diff --git a/runtime/history/NEWFI-260920-NEWFDOM-MESSENGERS214-FWD232.json b/runtime/history/NEWFI-260920-NEWFDOM-MESSENGERS214-FWD232.json
new file mode 100644
index 00000000..f74ac140
--- /dev/null
+++ b/runtime/history/NEWFI-260920-NEWFDOM-MESSENGERS214-FWD232.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": 1,
+  "channel": "homelab-runtime",
+  "command_id": "NEWFI-260920-NEWFDOM-MESSENGERS214-FWD232",
+  "status": "OK",
+  "rc": 0,
+  "host": "pve01",
+  "mode": "read-only",
+  "component": "newfi-newfdom-messengers214-usa-tunnel-locksafe-tls-proof-readonly",
+  "started_at_utc": "2026-09-20T05:25:12Z",
+  "finished_at_utc": "2026-09-20T05:25:12Z",
+  "reference_register_checked": true,
+  "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66",
+  "error_register_checked": true,
+  "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0",
+  "command_sha256": "395ef4b78b8c89216e24be42fbfb4dde94842013f6ec9a15143bc46f2e26bd25",
+  "duplicate_failed_command_blocked": false,
+  "block_reason": null,
+  "execution_started": true,
+  "change_declared": false,
+  "result_contract_valid": true,
+  "result_contract_status": null,
+  "result_contract_error": null,
+  "command_rc": 0,
+  "changes_made": false,
+  "rollback_started": false,
+  "rollback_restored": null,
+  "mutation_outcome": "NO_MUTATION",
+  "sanitized": true,
+  "secrets_included": false,
+  "private_addresses_included": false,
+  "raw_evidence_retained_locally": true,
+  "raw_evidence_sha256": "9e89dbbdda971cb025da7a2825dc7807a1731b40526e40a363991e86e41c4510",
+  "sanitized_output_sha256": "9e89dbbdda971cb025da7a2825dc7807a1731b40526e40a363991e86e41c4510",
+  "output_truncated_in_json": false,
+  "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
+  "output": "NEWFI232_BEGIN=true\nMODE=read-only\nCHANGES_MADE=false\nMUTATION_OUTCOME=NO_MUTATION\nAUTHORITY_OK=true\nPRECHECK_OK=true\nTUNNEL_ATTEMPTS=1\nTUNNEL_STARTED=true\nTUNNEL_PAGEANT_DIAGNOSTIC=true\nTUNNEL_ACCESS_DIAGNOSTIC=true\nLOCAL_FORWARD_OPEN=true\nTLS_AUTHENTICATED=true\nTUNNEL_TELEGRAM_HTTP=302\nTLS_ERROR_CLASS=NONE\nLIVE_LOCAL_FORWARD_PROVEN=true\nPHASE=COMPLETED\nERROR_CODE=NONE\nDECISION=PASS_FWD232_USA_LIVE_FORWARD_PROVEN\nNEXT_GATE=BUILD_TELEGRAM_USA_PRIMARY_APP_SCOPED_EGRESS\nCLOUD_WRITES=0\nVPS_CONFIG_MUTATIONS=0\nMESSENGERS214_CLOSED=false\nMAJOR_STAGES_REMAINING=8\nNEWFI232_END=true\n"
+}
diff --git a/runtime/history/NEWFI-260920-NEWFDOM-MESSENGERS214-FWD232.txt b/runtime/history/NEWFI-260920-NEWFDOM-MESSENGERS214-FWD232.txt
new file mode 100644
index 00000000..d04995fd
--- /dev/null
+++ b/runtime/history/NEWFI-260920-NEWFDOM-MESSENGERS214-FWD232.txt
@@ -0,0 +1,56 @@
+CHAT_OUTPUT_BEGIN
+COMMAND_ID=NEWFI-260920-NEWFDOM-MESSENGERS214-FWD232
+STATUS=OK
+RC=0
+HOST=pve01
+MODE=read-only
+COMPONENT=newfi-newfdom-messengers214-usa-tunnel-locksafe-tls-proof-readonly
+REFERENCE_REGISTER_CHECK=OK
+REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
+ERROR_REGISTER_CHECK=OK
+ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
+COMMAND_SHA256=395ef4b78b8c89216e24be42fbfb4dde94842013f6ec9a15143bc46f2e26bd25
+DUPLICATE_FAILED_COMMAND_BLOCKED=false
+EXECUTION_STARTED=true
+CHANGE_DECLARED=false
+RESULT_CONTRACT_VALID=true
+RESULT_CONTRACT_STATUS=NOT_APPLICABLE
+RESULT_CONTRACT_ERROR=NONE
+COMMAND_RC=0
+CHANGES_MADE=false
+ROLLBACK_STARTED=false
+ROLLBACK_RESTORED=null
+MUTATION_OUTCOME=NO_MUTATION
+SANITIZED=yes
+SECRETS_INCLUDED=no
+PRIVATE_ADDRESSES_INCLUDED=no
+RAW_EVIDENCE_SHA256=9e89dbbdda971cb025da7a2825dc7807a1731b40526e40a363991e86e41c4510
+SANITIZED_OUTPUT_SHA256=9e89dbbdda971cb025da7a2825dc7807a1731b40526e40a363991e86e41c4510
+OUTPUT_BEGIN
+NEWFI232_BEGIN=true
+MODE=read-only
+CHANGES_MADE=false
+MUTATION_OUTCOME=NO_MUTATION
+AUTHORITY_OK=true
+PRECHECK_OK=true
+TUNNEL_ATTEMPTS=1
+TUNNEL_STARTED=true
+TUNNEL_PAGEANT_DIAGNOSTIC=true
+TUNNEL_ACCESS_DIAGNOSTIC=true
+LOCAL_FORWARD_OPEN=true
+TLS_AUTHENTICATED=true
+TUNNEL_TELEGRAM_HTTP=302
+TLS_ERROR_CLASS=NONE
+LIVE_LOCAL_FORWARD_PROVEN=true
+PHASE=COMPLETED
+ERROR_CODE=NONE
+DECISION=PASS_FWD232_USA_LIVE_FORWARD_PROVEN
+NEXT_GATE=BUILD_TELEGRAM_USA_PRIMARY_APP_SCOPED_EGRESS
+CLOUD_WRITES=0
+VPS_CONFIG_MUTATIONS=0
+MESSENGERS214_CLOSED=false
+MAJOR_STAGES_REMAINING=8
+NEWFI232_END=true
+
+OUTPUT_END
+CHAT_OUTPUT_END
diff --git a/runtime/latest.json b/runtime/latest.json
index 24b9657b..f74ac140 100644
--- a/runtime/latest.json
+++ b/runtime/latest.json
@@ -1,19 +1,19 @@
 {
   "schema_version": 1,
   "channel": "homelab-runtime",
-  "command_id": "NEWFI-260920-NEWFDOM-MESSENGERS214-FWD231",
+  "command_id": "NEWFI-260920-NEWFDOM-MESSENGERS214-FWD232",
   "status": "OK",
   "rc": 0,
   "host": "pve01",
   "mode": "read-only",
-  "component": "newfi-newfdom-messengers214-usa-tunnel-dotnet-tls-proof-readonly",
-  "started_at_utc": "2026-09-20T05:21:30Z",
-  "finished_at_utc": "2026-09-20T05:21:30Z",
+  "component": "newfi-newfdom-messengers214-usa-tunnel-locksafe-tls-proof-readonly",
+  "started_at_utc": "2026-09-20T05:25:12Z",
+  "finished_at_utc": "2026-09-20T05:25:12Z",
   "reference_register_checked": true,
   "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66",
   "error_register_checked": true,
   "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0",
-  "command_sha256": "f92a07e66001d9254540281acca6910239d37ba30a7d8d692bc5fa72234b2867",
+  "command_sha256": "395ef4b78b8c89216e24be42fbfb4dde94842013f6ec9a15143bc46f2e26bd25",
   "duplicate_failed_command_blocked": false,
   "block_reason": null,
   "execution_started": true,
@@ -30,9 +30,9 @@
   "secrets_included": false,
   "private_addresses_included": false,
   "raw_evidence_retained_locally": true,
-  "raw_evidence_sha256": "1006b11ecd51aa6eabfb3c7c6722967cdd9a701f9e6f485c0832979c4bb04a9e",
-  "sanitized_output_sha256": "1006b11ecd51aa6eabfb3c7c6722967cdd9a701f9e6f485c0832979c4bb04a9e",
+  "raw_evidence_sha256": "9e89dbbdda971cb025da7a2825dc7807a1731b40526e40a363991e86e41c4510",
+  "sanitized_output_sha256": "9e89dbbdda971cb025da7a2825dc7807a1731b40526e40a363991e86e41c4510",
   "output_truncated_in_json": false,
   "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
-  "output": "NEWFI231_BEGIN=true\nMODE=read-only\nCHANGES_MADE=false\nMUTATION_OUTCOME=NO_MUTATION\nAUTHORITY_OK=true\nPRECHECK_OK=true\nTUNNEL_ATTEMPTS=1\nTUNNEL_STARTED=true\nTUNNEL_PAGEANT_PROVEN=false\nTUNNEL_ACCESS_GRANTED=false\nLOCAL_FORWARD_OPEN=true\nTLS_AUTHENTICATED=false\nTUNNEL_TELEGRAM_HTTP=000\nTLS_ERROR_CLASS=NONE\nLIVE_LOCAL_FORWARD_PROVEN=false\nPHASE=ERROR\nERROR_CODE=LOCAL_ERROR\nDECISION=HOLD_FWD231_FORWARD_OPEN_TLS_FAILED\nNEXT_GATE=RECONCILE_DOTNET_TLS_FAILURE_CLASS\nCLOUD_WRITES=0\nVPS_CONFIG_MUTATIONS=0\nMESSENGERS214_CLOSED=false\nMAJOR_STAGES_REMAINING=8\nNEWFI231_END=true\n"
+  "output": "NEWFI232_BEGIN=true\nMODE=read-only\nCHANGES_MADE=false\nMUTATION_OUTCOME=NO_MUTATION\nAUTHORITY_OK=true\nPRECHECK_OK=true\nTUNNEL_ATTEMPTS=1\nTUNNEL_STARTED=true\nTUNNEL_PAGEANT_DIAGNOSTIC=true\nTUNNEL_ACCESS_DIAGNOSTIC=true\nLOCAL_FORWARD_OPEN=true\nTLS_AUTHENTICATED=true\nTUNNEL_TELEGRAM_HTTP=302\nTLS_ERROR_CLASS=NONE\nLIVE_LOCAL_FORWARD_PROVEN=true\nPHASE=COMPLETED\nERROR_CODE=NONE\nDECISION=PASS_FWD232_USA_LIVE_FORWARD_PROVEN\nNEXT_GATE=BUILD_TELEGRAM_USA_PRIMARY_APP_SCOPED_EGRESS\nCLOUD_WRITES=0\nVPS_CONFIG_MUTATIONS=0\nMESSENGERS214_CLOSED=false\nMAJOR_STAGES_REMAINING=8\nNEWFI232_END=true\n"
 }
diff --git a/runtime/latest.txt b/runtime/latest.txt
index 3f77b59a..d04995fd 100644
--- a/runtime/latest.txt
+++ b/runtime/latest.txt
@@ -1,15 +1,15 @@
 CHAT_OUTPUT_BEGIN
-COMMAND_ID=NEWFI-260920-NEWFDOM-MESSENGERS214-FWD231
+COMMAND_ID=NEWFI-260920-NEWFDOM-MESSENGERS214-FWD232
 STATUS=OK
 RC=0
 HOST=pve01
 MODE=read-only
-COMPONENT=newfi-newfdom-messengers214-usa-tunnel-dotnet-tls-proof-readonly
+COMPONENT=newfi-newfdom-messengers214-usa-tunnel-locksafe-tls-proof-readonly
 REFERENCE_REGISTER_CHECK=OK
 REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
 ERROR_REGISTER_CHECK=OK
 ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
-COMMAND_SHA256=f92a07e66001d9254540281acca6910239d37ba30a7d8d692bc5fa72234b2867
+COMMAND_SHA256=395ef4b78b8c89216e24be42fbfb4dde94842013f6ec9a15143bc46f2e26bd25
 DUPLICATE_FAILED_COMMAND_BLOCKED=false
 EXECUTION_STARTED=true
 CHANGE_DECLARED=false
@@ -24,10 +24,10 @@ MUTATION_OUTCOME=NO_MUTATION
 SANITIZED=yes
 SECRETS_INCLUDED=no
 PRIVATE_ADDRESSES_INCLUDED=no
-RAW_EVIDENCE_SHA256=1006b11ecd51aa6eabfb3c7c6722967cdd9a701f9e6f485c0832979c4bb04a9e
-SANITIZED_OUTPUT_SHA256=1006b11ecd51aa6eabfb3c7c6722967cdd9a701f9e6f485c0832979c4bb04a9e
+RAW_EVIDENCE_SHA256=9e89dbbdda971cb025da7a2825dc7807a1731b40526e40a363991e86e41c4510
+SANITIZED_OUTPUT_SHA256=9e89dbbdda971cb025da7a2825dc7807a1731b40526e40a363991e86e41c4510
 OUTPUT_BEGIN
-NEWFI231_BEGIN=true
+NEWFI232_BEGIN=true
 MODE=read-only
 CHANGES_MADE=false
 MUTATION_OUTCOME=NO_MUTATION
@@ -35,22 +35,22 @@ AUTHORITY_OK=true
 PRECHECK_OK=true
 TUNNEL_ATTEMPTS=1
 TUNNEL_STARTED=true
-TUNNEL_PAGEANT_PROVEN=false
-TUNNEL_ACCESS_GRANTED=false
+TUNNEL_PAGEANT_DIAGNOSTIC=true
+TUNNEL_ACCESS_DIAGNOSTIC=true
 LOCAL_FORWARD_OPEN=true
-TLS_AUTHENTICATED=false
-TUNNEL_TELEGRAM_HTTP=000
+TLS_AUTHENTICATED=true
+TUNNEL_TELEGRAM_HTTP=302
 TLS_ERROR_CLASS=NONE
-LIVE_LOCAL_FORWARD_PROVEN=false
-PHASE=ERROR
-ERROR_CODE=LOCAL_ERROR
-DECISION=HOLD_FWD231_FORWARD_OPEN_TLS_FAILED
-NEXT_GATE=RECONCILE_DOTNET_TLS_FAILURE_CLASS
+LIVE_LOCAL_FORWARD_PROVEN=true
+PHASE=COMPLETED
+ERROR_CODE=NONE
+DECISION=PASS_FWD232_USA_LIVE_FORWARD_PROVEN
+NEXT_GATE=BUILD_TELEGRAM_USA_PRIMARY_APP_SCOPED_EGRESS
 CLOUD_WRITES=0
 VPS_CONFIG_MUTATIONS=0
 MESSENGERS214_CLOSED=false
 MAJOR_STAGES_REMAINING=8
-NEWFI231_END=true
+NEWFI232_END=true
 
 OUTPUT_END
 CHAT_OUTPUT_END