diff --git a/runtime/history/SUPPORT-260918-INFRA-VPS-SSH-AUTH-ROUTES-RCA-READONLY-517R2R1.json b/runtime/history/SUPPORT-260918-INFRA-VPS-SSH-AUTH-ROUTES-RCA-READONLY-517R2R1.json
new file mode 100644
index 00000000..5080393f
--- /dev/null
+++ b/runtime/history/SUPPORT-260918-INFRA-VPS-SSH-AUTH-ROUTES-RCA-READONLY-517R2R1.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": 1,
+  "channel": "homelab-runtime",
+  "command_id": "SUPPORT-260918-INFRA-VPS-SSH-AUTH-ROUTES-RCA-READONLY-517R2R1",
+  "status": "OK",
+  "rc": 0,
+  "host": "pve01",
+  "mode": "read-only",
+  "component": "infra-vps-ssh-auth-routes-rca-readonly",
+  "started_at_utc": "2026-09-18T10:34:03Z",
+  "finished_at_utc": "2026-09-18T10:34:05Z",
+  "reference_register_checked": true,
+  "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66",
+  "error_register_checked": true,
+  "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0",
+  "command_sha256": "6d3929a38769781a3664917da603f2d2fa8d771d331e1851092ceea5d7d1a567",
+  "duplicate_failed_command_blocked": false,
+  "block_reason": null,
+  "execution_started": true,
+  "change_declared": false,
+  "result_contract_valid": true,
+  "result_contract_status": null,
+  "result_contract_error": null,
+  "command_rc": 0,
+  "changes_made": false,
+  "rollback_started": false,
+  "rollback_restored": null,
+  "mutation_outcome": "NO_MUTATION",
+  "sanitized": true,
+  "secrets_included": false,
+  "private_addresses_included": false,
+  "raw_evidence_retained_locally": true,
+  "raw_evidence_sha256": "d4c5803db9a3ba2d9c88fe2e72ff386d116915130a297525a2632b6e68289626",
+  "sanitized_output_sha256": "eeea2690fa056a6b3a8752fd6a312af873e9a416cc32b9cb07bdbd41ad6a9bd2",
+  "output_truncated_in_json": false,
+  "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
+  "output": "VPS517R2R1_SAFE_REPORT={\"agent\":{\"keys\":[],\"rc\":2,\"ssh_auth_sock_present\":false,\"stderr_bytes\":58,\"stderr_sha256\":\"84b8eb561e5d34d856acb140340cdbe4f49d4a59bb36aea28d920e7e1d806a29\"},\"changes_made\":false,\"command_id\":\"SUPPORT-260918-INFRA-VPS-SSH-AUTH-ROUTES-RCA-READONLY-517R2R1\",\"decision\":\"PASS_SSH_AUTH_ROUTE_EVIDENCE_CAPTURED\",\"key_inventory\":[{\"bytes\":4788,\"mode\":\"0o600\",\"name\":\"authorized_keys\"},{\"bytes\":4788,\"derive_public_rc\":255,\"derive_public_stderr_bytes\":100,\"derive_public_stderr_sha256\":\"dba521506253f9f23dc439713e0de86f7f5efea288f4b58cbc4c9711716cae50\",\"mode\":\"0o600\",\"name\":\"authorized_keys.bak.remove-old-moba-rsa.20260617T160022Z\"},{\"bytes\":117,\"mode\":\"0o640\",\"name\":\"config\"},{\"bytes\":399,\"derive_public_rc\":0,\"derived_public_fp\":\"SHA256:f9h3a7BfK1+nUsw3aOjAUveexl+6bCY9Ae/64byIreg\",\"mode\":\"0o600\",\"name\":\"homelab-gitea-vm170\"},{\"bytes\":92,\"mode\":\"0o644\",\"name\":\"homelab-gitea-vm170.pub\",\"public_fp\":\"SHA256:f9h3a7BfK1+nUsw3aOjAUveexl+6bCY9Ae/64byIreg\"},{\"bytes\":432,\"derive_public_rc\":0,\"derived_public_fp\":\"SHA256:WEmWRIoYTy/wMABxSr1bwLTZWSJbfly3exggWmu5eT4\",\"mode\":\"0o600\",\"name\":\"homelab-ops-builder-status-ed25519\"},{\"bytes\":114,\"mode\":\"0o644\",\"name\":\"homelab-ops-builder-status-ed25519.pub\",\"public_fp\":\"SHA256:WEmWRIoYTy/wMABxSr1bwLTZWSJbfly3exggWmu5eT4\"},{\"bytes\":411,\"derive_public_rc\":0,\"derived_public_fp\":\"SHA256:s0CusF0IHQGVJ02oi7ejWkGhH9NkhTWonn3441toe5M\",\"mode\":\"0o600\",\"name\":\"id_ed25519\"},{\"bytes\":100,\"mode\":\"0o644\",\"name\":\"id_ed25519.pub\",\"public_fp\":\"SHA256:s0CusF0IHQGVJ02oi7ejWkGhH9NkhTWonn3441toe5M\"},{\"bytes\":432,\"derive_public_rc\":0,\"derived_public_fp\":\"SHA256:wipXiBB3cpAwyWap9LcB185WjEEmDxtRJsI/UuMVAp0\",\"mode\":\"0o600\",\"name\":\"id_ed25519_netbird_operator\"},{\"bytes\":115,\"mode\":\"0o644\",\"name\":\"id_ed25519_netbird_operator.pub\",\"public_fp\":\"SHA256:wipXiBB3cpAwyWap9LcB185WjEEmDxtRJsI/UuMVAp0\"},{\"bytes\":3369,\"derive_public_rc\":0,\"derived_public_fp\":\"SHA256:bSyxARbKzSylpKwBNth7zTODkgTExZdhFwrYEH9zRO4\",\"mode\":\"0o600\",\"name\":\"id_rsa\"},{\"bytes\":736,\"mode\":\"0o644\",\"name\":\"id_rsa.pub\",\"public_fp\":\"SHA256:bSyxARbKzSylpKwBNth7zTODkgTExZdhFwrYEH9zRO4\"},{\"bytes\":15381,\"mode\":\"0o600\",\"name\":\"known_hosts\"},{\"bytes\":5327,\"mode\":\"0o600\",\"name\":\"known_hosts.bak.20260617T094043\"},{\"bytes\":5032,\"mode\":\"0o600\",\"name\":\"known_hosts.before-edge-refresh-20260615T194432Z\"},{\"bytes\":14837,\"mode\":\"0o600\",\"name\":\"known_hosts.before-vm150-20260816T040756Z\"},{\"bytes\":14766,\"mode\":\"0o600\",\"name\":\"known_hosts.before-vm150-20260816T042857\"},{\"bytes\":14778,\"mode\":\"0o600\",\"name\":\"known_hosts.before-vm150-20260816T042946\"},{\"bytes\":16158,\"mode\":\"0o600\",\"name\":\"known_hosts.old\"},{\"bytes\":16158,\"mode\":\"0o600\",\"name\":\"known_hosts.pre-vm160-20260903T200235Z\"},{\"bytes\":1283,\"mode\":\"0o600\",\"name\":\"known_hosts_netbird_vps\"},{\"bytes\":419,\"derive_public_rc\":0,\"derived_public_fp\":\"SHA256:ok4AGffG4xlVH2I6kN4YN0MRlMtJ4Z8XeSY8/ug+V+s\",\"mode\":\"0o600\",\"name\":\"router-backup-ed25519\"},{\"bytes\":110,\"mode\":\"0o644\",\"name\":\"router-backup-ed25519.pub\",\"public_fp\":\"SHA256:ok4AGffG4xlVH2I6kN4YN0MRlMtJ4Z8XeSY8/ug+V+s\"},{\"bytes\":419,\"derive_public_rc\":0,\"derived_public_fp\":\"SHA256:C3xsDPfds6jMpM90Bj8YIvXHbY6VJcm7FXcmY0sNE6o\",\"mode\":\"0o600\",\"name\":\"snikket-recovery-ed25519\"},{\"bytes\":104,\"mode\":\"0o644\",\"name\":\"snikket-recovery-ed25519.pub\",\"public_fp\":\"SHA256:C3xsDPfds6jMpM90Bj8YIvXHbY6VJcm7FXcmY0sNE6o\"}],\"known_host_archives\":[{\"nb2\":[{\"fps\":[\"SHA256:CcvO+J97741AHilFAN5Vd7tAzDy+i3B1z7mnBCaIh4g\",\"SHA256:WvVWcFZJ76J7jgHCQiDacIh40+ChvyAN0+OgrWgQ99k\",\"SHA256:Z9J24PJXaPzbotO7Kiw7VE/cngASmyr1OAhYaJpHFRw\"],\"hits\":3,\"query\":\"46.16.34.129\"}],\"path\":\"[SENSITIVE_PATH] Connecting to relay.pvepro.ru [[RELAY_IP]] port 22.\",\"debug1: Connection established.\",\"debug1: identity file [SENSITIVE_PATH] type 0\",\"debug1: identity file [SENSITIVE_PATH] type -1\",\"debug1: identity file [SENSITIVE_PATH] type -1\",\"debug1: identity file [SENSITIVE_PATH] type -1\",\"debug1: identity file [SENSITIVE_PATH] type -1\",\"debug1: identity file [SENSITIVE_PATH] type -1\",\"debug1: identity file [SENSITIVE_PATH] type 3\",\"debug1: identity file [SENSITIVE_PATH] type -1\",\"debug1: identity file [SENSITIVE_PATH] type -1\",\"debug1: identity file [SENSITIVE_PATH] type -1\",\"debug1: identity file [SENSITIVE_PATH] type -1\",\"debug1: identity file [SENSITIVE_PATH] type -1\",\"debug2: host key algorithms: ssh-ed25519-cert-v01@openssh.com,ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,sk-ssh-ed25519-cert-v01@openssh.com,sk-ecdsa-sha2-nistp256-cert-v01@openssh.com,rsa-sha2-512-cert-v01@openssh.com,rsa-sha2-256-cert-v01@openssh.com,ssh-ed25519,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,sk-ssh-ed25519@openssh.com,sk-ecdsa-sha2-nistp256@openssh.com,rsa-sha2-512,rsa-sha2-256\",\"debug2: host key algorithms: rsa-sha2-512,rsa-sha2-256,ecdsa-sha2-nistp256,ssh-ed25519\",\"debug1: kex: host key algorithm: ssh-ed25519\",\"debug1: Server host key: ssh-ed25519 SHA256:DXJGwunC5tEVvnC3nRxyayTN8FXmyJcVgf+Oa6udQsY\",\"debug1: Host 'relay.pvepro.ru' is known and matches the ED25519 host key.\",\"debug2: host key algorithms: ssh-ed25519-cert-v01@openssh.com,ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,sk-ssh-ed25519-cert-v01@openssh.com,sk-ecdsa-sha2-nistp256-cert-v01@openssh.com,rsa-sha2-512-cert-v01@openssh.com,rsa-sha2-256-cert-v01@openssh.com,ssh-ed25519,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,sk-ssh-ed25519@openssh.com,sk-ecdsa-sha2-nistp256@openssh.com,rsa-sha2-512,rsa-sha2-256\",\"debug1: Authentications that can continue: publickey\",\"debug1: Offering public key: [SENSITIVE_PATH] RSA SHA256:bSyxARbKzSylpKwBNth7zTODkgTExZdhFwrYEH9zRO4\",\"debug1: Authentications that can continue: publickey\",\"debug3: no such identity: [SENSITIVE_PATH] No such file or directory\",\"debug3: no such identity: [SENSITIVE_PATH] No such file or directory\",\"debug1: Offering public key: [SENSITIVE_PATH] ED25519 SHA256:s0CusF0IHQGVJ02oi7ejWkGhH9NkhTWonn3441toe5M\",\"debug1: Authentications that can continue: publickey\",\"debug3: no such identity: [SENSITIVE_PATH] No such file or directory\",\"debug3: no such identity: [SENSITIVE_PATH] No such file or directory\",\"root@relay.pvepro.ru: Permission denied (publickey).\"],\"stderr_sha256\":\"7dd610853ce49195c76e2fa140f6693cb78d131a69b71ef19a0da59ea129f674\"},{\"host\":\"relay.netbird.selfhosted\",\"rc\":255,\"stderr_bytes\":13787,\"stderr_lines\":[\"debug1: Connecting to relay.netbird.selfhosted [[PRIVATE_IPV6]] port 22.\",\"debug1: Connection established.\",\"debug1: identity file [SENSITIVE_PATH] type 0\",\"debug1: identity file [SENSITIVE_PATH] type -1\",\"debug1: identity file [SENSITIVE_PATH] type -1\",\"debug1: identity file [SENSITIVE_PATH] type -1\",\"debug1: identity file [SENSITIVE_PATH] type -1\",\"debug1: identity file [SENSITIVE_PATH] type -1\",\"debug1: identity file [SENSITIVE_PATH] type 3\",\"debug1: identity file [SENSITIVE_PATH] type -1\",\"debug1: identity file [SENSITIVE_PATH] type -1\",\"debug1: identity file [SENSITIVE_PATH] type -1\",\"debug1: identity file [SENSITIVE_PATH] type -1\",\"debug1: identity file [SENSITIVE_PATH] type -1\",\"debug2: host key algorithms: ssh-ed25519-cert-v01@openssh.com,ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,sk-ssh-ed25519-cert-v01@openssh.com,sk-ecdsa-sha2-nistp256-cert-v01@openssh.com,rsa-sha2-512-cert-v01@openssh.com,rsa-sha2-256-cert-v01@openssh.com,ssh-ed25519,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,sk-ssh-ed25519@openssh.com,sk-ecdsa-sha2-nistp256@openssh.com,rsa-sha2-512,rsa-sha2-256\",\"debug2: host key algorithms: rsa-sha2-512,rsa-sha2-256,ecdsa-sha2-nistp256,ssh-ed25519\",\"debug1: kex: host key algorithm: ssh-ed25519\",\"debug1: Server host key: ssh-ed25519 SHA256:DXJGwunC5tEVvnC3nRxyayTN8FXmyJcVgf+Oa6udQsY\",\"debug1: Host 'relay.netbird.selfhosted' is known and matches the ED25519 host key.\",\"debug2: host key algorithms: ssh-ed25519-cert-v01@openssh.com,ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,sk-ssh-ed25519-cert-v01@openssh.com,sk-ecdsa-sha2-nistp256-cert-v01@openssh.com,rsa-sha2-512-cert-v01@openssh.com,rsa-sha2-256-cert-v01@openssh.com,ssh-ed25519,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,sk-ssh-ed25519@openssh.com,sk-ecdsa-sha2-nistp256@openssh.com,rsa-sha2-512,rsa-sha2-256\",\"debug1: Authentications that can continue: publickey\",\"debug1: Offering public key: [SENSITIVE_PATH] RSA SHA256:bSyxARbKzSylpKwBNth7zTODkgTExZdhFwrYEH9zRO4\",\"debug1: Authentications that can continue: publickey\",\"debug3: no such identity: [SENSITIVE_PATH] No such file or directory\",\"debug3: no such identity: [SENSITIVE_PATH] No such file or directory\",\"debug1: Offering public key: [SENSITIVE_PATH] ED25519 SHA256:s0CusF0IHQGVJ02oi7ejWkGhH9NkhTWonn3441toe5M\",\"debug1: Authentications that can continue: publickey\",\"debug3: no such identity: [SENSITIVE_PATH] No such file or directory\",\"debug3: no such identity: [SENSITIVE_PATH] No such file or directory\",\"root@relay.netbird.selfhosted: Permission denied (publickey).\"],\"stderr_sha256\":\"66a781b909f930a0f27e1b66500e57d5b96b21ae031ade35a06286af93d81cd0\"}],\"remote_login_attempts\":2,\"schema_version\":1,\"source_hits\":[],\"ssh_config\":[],\"targets\":{\"edge01\":{\"ip_hash\":\"6d6149f42864ce03daf22828cf236bf64d5d9a004040746ddbb051d71c9fcbc5\",\"known_current\":[{\"file\":\"[SENSITIVE_PATH]\nVPS517R2R1_DECISION=PASS_SSH_AUTH_ROUTE_EVIDENCE_CAPTURED\nVPS517R2R1_NEXT_GATE=BUILD_EXACT_AUTH_INVENTORY_OR_REQUEST_PROVIDER_HOSTKEY_CONFIRMATION\nHOMELAB_RESULT_CONTRACT={\"version\":1,\"command_id\":\"SUPPORT-260918-INFRA-VPS-SSH-AUTH-ROUTES-RCA-READONLY-517R2R1\",\"status\":\"OK\",\"changes_made\":false,\"rollback_started\":false,\"rollback_restored\":null}\n"
+}
diff --git a/runtime/history/SUPPORT-260918-INFRA-VPS-SSH-AUTH-ROUTES-RCA-READONLY-517R2R1.txt b/runtime/history/SUPPORT-260918-INFRA-VPS-SSH-AUTH-ROUTES-RCA-READONLY-517R2R1.txt
new file mode 100644
index 00000000..bccd4e48
--- /dev/null
+++ b/runtime/history/SUPPORT-260918-INFRA-VPS-SSH-AUTH-ROUTES-RCA-READONLY-517R2R1.txt
@@ -0,0 +1,36 @@
+CHAT_OUTPUT_BEGIN
+COMMAND_ID=SUPPORT-260918-INFRA-VPS-SSH-AUTH-ROUTES-RCA-READONLY-517R2R1
+STATUS=OK
+RC=0
+HOST=pve01
+MODE=read-only
+COMPONENT=infra-vps-ssh-auth-routes-rca-readonly
+REFERENCE_REGISTER_CHECK=OK
+REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
+ERROR_REGISTER_CHECK=OK
+ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
+COMMAND_SHA256=6d3929a38769781a3664917da603f2d2fa8d771d331e1851092ceea5d7d1a567
+DUPLICATE_FAILED_COMMAND_BLOCKED=false
+EXECUTION_STARTED=true
+CHANGE_DECLARED=false
+RESULT_CONTRACT_VALID=true
+RESULT_CONTRACT_STATUS=NOT_APPLICABLE
+RESULT_CONTRACT_ERROR=NONE
+COMMAND_RC=0
+CHANGES_MADE=false
+ROLLBACK_STARTED=false
+ROLLBACK_RESTORED=null
+MUTATION_OUTCOME=NO_MUTATION
+SANITIZED=yes
+SECRETS_INCLUDED=no
+PRIVATE_ADDRESSES_INCLUDED=no
+RAW_EVIDENCE_SHA256=d4c5803db9a3ba2d9c88fe2e72ff386d116915130a297525a2632b6e68289626
+SANITIZED_OUTPUT_SHA256=eeea2690fa056a6b3a8752fd6a312af873e9a416cc32b9cb07bdbd41ad6a9bd2
+OUTPUT_BEGIN
+VPS517R2R1_SAFE_REPORT={"agent":{"keys":[],"rc":2,"ssh_auth_sock_present":false,"stderr_bytes":58,"stderr_sha256":"84b8eb561e5d34d856acb140340cdbe4f49d4a59bb36aea28d920e7e1d806a29"},"changes_made":false,"command_id":"SUPPORT-260918-INFRA-VPS-SSH-AUTH-ROUTES-RCA-READONLY-517R2R1","decision":"PASS_SSH_AUTH_ROUTE_EVIDENCE_CAPTURED","key_inventory":[{"bytes":4788,"mode":"0o600","name":"authorized_keys"},{"bytes":4788,"derive_public_rc":255,"derive_public_stderr_bytes":100,"derive_public_stderr_sha256":"dba521506253f9f23dc439713e0de86f7f5efea288f4b58cbc4c9711716cae50","mode":"0o600","name":"authorized_keys.bak.remove-old-moba-rsa.20260617T160022Z"},{"bytes":117,"mode":"0o640","name":"config"},{"bytes":399,"derive_public_rc":0,"derived_public_fp":"SHA256:f9h3a7BfK1+nUsw3aOjAUveexl+6bCY9Ae/64byIreg","mode":"0o600","name":"homelab-gitea-vm170"},{"bytes":92,"mode":"0o644","name":"homelab-gitea-vm170.pub","public_fp":"SHA256:f9h3a7BfK1+nUsw3aOjAUveexl+6bCY9Ae/64byIreg"},{"bytes":432,"derive_public_rc":0,"derived_public_fp":"SHA256:WEmWRIoYTy/wMABxSr1bwLTZWSJbfly3exggWmu5eT4","mode":"0o600","name":"homelab-ops-builder-status-ed25519"},{"bytes":114,"mode":"0o644","name":"homelab-ops-builder-status-ed25519.pub","public_fp":"SHA256:WEmWRIoYTy/wMABxSr1bwLTZWSJbfly3exggWmu5eT4"},{"bytes":411,"derive_public_rc":0,"derived_public_fp":"SHA256:s0CusF0IHQGVJ02oi7ejWkGhH9NkhTWonn3441toe5M","mode":"0o600","name":"id_ed25519"},{"bytes":100,"mode":"0o644","name":"id_ed25519.pub","public_fp":"SHA256:s0CusF0IHQGVJ02oi7ejWkGhH9NkhTWonn3441toe5M"},{"bytes":432,"derive_public_rc":0,"derived_public_fp":"SHA256:wipXiBB3cpAwyWap9LcB185WjEEmDxtRJsI/UuMVAp0","mode":"0o600","name":"id_ed25519_netbird_operator"},{"bytes":115,"mode":"0o644","name":"id_ed25519_netbird_operator.pub","public_fp":"SHA256:wipXiBB3cpAwyWap9LcB185WjEEmDxtRJsI/UuMVAp0"},{"bytes":3369,"derive_public_rc":0,"derived_public_fp":"SHA256:bSyxARbKzSylpKwBNth7zTODkgTExZdhFwrYEH9zRO4","mode":"0o600","name":"id_rsa"},{"bytes":736,"mode":"0o644","name":"id_rsa.pub","public_fp":"SHA256:bSyxARbKzSylpKwBNth7zTODkgTExZdhFwrYEH9zRO4"},{"bytes":15381,"mode":"0o600","name":"known_hosts"},{"bytes":5327,"mode":"0o600","name":"known_hosts.bak.20260617T094043"},{"bytes":5032,"mode":"0o600","name":"known_hosts.before-edge-refresh-20260615T194432Z"},{"bytes":14837,"mode":"0o600","name":"known_hosts.before-vm150-20260816T040756Z"},{"bytes":14766,"mode":"0o600","name":"known_hosts.before-vm150-20260816T042857"},{"bytes":14778,"mode":"0o600","name":"known_hosts.before-vm150-20260816T042946"},{"bytes":16158,"mode":"0o600","name":"known_hosts.old"},{"bytes":16158,"mode":"0o600","name":"known_hosts.pre-vm160-20260903T200235Z"},{"bytes":1283,"mode":"0o600","name":"known_hosts_netbird_vps"},{"bytes":419,"derive_public_rc":0,"derived_public_fp":"SHA256:ok4AGffG4xlVH2I6kN4YN0MRlMtJ4Z8XeSY8/ug+V+s","mode":"0o600","name":"router-backup-ed25519"},{"bytes":110,"mode":"0o644","name":"router-backup-ed25519.pub","public_fp":"SHA256:ok4AGffG4xlVH2I6kN4YN0MRlMtJ4Z8XeSY8/ug+V+s"},{"bytes":419,"derive_public_rc":0,"derived_public_fp":"SHA256:C3xsDPfds6jMpM90Bj8YIvXHbY6VJcm7FXcmY0sNE6o","mode":"0o600","name":"snikket-recovery-ed25519"},{"bytes":104,"mode":"0o644","name":"snikket-recovery-ed25519.pub","public_fp":"SHA256:C3xsDPfds6jMpM90Bj8YIvXHbY6VJcm7FXcmY0sNE6o"}],"known_host_archives":[{"nb2":[{"fps":["SHA256:CcvO+J97741AHilFAN5Vd7tAzDy+i3B1z7mnBCaIh4g","SHA256:WvVWcFZJ76J7jgHCQiDacIh40+ChvyAN0+OgrWgQ99k","SHA256:Z9J24PJXaPzbotO7Kiw7VE/cngASmyr1OAhYaJpHFRw"],"hits":3,"query":"46.16.34.129"}],"path":"[SENSITIVE_PATH] Connecting to relay.pvepro.ru [[RELAY_IP]] port 22.","debug1: Connection established.","debug1: identity file [SENSITIVE_PATH] type 0","debug1: identity file [SENSITIVE_PATH] type -1","debug1: identity file [SENSITIVE_PATH] type -1","debug1: identity file [SENSITIVE_PATH] type -1","debug1: identity file [SENSITIVE_PATH] type -1","debug1: identity file [SENSITIVE_PATH] type -1","debug1: identity file [SENSITIVE_PATH] type 3","debug1: identity file [SENSITIVE_PATH] type -1","debug1: identity file [SENSITIVE_PATH] type -1","debug1: identity file [SENSITIVE_PATH] type -1","debug1: identity file [SENSITIVE_PATH] type -1","debug1: identity file [SENSITIVE_PATH] type -1","debug2: host key algorithms: ssh-ed25519-cert-v01@openssh.com,ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,sk-ssh-ed25519-cert-v01@openssh.com,sk-ecdsa-sha2-nistp256-cert-v01@openssh.com,rsa-sha2-512-cert-v01@openssh.com,rsa-sha2-256-cert-v01@openssh.com,ssh-ed25519,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,sk-ssh-ed25519@openssh.com,sk-ecdsa-sha2-nistp256@openssh.com,rsa-sha2-512,rsa-sha2-256","debug2: host key algorithms: rsa-sha2-512,rsa-sha2-256,ecdsa-sha2-nistp256,ssh-ed25519","debug1: kex: host key algorithm: ssh-ed25519","debug1: Server host key: ssh-ed25519 SHA256:DXJGwunC5tEVvnC3nRxyayTN8FXmyJcVgf+Oa6udQsY","debug1: Host 'relay.pvepro.ru' is known and matches the ED25519 host key.","debug2: host key algorithms: ssh-ed25519-cert-v01@openssh.com,ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,sk-ssh-ed25519-cert-v01@openssh.com,sk-ecdsa-sha2-nistp256-cert-v01@openssh.com,rsa-sha2-512-cert-v01@openssh.com,rsa-sha2-256-cert-v01@openssh.com,ssh-ed25519,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,sk-ssh-ed25519@openssh.com,sk-ecdsa-sha2-nistp256@openssh.com,rsa-sha2-512,rsa-sha2-256","debug1: Authentications that can continue: publickey","debug1: Offering public key: [SENSITIVE_PATH] RSA SHA256:bSyxARbKzSylpKwBNth7zTODkgTExZdhFwrYEH9zRO4","debug1: Authentications that can continue: publickey","debug3: no such identity: [SENSITIVE_PATH] No such file or directory","debug3: no such identity: [SENSITIVE_PATH] No such file or directory","debug1: Offering public key: [SENSITIVE_PATH] ED25519 SHA256:s0CusF0IHQGVJ02oi7ejWkGhH9NkhTWonn3441toe5M","debug1: Authentications that can continue: publickey","debug3: no such identity: [SENSITIVE_PATH] No such file or directory","debug3: no such identity: [SENSITIVE_PATH] No such file or directory","root@relay.pvepro.ru: Permission denied (publickey)."],"stderr_sha256":"7dd610853ce49195c76e2fa140f6693cb78d131a69b71ef19a0da59ea129f674"},{"host":"relay.netbird.selfhosted","rc":255,"stderr_bytes":13787,"stderr_lines":["debug1: Connecting to relay.netbird.selfhosted [[PRIVATE_IPV6]] port 22.","debug1: Connection established.","debug1: identity file [SENSITIVE_PATH] type 0","debug1: identity file [SENSITIVE_PATH] type -1","debug1: identity file [SENSITIVE_PATH] type -1","debug1: identity file [SENSITIVE_PATH] type -1","debug1: identity file [SENSITIVE_PATH] type -1","debug1: identity file [SENSITIVE_PATH] type -1","debug1: identity file [SENSITIVE_PATH] type 3","debug1: identity file [SENSITIVE_PATH] type -1","debug1: identity file [SENSITIVE_PATH] type -1","debug1: identity file [SENSITIVE_PATH] type -1","debug1: identity file [SENSITIVE_PATH] type -1","debug1: identity file [SENSITIVE_PATH] type -1","debug2: host key algorithms: ssh-ed25519-cert-v01@openssh.com,ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,sk-ssh-ed25519-cert-v01@openssh.com,sk-ecdsa-sha2-nistp256-cert-v01@openssh.com,rsa-sha2-512-cert-v01@openssh.com,rsa-sha2-256-cert-v01@openssh.com,ssh-ed25519,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,sk-ssh-ed25519@openssh.com,sk-ecdsa-sha2-nistp256@openssh.com,rsa-sha2-512,rsa-sha2-256","debug2: host key algorithms: rsa-sha2-512,rsa-sha2-256,ecdsa-sha2-nistp256,ssh-ed25519","debug1: kex: host key algorithm: ssh-ed25519","debug1: Server host key: ssh-ed25519 SHA256:DXJGwunC5tEVvnC3nRxyayTN8FXmyJcVgf+Oa6udQsY","debug1: Host 'relay.netbird.selfhosted' is known and matches the ED25519 host key.","debug2: host key algorithms: ssh-ed25519-cert-v01@openssh.com,ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,sk-ssh-ed25519-cert-v01@openssh.com,sk-ecdsa-sha2-nistp256-cert-v01@openssh.com,rsa-sha2-512-cert-v01@openssh.com,rsa-sha2-256-cert-v01@openssh.com,ssh-ed25519,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,sk-ssh-ed25519@openssh.com,sk-ecdsa-sha2-nistp256@openssh.com,rsa-sha2-512,rsa-sha2-256","debug1: Authentications that can continue: publickey","debug1: Offering public key: [SENSITIVE_PATH] RSA SHA256:bSyxARbKzSylpKwBNth7zTODkgTExZdhFwrYEH9zRO4","debug1: Authentications that can continue: publickey","debug3: no such identity: [SENSITIVE_PATH] No such file or directory","debug3: no such identity: [SENSITIVE_PATH] No such file or directory","debug1: Offering public key: [SENSITIVE_PATH] ED25519 SHA256:s0CusF0IHQGVJ02oi7ejWkGhH9NkhTWonn3441toe5M","debug1: Authentications that can continue: publickey","debug3: no such identity: [SENSITIVE_PATH] No such file or directory","debug3: no such identity: [SENSITIVE_PATH] No such file or directory","root@relay.netbird.selfhosted: Permission denied (publickey)."],"stderr_sha256":"66a781b909f930a0f27e1b66500e57d5b96b21ae031ade35a06286af93d81cd0"}],"remote_login_attempts":2,"schema_version":1,"source_hits":[],"ssh_config":[],"targets":{"edge01":{"ip_hash":"6d6149f42864ce03daf22828cf236bf64d5d9a004040746ddbb051d71c9fcbc5","known_current":[{"file":"[SENSITIVE_PATH]
+VPS517R2R1_DECISION=PASS_SSH_AUTH_ROUTE_EVIDENCE_CAPTURED
+VPS517R2R1_NEXT_GATE=BUILD_EXACT_AUTH_INVENTORY_OR_REQUEST_PROVIDER_HOSTKEY_CONFIRMATION
+HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"SUPPORT-260918-INFRA-VPS-SSH-AUTH-ROUTES-RCA-READONLY-517R2R1","status":"OK","changes_made":false,"rollback_started":false,"rollback_restored":null}
+
+OUTPUT_END
+CHAT_OUTPUT_END
diff --git a/runtime/latest.json b/runtime/latest.json
index 4b3d9ce2..5080393f 100644
--- a/runtime/latest.json
+++ b/runtime/latest.json
@@ -1,19 +1,19 @@
 {
   "schema_version": 1,
   "channel": "homelab-runtime",
-  "command_id": "SUPPORT-260918-INFRA-VPS-3OF3-TRUST-CAPACITY-INVENTORY-READONLY-517R2",
+  "command_id": "SUPPORT-260918-INFRA-VPS-SSH-AUTH-ROUTES-RCA-READONLY-517R2R1",
   "status": "OK",
   "rc": 0,
   "host": "pve01",
   "mode": "read-only",
-  "component": "infra-vps-3of3-trust-capacity-inventory-readonly",
-  "started_at_utc": "2026-09-18T10:29:37Z",
-  "finished_at_utc": "2026-09-18T10:29:42Z",
+  "component": "infra-vps-ssh-auth-routes-rca-readonly",
+  "started_at_utc": "2026-09-18T10:34:03Z",
+  "finished_at_utc": "2026-09-18T10:34:05Z",
   "reference_register_checked": true,
   "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66",
   "error_register_checked": true,
   "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0",
-  "command_sha256": "09265927cdd6daa9f4592b8f99502df969880b8016103ada040f4c917ca53407",
+  "command_sha256": "6d3929a38769781a3664917da603f2d2fa8d771d331e1851092ceea5d7d1a567",
   "duplicate_failed_command_blocked": false,
   "block_reason": null,
   "execution_started": true,
@@ -30,9 +30,9 @@
   "secrets_included": false,
   "private_addresses_included": false,
   "raw_evidence_retained_locally": true,
-  "raw_evidence_sha256": "51f329f3e1ae86bff356ccb813a9eb926762534328b5de5c7d7601c788b1de99",
-  "sanitized_output_sha256": "51f329f3e1ae86bff356ccb813a9eb926762534328b5de5c7d7601c788b1de99",
+  "raw_evidence_sha256": "d4c5803db9a3ba2d9c88fe2e72ff386d116915130a297525a2632b6e68289626",
+  "sanitized_output_sha256": "eeea2690fa056a6b3a8752fd6a312af873e9a416cc32b9cb07bdbd41ad6a9bd2",
   "output_truncated_in_json": false,
   "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
-  "output": "VPS517R2_SAFE_REPORT={\"assets\":[{\"dns_ipv4_hashes\":[\"731a154cebb02c619b63295a7316e8484883299059110ff4200455a92aa396fd\"],\"effective_host_kind\":\"NAME\",\"effective_host_value\":\"relay.pvepro.ru\",\"existing_exact_trust\":[{\"fps\":[\"SHA256:DXJGwunC5tEVvnC3nRxyayTN8FXmyJcVgf+Oa6udQsY\"],\"hits\":1,\"name\":\"relay.pvepro.ru\"},{\"fps\":[],\"hits\":0,\"name\":\"85.121.4.192\"},{\"fps\":[\"SHA256:DXJGwunC5tEVvnC3nRxyayTN8FXmyJcVgf+Oa6udQsY\"],\"hits\":1,\"name\":\"relay.pvepro.ru\"}],\"expected_ip_hash\":\"731a154cebb02c619b63295a7316e8484883299059110ff4200455a92aa396fd\",\"id\":\"relay\",\"inventory\":null,\"inventory_ok\":false,\"keyscan\":{\"algorithms\":[\"ecdsa-sha2-nistp256\",\"ssh-ed25519\",\"ssh-rsa\"],\"fingerprints\":[\"SHA256:DXJGwunC5tEVvnC3nRxyayTN8FXmyJcVgf+Oa6udQsY\",\"SHA256:J/5Kp48TdNA/RdlTFGEX4nr71yM6uc5ub5Iahr4xAWE\",\"SHA256:nen1KYo/PIGw45nlakIZpa/SSo/llm3tokCz0hFzboE\"],\"ip_rc\":0,\"name_rc\":0,\"stderr_bytes\":0},\"matched_exact_fingerprints\":[\"SHA256:DXJGwunC5tEVvnC3nRxyayTN8FXmyJcVgf+Oa6udQsY\"],\"matched_existing_netbird_aliases\":[{\"alias\":\"relay.netbird.selfhosted\",\"matched_fingerprints\":[\"SHA256:DXJGwunC5tEVvnC3nRxyayTN8FXmyJcVgf+Oa6udQsY\"]}],\"plan_hint\":\"P2-US\",\"port\":22,\"ssh_g\":{\"hostname\":\"relay.pvepro.ru\",\"identityfiles\":[\"id_rsa\",\"id_ecdsa\",\"id_ecdsa_sk\",\"id_ed25519\",\"id_ed25519_sk\",\"id_xmss\"],\"ok\":true,\"port\":\"22\",\"user\":\"root\"},\"ssh_inventory_rc\":255,\"ssh_inventory_stderr_bytes\":54,\"ssh_inventory_stderr_sha256\":\"6c56db6b974557e921aa5be858c44f3f013d6603b94d121b434ec0ee6016f779\",\"target\":\"relay.pvepro.ru\",\"trust_approved\":true,\"trust_basis\":\"EXACT_EXISTING_HOSTKEY\",\"user_mapping_consistent\":true},{\"blocked_reason\":\"HOSTKEY_TRUST_NOT_PROVEN_OR_MAPPING_MISMATCH\",\"dns_ipv4_hashes\":[],\"effective_host_kind\":\"NAME\",\"effective_host_value\":\"nb2.pvepro.ru\",\"existing_exact_trust\":[{\"fps\":[],\"hits\":0,\"name\":\"nb2.pvepro.ru\"},{\"fps\":[\"SHA256:CcvO+J97741AHilFAN5Vd7tAzDy+i3B1z7mnBCaIh4g\",\"SHA256:WvVWcFZJ76J7jgHCQiDacIh40+ChvyAN0+OgrWgQ99k\",\"SHA256:Z9J24PJXaPzbotO7Kiw7VE/cngASmyr1OAhYaJpHFRw\"],\"hits\":3,\"name\":\"46.16.34.129\"},{\"fps\":[],\"hits\":0,\"name\":\"nb2.pvepro.ru\"}],\"expected_ip_hash\":\"1fc73136d6d7ddbd0e67ae9c4ddbe6798056fba742305ef773f1015df2712c16\",\"id\":\"nb2\",\"inventory\":null,\"inventory_ok\":false,\"keyscan\":{\"algorithms\":[\"ecdsa-sha2-nistp256\",\"ssh-ed25519\",\"ssh-rsa\"],\"fingerprints\":[\"SHA256:805Q9eh/fePUci42dfY58I6q0lFiiPHn0/M+mckypmE\",\"SHA256:Q0Cfx2w9lGpHnMNIQtkJnq8z4mX34UCbR3BTQNuwJ9o\",\"SHA256:lUdLDguDrTStHVyMWsZmysgRJKxzjtU72Q7KUrazNoY\"],\"ip_rc\":0,\"name_rc\":1,\"stderr_bytes\":162},\"matched_exact_fingerprints\":[],\"matched_existing_netbird_aliases\":[],\"plan_hint\":null,\"port\":22,\"ssh_g\":{\"hostname\":\"nb2.pvepro.ru\",\"identityfiles\":[\"id_rsa\",\"id_ecdsa\",\"id_ecdsa_sk\",\"id_ed25519\",\"id_ed25519_sk\",\"id_xmss\"],\"ok\":true,\"port\":\"22\",\"user\":\"root\"},\"target\":\"nb2.pvepro.ru\",\"trust_approved\":false,\"trust_basis\":\"NO_PREEXISTING_HOSTKEY_MATCH\",\"user_mapping_consistent\":false},{\"blocked_reason\":\"HOSTKEY_TRUST_NOT_PROVEN_OR_MAPPING_MISMATCH\",\"dns_ipv4_hashes\":[],\"effective_host_kind\":\"NAME\",\"effective_host_value\":\"edge01-admin-2026\",\"existing_exact_trust\":[{\"fps\":[],\"hits\":0,\"name\":\"edge01-admin-2026\"},{\"fps\":[],\"hits\":0,\"name\":\"185.225.35.6\"},{\"fps\":[],\"hits\":0,\"name\":\"edge01-admin-2026\"}],\"expected_ip_hash\":\"6d6149f42864ce03daf22828cf236bf64d5d9a004040746ddbb051d71c9fcbc5\",\"id\":\"edge01\",\"inventory\":null,\"inventory_ok\":false,\"keyscan\":{\"algorithms\":[\"ecdsa-sha2-nistp256\",\"ssh-ed25519\",\"ssh-rsa\"],\"fingerprints\":[\"SHA256:EQAivUSt0LFK9Ra0nE+2nmxxUQMiCN1FDt2rf8OC3tA\",\"SHA256:Ef+HsZb8lIXoadvYBXuGKIL3H7NyJMmf9EYCoJRoSv8\",\"SHA256:eqX0bApeLb6GImvXPuomOVxZ3hen0uK2Z9NSNQ+r5cQ\"],\"ip_rc\":0,\"name_rc\":null,\"stderr_bytes\":0},\"matched_exact_fingerprints\":[],\"matched_existing_netbird_aliases\":[],\"plan_hint\":null,\"port\":22,\"ssh_g\":{\"hostname\":\"edge01-admin-2026\",\"identityfiles\":[\"id_rsa\",\"id_ecdsa\",\"id_ecdsa_sk\",\"id_ed25519\",\"id_ed25519_sk\",\"id_xmss\"],\"ok\":true,\"port\":\"22\",\"user\":\"root\"},\"target\":\"edge01-admin-2026\",\"trust_approved\":false,\"trust_basis\":\"NO_PREEXISTING_HOSTKEY_MATCH\",\"user_mapping_consistent\":true}],\"blocked_count\":2,\"changes_made\":false,\"command_id\":\"SUPPORT-260918-INFRA-VPS-3OF3-TRUST-CAPACITY-INVENTORY-READONLY-517R2\",\"decision\":\"HOLD_NO_VPS_LIVE_INVENTORY_TRUST_APPROVED\",\"inventory_count\":0,\"mode\":\"read-only\",\"persistent_known_hosts_writes\":0,\"schema_version\":1}\nVPS517R2_DECISION=HOLD_NO_VPS_LIVE_INVENTORY_TRUST_APPROVED\nVPS517R2_NEXT_GATE=DEEP_COST_CONSOLIDATION_ANALYSIS_OR_HOSTKEY_CONFIRMATION_IF_BLOCKED\nHOMELAB_RESULT_CONTRACT={\"version\":1,\"command_id\":\"SUPPORT-260918-INFRA-VPS-3OF3-TRUST-CAPACITY-INVENTORY-READONLY-517R2\",\"status\":\"OK\",\"changes_made\":false,\"rollback_started\":false,\"rollback_restored\":null}\n"
+  "output": "VPS517R2R1_SAFE_REPORT={\"agent\":{\"keys\":[],\"rc\":2,\"ssh_auth_sock_present\":false,\"stderr_bytes\":58,\"stderr_sha256\":\"84b8eb561e5d34d856acb140340cdbe4f49d4a59bb36aea28d920e7e1d806a29\"},\"changes_made\":false,\"command_id\":\"SUPPORT-260918-INFRA-VPS-SSH-AUTH-ROUTES-RCA-READONLY-517R2R1\",\"decision\":\"PASS_SSH_AUTH_ROUTE_EVIDENCE_CAPTURED\",\"key_inventory\":[{\"bytes\":4788,\"mode\":\"0o600\",\"name\":\"authorized_keys\"},{\"bytes\":4788,\"derive_public_rc\":255,\"derive_public_stderr_bytes\":100,\"derive_public_stderr_sha256\":\"dba521506253f9f23dc439713e0de86f7f5efea288f4b58cbc4c9711716cae50\",\"mode\":\"0o600\",\"name\":\"authorized_keys.bak.remove-old-moba-rsa.20260617T160022Z\"},{\"bytes\":117,\"mode\":\"0o640\",\"name\":\"config\"},{\"bytes\":399,\"derive_public_rc\":0,\"derived_public_fp\":\"SHA256:f9h3a7BfK1+nUsw3aOjAUveexl+6bCY9Ae/64byIreg\",\"mode\":\"0o600\",\"name\":\"homelab-gitea-vm170\"},{\"bytes\":92,\"mode\":\"0o644\",\"name\":\"homelab-gitea-vm170.pub\",\"public_fp\":\"SHA256:f9h3a7BfK1+nUsw3aOjAUveexl+6bCY9Ae/64byIreg\"},{\"bytes\":432,\"derive_public_rc\":0,\"derived_public_fp\":\"SHA256:WEmWRIoYTy/wMABxSr1bwLTZWSJbfly3exggWmu5eT4\",\"mode\":\"0o600\",\"name\":\"homelab-ops-builder-status-ed25519\"},{\"bytes\":114,\"mode\":\"0o644\",\"name\":\"homelab-ops-builder-status-ed25519.pub\",\"public_fp\":\"SHA256:WEmWRIoYTy/wMABxSr1bwLTZWSJbfly3exggWmu5eT4\"},{\"bytes\":411,\"derive_public_rc\":0,\"derived_public_fp\":\"SHA256:s0CusF0IHQGVJ02oi7ejWkGhH9NkhTWonn3441toe5M\",\"mode\":\"0o600\",\"name\":\"id_ed25519\"},{\"bytes\":100,\"mode\":\"0o644\",\"name\":\"id_ed25519.pub\",\"public_fp\":\"SHA256:s0CusF0IHQGVJ02oi7ejWkGhH9NkhTWonn3441toe5M\"},{\"bytes\":432,\"derive_public_rc\":0,\"derived_public_fp\":\"SHA256:wipXiBB3cpAwyWap9LcB185WjEEmDxtRJsI/UuMVAp0\",\"mode\":\"0o600\",\"name\":\"id_ed25519_netbird_operator\"},{\"bytes\":115,\"mode\":\"0o644\",\"name\":\"id_ed25519_netbird_operator.pub\",\"public_fp\":\"SHA256:wipXiBB3cpAwyWap9LcB185WjEEmDxtRJsI/UuMVAp0\"},{\"bytes\":3369,\"derive_public_rc\":0,\"derived_public_fp\":\"SHA256:bSyxARbKzSylpKwBNth7zTODkgTExZdhFwrYEH9zRO4\",\"mode\":\"0o600\",\"name\":\"id_rsa\"},{\"bytes\":736,\"mode\":\"0o644\",\"name\":\"id_rsa.pub\",\"public_fp\":\"SHA256:bSyxARbKzSylpKwBNth7zTODkgTExZdhFwrYEH9zRO4\"},{\"bytes\":15381,\"mode\":\"0o600\",\"name\":\"known_hosts\"},{\"bytes\":5327,\"mode\":\"0o600\",\"name\":\"known_hosts.bak.20260617T094043\"},{\"bytes\":5032,\"mode\":\"0o600\",\"name\":\"known_hosts.before-edge-refresh-20260615T194432Z\"},{\"bytes\":14837,\"mode\":\"0o600\",\"name\":\"known_hosts.before-vm150-20260816T040756Z\"},{\"bytes\":14766,\"mode\":\"0o600\",\"name\":\"known_hosts.before-vm150-20260816T042857\"},{\"bytes\":14778,\"mode\":\"0o600\",\"name\":\"known_hosts.before-vm150-20260816T042946\"},{\"bytes\":16158,\"mode\":\"0o600\",\"name\":\"known_hosts.old\"},{\"bytes\":16158,\"mode\":\"0o600\",\"name\":\"known_hosts.pre-vm160-20260903T200235Z\"},{\"bytes\":1283,\"mode\":\"0o600\",\"name\":\"known_hosts_netbird_vps\"},{\"bytes\":419,\"derive_public_rc\":0,\"derived_public_fp\":\"SHA256:ok4AGffG4xlVH2I6kN4YN0MRlMtJ4Z8XeSY8/ug+V+s\",\"mode\":\"0o600\",\"name\":\"router-backup-ed25519\"},{\"bytes\":110,\"mode\":\"0o644\",\"name\":\"router-backup-ed25519.pub\",\"public_fp\":\"SHA256:ok4AGffG4xlVH2I6kN4YN0MRlMtJ4Z8XeSY8/ug+V+s\"},{\"bytes\":419,\"derive_public_rc\":0,\"derived_public_fp\":\"SHA256:C3xsDPfds6jMpM90Bj8YIvXHbY6VJcm7FXcmY0sNE6o\",\"mode\":\"0o600\",\"name\":\"snikket-recovery-ed25519\"},{\"bytes\":104,\"mode\":\"0o644\",\"name\":\"snikket-recovery-ed25519.pub\",\"public_fp\":\"SHA256:C3xsDPfds6jMpM90Bj8YIvXHbY6VJcm7FXcmY0sNE6o\"}],\"known_host_archives\":[{\"nb2\":[{\"fps\":[\"SHA256:CcvO+J97741AHilFAN5Vd7tAzDy+i3B1z7mnBCaIh4g\",\"SHA256:WvVWcFZJ76J7jgHCQiDacIh40+ChvyAN0+OgrWgQ99k\",\"SHA256:Z9J24PJXaPzbotO7Kiw7VE/cngASmyr1OAhYaJpHFRw\"],\"hits\":3,\"query\":\"46.16.34.129\"}],\"path\":\"[SENSITIVE_PATH] Connecting to relay.pvepro.ru [[RELAY_IP]] port 22.\",\"debug1: Connection established.\",\"debug1: identity file [SENSITIVE_PATH] type 0\",\"debug1: identity file [SENSITIVE_PATH] type -1\",\"debug1: identity file [SENSITIVE_PATH] type -1\",\"debug1: identity file [SENSITIVE_PATH] type -1\",\"debug1: identity file [SENSITIVE_PATH] type -1\",\"debug1: identity file [SENSITIVE_PATH] type -1\",\"debug1: identity file [SENSITIVE_PATH] type 3\",\"debug1: identity file [SENSITIVE_PATH] type -1\",\"debug1: identity file [SENSITIVE_PATH] type -1\",\"debug1: identity file [SENSITIVE_PATH] type -1\",\"debug1: identity file [SENSITIVE_PATH] type -1\",\"debug1: identity file [SENSITIVE_PATH] type -1\",\"debug2: host key algorithms: ssh-ed25519-cert-v01@openssh.com,ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,sk-ssh-ed25519-cert-v01@openssh.com,sk-ecdsa-sha2-nistp256-cert-v01@openssh.com,rsa-sha2-512-cert-v01@openssh.com,rsa-sha2-256-cert-v01@openssh.com,ssh-ed25519,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,sk-ssh-ed25519@openssh.com,sk-ecdsa-sha2-nistp256@openssh.com,rsa-sha2-512,rsa-sha2-256\",\"debug2: host key algorithms: rsa-sha2-512,rsa-sha2-256,ecdsa-sha2-nistp256,ssh-ed25519\",\"debug1: kex: host key algorithm: ssh-ed25519\",\"debug1: Server host key: ssh-ed25519 SHA256:DXJGwunC5tEVvnC3nRxyayTN8FXmyJcVgf+Oa6udQsY\",\"debug1: Host 'relay.pvepro.ru' is known and matches the ED25519 host key.\",\"debug2: host key algorithms: ssh-ed25519-cert-v01@openssh.com,ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,sk-ssh-ed25519-cert-v01@openssh.com,sk-ecdsa-sha2-nistp256-cert-v01@openssh.com,rsa-sha2-512-cert-v01@openssh.com,rsa-sha2-256-cert-v01@openssh.com,ssh-ed25519,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,sk-ssh-ed25519@openssh.com,sk-ecdsa-sha2-nistp256@openssh.com,rsa-sha2-512,rsa-sha2-256\",\"debug1: Authentications that can continue: publickey\",\"debug1: Offering public key: [SENSITIVE_PATH] RSA SHA256:bSyxARbKzSylpKwBNth7zTODkgTExZdhFwrYEH9zRO4\",\"debug1: Authentications that can continue: publickey\",\"debug3: no such identity: [SENSITIVE_PATH] No such file or directory\",\"debug3: no such identity: [SENSITIVE_PATH] No such file or directory\",\"debug1: Offering public key: [SENSITIVE_PATH] ED25519 SHA256:s0CusF0IHQGVJ02oi7ejWkGhH9NkhTWonn3441toe5M\",\"debug1: Authentications that can continue: publickey\",\"debug3: no such identity: [SENSITIVE_PATH] No such file or directory\",\"debug3: no such identity: [SENSITIVE_PATH] No such file or directory\",\"root@relay.pvepro.ru: Permission denied (publickey).\"],\"stderr_sha256\":\"7dd610853ce49195c76e2fa140f6693cb78d131a69b71ef19a0da59ea129f674\"},{\"host\":\"relay.netbird.selfhosted\",\"rc\":255,\"stderr_bytes\":13787,\"stderr_lines\":[\"debug1: Connecting to relay.netbird.selfhosted [[PRIVATE_IPV6]] port 22.\",\"debug1: Connection established.\",\"debug1: identity file [SENSITIVE_PATH] type 0\",\"debug1: identity file [SENSITIVE_PATH] type -1\",\"debug1: identity file [SENSITIVE_PATH] type -1\",\"debug1: identity file [SENSITIVE_PATH] type -1\",\"debug1: identity file [SENSITIVE_PATH] type -1\",\"debug1: identity file [SENSITIVE_PATH] type -1\",\"debug1: identity file [SENSITIVE_PATH] type 3\",\"debug1: identity file [SENSITIVE_PATH] type -1\",\"debug1: identity file [SENSITIVE_PATH] type -1\",\"debug1: identity file [SENSITIVE_PATH] type -1\",\"debug1: identity file [SENSITIVE_PATH] type -1\",\"debug1: identity file [SENSITIVE_PATH] type -1\",\"debug2: host key algorithms: ssh-ed25519-cert-v01@openssh.com,ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,sk-ssh-ed25519-cert-v01@openssh.com,sk-ecdsa-sha2-nistp256-cert-v01@openssh.com,rsa-sha2-512-cert-v01@openssh.com,rsa-sha2-256-cert-v01@openssh.com,ssh-ed25519,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,sk-ssh-ed25519@openssh.com,sk-ecdsa-sha2-nistp256@openssh.com,rsa-sha2-512,rsa-sha2-256\",\"debug2: host key algorithms: rsa-sha2-512,rsa-sha2-256,ecdsa-sha2-nistp256,ssh-ed25519\",\"debug1: kex: host key algorithm: ssh-ed25519\",\"debug1: Server host key: ssh-ed25519 SHA256:DXJGwunC5tEVvnC3nRxyayTN8FXmyJcVgf+Oa6udQsY\",\"debug1: Host 'relay.netbird.selfhosted' is known and matches the ED25519 host key.\",\"debug2: host key algorithms: ssh-ed25519-cert-v01@openssh.com,ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,sk-ssh-ed25519-cert-v01@openssh.com,sk-ecdsa-sha2-nistp256-cert-v01@openssh.com,rsa-sha2-512-cert-v01@openssh.com,rsa-sha2-256-cert-v01@openssh.com,ssh-ed25519,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,sk-ssh-ed25519@openssh.com,sk-ecdsa-sha2-nistp256@openssh.com,rsa-sha2-512,rsa-sha2-256\",\"debug1: Authentications that can continue: publickey\",\"debug1: Offering public key: [SENSITIVE_PATH] RSA SHA256:bSyxARbKzSylpKwBNth7zTODkgTExZdhFwrYEH9zRO4\",\"debug1: Authentications that can continue: publickey\",\"debug3: no such identity: [SENSITIVE_PATH] No such file or directory\",\"debug3: no such identity: [SENSITIVE_PATH] No such file or directory\",\"debug1: Offering public key: [SENSITIVE_PATH] ED25519 SHA256:s0CusF0IHQGVJ02oi7ejWkGhH9NkhTWonn3441toe5M\",\"debug1: Authentications that can continue: publickey\",\"debug3: no such identity: [SENSITIVE_PATH] No such file or directory\",\"debug3: no such identity: [SENSITIVE_PATH] No such file or directory\",\"root@relay.netbird.selfhosted: Permission denied (publickey).\"],\"stderr_sha256\":\"66a781b909f930a0f27e1b66500e57d5b96b21ae031ade35a06286af93d81cd0\"}],\"remote_login_attempts\":2,\"schema_version\":1,\"source_hits\":[],\"ssh_config\":[],\"targets\":{\"edge01\":{\"ip_hash\":\"6d6149f42864ce03daf22828cf236bf64d5d9a004040746ddbb051d71c9fcbc5\",\"known_current\":[{\"file\":\"[SENSITIVE_PATH]\nVPS517R2R1_DECISION=PASS_SSH_AUTH_ROUTE_EVIDENCE_CAPTURED\nVPS517R2R1_NEXT_GATE=BUILD_EXACT_AUTH_INVENTORY_OR_REQUEST_PROVIDER_HOSTKEY_CONFIRMATION\nHOMELAB_RESULT_CONTRACT={\"version\":1,\"command_id\":\"SUPPORT-260918-INFRA-VPS-SSH-AUTH-ROUTES-RCA-READONLY-517R2R1\",\"status\":\"OK\",\"changes_made\":false,\"rollback_started\":false,\"rollback_restored\":null}\n"
 }
diff --git a/runtime/latest.txt b/runtime/latest.txt
index 1c718f19..bccd4e48 100644
--- a/runtime/latest.txt
+++ b/runtime/latest.txt
@@ -1,15 +1,15 @@
 CHAT_OUTPUT_BEGIN
-COMMAND_ID=SUPPORT-260918-INFRA-VPS-3OF3-TRUST-CAPACITY-INVENTORY-READONLY-517R2
+COMMAND_ID=SUPPORT-260918-INFRA-VPS-SSH-AUTH-ROUTES-RCA-READONLY-517R2R1
 STATUS=OK
 RC=0
 HOST=pve01
 MODE=read-only
-COMPONENT=infra-vps-3of3-trust-capacity-inventory-readonly
+COMPONENT=infra-vps-ssh-auth-routes-rca-readonly
 REFERENCE_REGISTER_CHECK=OK
 REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
 ERROR_REGISTER_CHECK=OK
 ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
-COMMAND_SHA256=09265927cdd6daa9f4592b8f99502df969880b8016103ada040f4c917ca53407
+COMMAND_SHA256=6d3929a38769781a3664917da603f2d2fa8d771d331e1851092ceea5d7d1a567
 DUPLICATE_FAILED_COMMAND_BLOCKED=false
 EXECUTION_STARTED=true
 CHANGE_DECLARED=false
@@ -24,13 +24,13 @@ MUTATION_OUTCOME=NO_MUTATION
 SANITIZED=yes
 SECRETS_INCLUDED=no
 PRIVATE_ADDRESSES_INCLUDED=no
-RAW_EVIDENCE_SHA256=51f329f3e1ae86bff356ccb813a9eb926762534328b5de5c7d7601c788b1de99
-SANITIZED_OUTPUT_SHA256=51f329f3e1ae86bff356ccb813a9eb926762534328b5de5c7d7601c788b1de99
+RAW_EVIDENCE_SHA256=d4c5803db9a3ba2d9c88fe2e72ff386d116915130a297525a2632b6e68289626
+SANITIZED_OUTPUT_SHA256=eeea2690fa056a6b3a8752fd6a312af873e9a416cc32b9cb07bdbd41ad6a9bd2
 OUTPUT_BEGIN
-VPS517R2_SAFE_REPORT={"assets":[{"dns_ipv4_hashes":["731a154cebb02c619b63295a7316e8484883299059110ff4200455a92aa396fd"],"effective_host_kind":"NAME","effective_host_value":"relay.pvepro.ru","existing_exact_trust":[{"fps":["SHA256:DXJGwunC5tEVvnC3nRxyayTN8FXmyJcVgf+Oa6udQsY"],"hits":1,"name":"relay.pvepro.ru"},{"fps":[],"hits":0,"name":"85.121.4.192"},{"fps":["SHA256:DXJGwunC5tEVvnC3nRxyayTN8FXmyJcVgf+Oa6udQsY"],"hits":1,"name":"relay.pvepro.ru"}],"expected_ip_hash":"731a154cebb02c619b63295a7316e8484883299059110ff4200455a92aa396fd","id":"relay","inventory":null,"inventory_ok":false,"keyscan":{"algorithms":["ecdsa-sha2-nistp256","ssh-ed25519","ssh-rsa"],"fingerprints":["SHA256:DXJGwunC5tEVvnC3nRxyayTN8FXmyJcVgf+Oa6udQsY","SHA256:J/5Kp48TdNA/RdlTFGEX4nr71yM6uc5ub5Iahr4xAWE","SHA256:nen1KYo/PIGw45nlakIZpa/SSo/llm3tokCz0hFzboE"],"ip_rc":0,"name_rc":0,"stderr_bytes":0},"matched_exact_fingerprints":["SHA256:DXJGwunC5tEVvnC3nRxyayTN8FXmyJcVgf+Oa6udQsY"],"matched_existing_netbird_aliases":[{"alias":"relay.netbird.selfhosted","matched_fingerprints":["SHA256:DXJGwunC5tEVvnC3nRxyayTN8FXmyJcVgf+Oa6udQsY"]}],"plan_hint":"P2-US","port":22,"ssh_g":{"hostname":"relay.pvepro.ru","identityfiles":["id_rsa","id_ecdsa","id_ecdsa_sk","id_ed25519","id_ed25519_sk","id_xmss"],"ok":true,"port":"22","user":"root"},"ssh_inventory_rc":255,"ssh_inventory_stderr_bytes":54,"ssh_inventory_stderr_sha256":"6c56db6b974557e921aa5be858c44f3f013d6603b94d121b434ec0ee6016f779","target":"relay.pvepro.ru","trust_approved":true,"trust_basis":"EXACT_EXISTING_HOSTKEY","user_mapping_consistent":true},{"blocked_reason":"HOSTKEY_TRUST_NOT_PROVEN_OR_MAPPING_MISMATCH","dns_ipv4_hashes":[],"effective_host_kind":"NAME","effective_host_value":"nb2.pvepro.ru","existing_exact_trust":[{"fps":[],"hits":0,"name":"nb2.pvepro.ru"},{"fps":["SHA256:CcvO+J97741AHilFAN5Vd7tAzDy+i3B1z7mnBCaIh4g","SHA256:WvVWcFZJ76J7jgHCQiDacIh40+ChvyAN0+OgrWgQ99k","SHA256:Z9J24PJXaPzbotO7Kiw7VE/cngASmyr1OAhYaJpHFRw"],"hits":3,"name":"46.16.34.129"},{"fps":[],"hits":0,"name":"nb2.pvepro.ru"}],"expected_ip_hash":"1fc73136d6d7ddbd0e67ae9c4ddbe6798056fba742305ef773f1015df2712c16","id":"nb2","inventory":null,"inventory_ok":false,"keyscan":{"algorithms":["ecdsa-sha2-nistp256","ssh-ed25519","ssh-rsa"],"fingerprints":["SHA256:805Q9eh/fePUci42dfY58I6q0lFiiPHn0/M+mckypmE","SHA256:Q0Cfx2w9lGpHnMNIQtkJnq8z4mX34UCbR3BTQNuwJ9o","SHA256:lUdLDguDrTStHVyMWsZmysgRJKxzjtU72Q7KUrazNoY"],"ip_rc":0,"name_rc":1,"stderr_bytes":162},"matched_exact_fingerprints":[],"matched_existing_netbird_aliases":[],"plan_hint":null,"port":22,"ssh_g":{"hostname":"nb2.pvepro.ru","identityfiles":["id_rsa","id_ecdsa","id_ecdsa_sk","id_ed25519","id_ed25519_sk","id_xmss"],"ok":true,"port":"22","user":"root"},"target":"nb2.pvepro.ru","trust_approved":false,"trust_basis":"NO_PREEXISTING_HOSTKEY_MATCH","user_mapping_consistent":false},{"blocked_reason":"HOSTKEY_TRUST_NOT_PROVEN_OR_MAPPING_MISMATCH","dns_ipv4_hashes":[],"effective_host_kind":"NAME","effective_host_value":"edge01-admin-2026","existing_exact_trust":[{"fps":[],"hits":0,"name":"edge01-admin-2026"},{"fps":[],"hits":0,"name":"185.225.35.6"},{"fps":[],"hits":0,"name":"edge01-admin-2026"}],"expected_ip_hash":"6d6149f42864ce03daf22828cf236bf64d5d9a004040746ddbb051d71c9fcbc5","id":"edge01","inventory":null,"inventory_ok":false,"keyscan":{"algorithms":["ecdsa-sha2-nistp256","ssh-ed25519","ssh-rsa"],"fingerprints":["SHA256:EQAivUSt0LFK9Ra0nE+2nmxxUQMiCN1FDt2rf8OC3tA","SHA256:Ef+HsZb8lIXoadvYBXuGKIL3H7NyJMmf9EYCoJRoSv8","SHA256:eqX0bApeLb6GImvXPuomOVxZ3hen0uK2Z9NSNQ+r5cQ"],"ip_rc":0,"name_rc":null,"stderr_bytes":0},"matched_exact_fingerprints":[],"matched_existing_netbird_aliases":[],"plan_hint":null,"port":22,"ssh_g":{"hostname":"edge01-admin-2026","identityfiles":["id_rsa","id_ecdsa","id_ecdsa_sk","id_ed25519","id_ed25519_sk","id_xmss"],"ok":true,"port":"22","user":"root"},"target":"edge01-admin-2026","trust_approved":false,"trust_basis":"NO_PREEXISTING_HOSTKEY_MATCH","user_mapping_consistent":true}],"blocked_count":2,"changes_made":false,"command_id":"SUPPORT-260918-INFRA-VPS-3OF3-TRUST-CAPACITY-INVENTORY-READONLY-517R2","decision":"HOLD_NO_VPS_LIVE_INVENTORY_TRUST_APPROVED","inventory_count":0,"mode":"read-only","persistent_known_hosts_writes":0,"schema_version":1}
-VPS517R2_DECISION=HOLD_NO_VPS_LIVE_INVENTORY_TRUST_APPROVED
-VPS517R2_NEXT_GATE=DEEP_COST_CONSOLIDATION_ANALYSIS_OR_HOSTKEY_CONFIRMATION_IF_BLOCKED
-HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"SUPPORT-260918-INFRA-VPS-3OF3-TRUST-CAPACITY-INVENTORY-READONLY-517R2","status":"OK","changes_made":false,"rollback_started":false,"rollback_restored":null}
+VPS517R2R1_SAFE_REPORT={"agent":{"keys":[],"rc":2,"ssh_auth_sock_present":false,"stderr_bytes":58,"stderr_sha256":"84b8eb561e5d34d856acb140340cdbe4f49d4a59bb36aea28d920e7e1d806a29"},"changes_made":false,"command_id":"SUPPORT-260918-INFRA-VPS-SSH-AUTH-ROUTES-RCA-READONLY-517R2R1","decision":"PASS_SSH_AUTH_ROUTE_EVIDENCE_CAPTURED","key_inventory":[{"bytes":4788,"mode":"0o600","name":"authorized_keys"},{"bytes":4788,"derive_public_rc":255,"derive_public_stderr_bytes":100,"derive_public_stderr_sha256":"dba521506253f9f23dc439713e0de86f7f5efea288f4b58cbc4c9711716cae50","mode":"0o600","name":"authorized_keys.bak.remove-old-moba-rsa.20260617T160022Z"},{"bytes":117,"mode":"0o640","name":"config"},{"bytes":399,"derive_public_rc":0,"derived_public_fp":"SHA256:f9h3a7BfK1+nUsw3aOjAUveexl+6bCY9Ae/64byIreg","mode":"0o600","name":"homelab-gitea-vm170"},{"bytes":92,"mode":"0o644","name":"homelab-gitea-vm170.pub","public_fp":"SHA256:f9h3a7BfK1+nUsw3aOjAUveexl+6bCY9Ae/64byIreg"},{"bytes":432,"derive_public_rc":0,"derived_public_fp":"SHA256:WEmWRIoYTy/wMABxSr1bwLTZWSJbfly3exggWmu5eT4","mode":"0o600","name":"homelab-ops-builder-status-ed25519"},{"bytes":114,"mode":"0o644","name":"homelab-ops-builder-status-ed25519.pub","public_fp":"SHA256:WEmWRIoYTy/wMABxSr1bwLTZWSJbfly3exggWmu5eT4"},{"bytes":411,"derive_public_rc":0,"derived_public_fp":"SHA256:s0CusF0IHQGVJ02oi7ejWkGhH9NkhTWonn3441toe5M","mode":"0o600","name":"id_ed25519"},{"bytes":100,"mode":"0o644","name":"id_ed25519.pub","public_fp":"SHA256:s0CusF0IHQGVJ02oi7ejWkGhH9NkhTWonn3441toe5M"},{"bytes":432,"derive_public_rc":0,"derived_public_fp":"SHA256:wipXiBB3cpAwyWap9LcB185WjEEmDxtRJsI/UuMVAp0","mode":"0o600","name":"id_ed25519_netbird_operator"},{"bytes":115,"mode":"0o644","name":"id_ed25519_netbird_operator.pub","public_fp":"SHA256:wipXiBB3cpAwyWap9LcB185WjEEmDxtRJsI/UuMVAp0"},{"bytes":3369,"derive_public_rc":0,"derived_public_fp":"SHA256:bSyxARbKzSylpKwBNth7zTODkgTExZdhFwrYEH9zRO4","mode":"0o600","name":"id_rsa"},{"bytes":736,"mode":"0o644","name":"id_rsa.pub","public_fp":"SHA256:bSyxARbKzSylpKwBNth7zTODkgTExZdhFwrYEH9zRO4"},{"bytes":15381,"mode":"0o600","name":"known_hosts"},{"bytes":5327,"mode":"0o600","name":"known_hosts.bak.20260617T094043"},{"bytes":5032,"mode":"0o600","name":"known_hosts.before-edge-refresh-20260615T194432Z"},{"bytes":14837,"mode":"0o600","name":"known_hosts.before-vm150-20260816T040756Z"},{"bytes":14766,"mode":"0o600","name":"known_hosts.before-vm150-20260816T042857"},{"bytes":14778,"mode":"0o600","name":"known_hosts.before-vm150-20260816T042946"},{"bytes":16158,"mode":"0o600","name":"known_hosts.old"},{"bytes":16158,"mode":"0o600","name":"known_hosts.pre-vm160-20260903T200235Z"},{"bytes":1283,"mode":"0o600","name":"known_hosts_netbird_vps"},{"bytes":419,"derive_public_rc":0,"derived_public_fp":"SHA256:ok4AGffG4xlVH2I6kN4YN0MRlMtJ4Z8XeSY8/ug+V+s","mode":"0o600","name":"router-backup-ed25519"},{"bytes":110,"mode":"0o644","name":"router-backup-ed25519.pub","public_fp":"SHA256:ok4AGffG4xlVH2I6kN4YN0MRlMtJ4Z8XeSY8/ug+V+s"},{"bytes":419,"derive_public_rc":0,"derived_public_fp":"SHA256:C3xsDPfds6jMpM90Bj8YIvXHbY6VJcm7FXcmY0sNE6o","mode":"0o600","name":"snikket-recovery-ed25519"},{"bytes":104,"mode":"0o644","name":"snikket-recovery-ed25519.pub","public_fp":"SHA256:C3xsDPfds6jMpM90Bj8YIvXHbY6VJcm7FXcmY0sNE6o"}],"known_host_archives":[{"nb2":[{"fps":["SHA256:CcvO+J97741AHilFAN5Vd7tAzDy+i3B1z7mnBCaIh4g","SHA256:WvVWcFZJ76J7jgHCQiDacIh40+ChvyAN0+OgrWgQ99k","SHA256:Z9J24PJXaPzbotO7Kiw7VE/cngASmyr1OAhYaJpHFRw"],"hits":3,"query":"46.16.34.129"}],"path":"[SENSITIVE_PATH] Connecting to relay.pvepro.ru [[RELAY_IP]] port 22.","debug1: Connection established.","debug1: identity file [SENSITIVE_PATH] type 0","debug1: identity file [SENSITIVE_PATH] type -1","debug1: identity file [SENSITIVE_PATH] type -1","debug1: identity file [SENSITIVE_PATH] type -1","debug1: identity file [SENSITIVE_PATH] type -1","debug1: identity file [SENSITIVE_PATH] type -1","debug1: identity file [SENSITIVE_PATH] type 3","debug1: identity file [SENSITIVE_PATH] type -1","debug1: identity file [SENSITIVE_PATH] type -1","debug1: identity file [SENSITIVE_PATH] type -1","debug1: identity file [SENSITIVE_PATH] type -1","debug1: identity file [SENSITIVE_PATH] type -1","debug2: host key algorithms: ssh-ed25519-cert-v01@openssh.com,ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,sk-ssh-ed25519-cert-v01@openssh.com,sk-ecdsa-sha2-nistp256-cert-v01@openssh.com,rsa-sha2-512-cert-v01@openssh.com,rsa-sha2-256-cert-v01@openssh.com,ssh-ed25519,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,sk-ssh-ed25519@openssh.com,sk-ecdsa-sha2-nistp256@openssh.com,rsa-sha2-512,rsa-sha2-256","debug2: host key algorithms: rsa-sha2-512,rsa-sha2-256,ecdsa-sha2-nistp256,ssh-ed25519","debug1: kex: host key algorithm: ssh-ed25519","debug1: Server host key: ssh-ed25519 SHA256:DXJGwunC5tEVvnC3nRxyayTN8FXmyJcVgf+Oa6udQsY","debug1: Host 'relay.pvepro.ru' is known and matches the ED25519 host key.","debug2: host key algorithms: ssh-ed25519-cert-v01@openssh.com,ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,sk-ssh-ed25519-cert-v01@openssh.com,sk-ecdsa-sha2-nistp256-cert-v01@openssh.com,rsa-sha2-512-cert-v01@openssh.com,rsa-sha2-256-cert-v01@openssh.com,ssh-ed25519,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,sk-ssh-ed25519@openssh.com,sk-ecdsa-sha2-nistp256@openssh.com,rsa-sha2-512,rsa-sha2-256","debug1: Authentications that can continue: publickey","debug1: Offering public key: [SENSITIVE_PATH] RSA SHA256:bSyxARbKzSylpKwBNth7zTODkgTExZdhFwrYEH9zRO4","debug1: Authentications that can continue: publickey","debug3: no such identity: [SENSITIVE_PATH] No such file or directory","debug3: no such identity: [SENSITIVE_PATH] No such file or directory","debug1: Offering public key: [SENSITIVE_PATH] ED25519 SHA256:s0CusF0IHQGVJ02oi7ejWkGhH9NkhTWonn3441toe5M","debug1: Authentications that can continue: publickey","debug3: no such identity: [SENSITIVE_PATH] No such file or directory","debug3: no such identity: [SENSITIVE_PATH] No such file or directory","root@relay.pvepro.ru: Permission denied (publickey)."],"stderr_sha256":"7dd610853ce49195c76e2fa140f6693cb78d131a69b71ef19a0da59ea129f674"},{"host":"relay.netbird.selfhosted","rc":255,"stderr_bytes":13787,"stderr_lines":["debug1: Connecting to relay.netbird.selfhosted [[PRIVATE_IPV6]] port 22.","debug1: Connection established.","debug1: identity file [SENSITIVE_PATH] type 0","debug1: identity file [SENSITIVE_PATH] type -1","debug1: identity file [SENSITIVE_PATH] type -1","debug1: identity file [SENSITIVE_PATH] type -1","debug1: identity file [SENSITIVE_PATH] type -1","debug1: identity file [SENSITIVE_PATH] type -1","debug1: identity file [SENSITIVE_PATH] type 3","debug1: identity file [SENSITIVE_PATH] type -1","debug1: identity file [SENSITIVE_PATH] type -1","debug1: identity file [SENSITIVE_PATH] type -1","debug1: identity file [SENSITIVE_PATH] type -1","debug1: identity file [SENSITIVE_PATH] type -1","debug2: host key algorithms: ssh-ed25519-cert-v01@openssh.com,ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,sk-ssh-ed25519-cert-v01@openssh.com,sk-ecdsa-sha2-nistp256-cert-v01@openssh.com,rsa-sha2-512-cert-v01@openssh.com,rsa-sha2-256-cert-v01@openssh.com,ssh-ed25519,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,sk-ssh-ed25519@openssh.com,sk-ecdsa-sha2-nistp256@openssh.com,rsa-sha2-512,rsa-sha2-256","debug2: host key algorithms: rsa-sha2-512,rsa-sha2-256,ecdsa-sha2-nistp256,ssh-ed25519","debug1: kex: host key algorithm: ssh-ed25519","debug1: Server host key: ssh-ed25519 SHA256:DXJGwunC5tEVvnC3nRxyayTN8FXmyJcVgf+Oa6udQsY","debug1: Host 'relay.netbird.selfhosted' is known and matches the ED25519 host key.","debug2: host key algorithms: ssh-ed25519-cert-v01@openssh.com,ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,sk-ssh-ed25519-cert-v01@openssh.com,sk-ecdsa-sha2-nistp256-cert-v01@openssh.com,rsa-sha2-512-cert-v01@openssh.com,rsa-sha2-256-cert-v01@openssh.com,ssh-ed25519,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,sk-ssh-ed25519@openssh.com,sk-ecdsa-sha2-nistp256@openssh.com,rsa-sha2-512,rsa-sha2-256","debug1: Authentications that can continue: publickey","debug1: Offering public key: [SENSITIVE_PATH] RSA SHA256:bSyxARbKzSylpKwBNth7zTODkgTExZdhFwrYEH9zRO4","debug1: Authentications that can continue: publickey","debug3: no such identity: [SENSITIVE_PATH] No such file or directory","debug3: no such identity: [SENSITIVE_PATH] No such file or directory","debug1: Offering public key: [SENSITIVE_PATH] ED25519 SHA256:s0CusF0IHQGVJ02oi7ejWkGhH9NkhTWonn3441toe5M","debug1: Authentications that can continue: publickey","debug3: no such identity: [SENSITIVE_PATH] No such file or directory","debug3: no such identity: [SENSITIVE_PATH] No such file or directory","root@relay.netbird.selfhosted: Permission denied (publickey)."],"stderr_sha256":"66a781b909f930a0f27e1b66500e57d5b96b21ae031ade35a06286af93d81cd0"}],"remote_login_attempts":2,"schema_version":1,"source_hits":[],"ssh_config":[],"targets":{"edge01":{"ip_hash":"6d6149f42864ce03daf22828cf236bf64d5d9a004040746ddbb051d71c9fcbc5","known_current":[{"file":"[SENSITIVE_PATH]
+VPS517R2R1_DECISION=PASS_SSH_AUTH_ROUTE_EVIDENCE_CAPTURED
+VPS517R2R1_NEXT_GATE=BUILD_EXACT_AUTH_INVENTORY_OR_REQUEST_PROVIDER_HOSTKEY_CONFIRMATION
+HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"SUPPORT-260918-INFRA-VPS-SSH-AUTH-ROUTES-RCA-READONLY-517R2R1","status":"OK","changes_made":false,"rollback_started":false,"rollback_restored":null}
 
 OUTPUT_END
 CHAT_OUTPUT_END