed25519_sk","id_xmss"],"port":"22","rc":0,"user":"root"},{"alias":"relay.pvepro.ru","hostname":"relay.pvepro.ru","identityfile_basenames":["id_rsa","id_ecdsa","id_ecdsa_sk","id_ed25519","id_ed25519_sk","id_xmss"],"port":"22","rc":0,"user":"root"},{"alias":"relay.netbird.selfhosted","hostname":"relay.netbird.selfhosted","identityfile_basenames":["id_rsa","id_ecdsa","id_ecdsa_sk","id_ed25519","id_ed25519_sk","id_xmss"],"port":"22","rc":0,"user":"root"}]}
-VPS517R6R1_DECISION=PASS_P0B_OFFCLUSTER_ARTIFACTS_RECOVERED_NO_SSH_ROUTE_YET
-VPS517R6R1_NEXT_GATE=USE_EXACT_RECOVERED_ROUTE_IF_PASS_ELSE_TARGETED_CLOUD_P0B_READ_ONLY
-HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"SUPPORT-260918-INFRA-VPS-P0B-OFFCLUSTER-SSH-ROUTE-RECOVERY-READONLY-517R6R1","status":"OK","changes_made":false,"rollback_started":false,"rollback_restored":null}
+VPS517R6R2_SAFE_REPORT={"changes_made":false,"cloud_reads":0,"cloud_writes":0,"command_id":"SUPPORT-260918-INFRA-VPS-BACKUPV2-USNETBIRD-LIVE-ROUTE-RECOVERY-READONLY-517R6R2","decision":"PASS_CURRENT_USNETBIRD_TARGET_FRESH_BUT_SOURCE_MAY_BE_LOCAL_ONLY","external_ssh_attempts":0,"journald":[],"known_hosts_evidence":[{"file":"[SENSITIVE_PATH]
+VPS517R6R2_DECISION=PASS_CURRENT_USNETBIRD_TARGET_FRESH_BUT_SOURCE_MAY_BE_LOCAL_ONLY
+VPS517R6R2_NEXT_GATE=USE_EXACT_CURRENT_BACKUPV2_ACCESS_ROUTE_FOR_INVENTORY_IF_REMOTE_OR_INSPECT_EXACT_GENERATION_MANIFEST_IF_LOCAL_ONLY
+HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"SUPPORT-260918-INFRA-VPS-BACKUPV2-USNETBIRD-LIVE-ROUTE-RECOVERY-READONLY-517R6R2","status":"OK","changes_made":false,"rollback_started":false,"rollback_restored":null}
 
 OUTPUT_END
 CHAT_OUTPUT_END