diff --git a/runtime/history/SUPPORT-260922-SPB-VM130-NETBIRD-EXIT-DESELECT-9130R1.json b/runtime/history/SUPPORT-260922-SPB-VM130-NETBIRD-EXIT-DESELECT-9130R1.json
index 8bc0f353..5ecd1067 100644
--- a/runtime/history/SUPPORT-260922-SPB-VM130-NETBIRD-EXIT-DESELECT-9130R1.json
+++ b/runtime/history/SUPPORT-260922-SPB-VM130-NETBIRD-EXIT-DESELECT-9130R1.json
@@ -2,37 +2,37 @@
   "schema_version": 1,
   "channel": "homelab-runtime",
   "command_id": "SUPPORT-260922-SPB-VM130-NETBIRD-EXIT-DESELECT-9130R1",
-  "status": "FAIL",
-  "rc": 76,
+  "status": "BLOCKED",
+  "rc": 73,
   "host": "pve01",
   "mode": "change",
   "component": "spb-vm130-netbird-exit-deselect",
-  "started_at_utc": "2026-09-22T17:21:40Z",
-  "finished_at_utc": "2026-09-22T17:22:00Z",
+  "started_at_utc": "2026-09-22T17:24:05Z",
+  "finished_at_utc": "2026-09-22T17:24:05Z",
   "reference_register_checked": true,
   "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66",
   "error_register_checked": true,
   "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0",
   "command_sha256": "ad6946b8ec8ec121652ef576f21296a5f5828f6647c3e2eb85171d41252d478d",
-  "duplicate_failed_command_blocked": false,
-  "block_reason": null,
-  "execution_started": true,
+  "duplicate_failed_command_blocked": true,
+  "block_reason": "EXACT_FAILED_COMMAND_REPEAT",
+  "execution_started": false,
   "change_declared": true,
-  "result_contract_valid": false,
-  "result_contract_status": null,
-  "result_contract_error": "INVALID_CONTRACT:ValueError",
-  "command_rc": 46,
-  "changes_made": null,
-  "rollback_started": null,
+  "result_contract_valid": true,
+  "result_contract_status": "BLOCKED",
+  "result_contract_error": "RUNNER_PREEXECUTION_BLOCK",
+  "command_rc": null,
+  "changes_made": false,
+  "rollback_started": false,
   "rollback_restored": null,
-  "mutation_outcome": "UNKNOWN",
+  "mutation_outcome": "NO_MUTATION",
   "sanitized": true,
   "secrets_included": false,
   "private_addresses_included": false,
   "raw_evidence_retained_locally": true,
-  "raw_evidence_sha256": "9c8ba11ec214d042a71bb25d186a6216ad2b3b968986c144a6e269ee4f09aead",
-  "sanitized_output_sha256": "9c8ba11ec214d042a71bb25d186a6216ad2b3b968986c144a6e269ee4f09aead",
+  "raw_evidence_sha256": "687482d91887acad2dbfc46a5910089087a1a645fdd24335424d3a0d6f03d8d2",
+  "sanitized_output_sha256": "687482d91887acad2dbfc46a5910089087a1a645fdd24335424d3a0d6f03d8d2",
   "output_truncated_in_json": false,
   "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
-  "output": "SPB9130_CHANGE={\"preflight\":{\"netbird_active\":true,\"netbird_version\":\"0.73.2\",\"networks_list_rc\":0,\"networks_list_sha\":\"95a17530163d7fc0\",\"present_ids\":[\"edge-exit-relay-moldova\"],\"before_route_dev\":\"wt0\",\"before_table7120\":{\"rc\":0,\"has_default_wt0\":true,\"sha\":\"47caf134646621d5\"},\"baseline_connected\":3,\"baseline_management_connected\":false},\"change\":{\"edge-exit-relay-moldova\":{\"rc\":0,\"stderr_sha\":null}},\"verify\":{\"route_1_1_1_1\":{\"rc\":0,\"dev\":\"eth0\",\"line_hash\":\"c7b4d700c999f849\"},\"route_letsencrypt\":{\"rc\":1,\"dev\":null,\"stderr_sha\":\"bc3a564baee1d4c0\"},\"tcp_1_1_1_1_443\":true,\"tcp_letsencrypt_443\":true,\"tcp_cloudflare_443\":true,\"wt0_exists\":true,\"netbird\":{\"rc\":0,\"connected\":3,\"management_connected\":false,\"daemon_status\":\"Connected\"},\"table7120\":{\"rc\":0,\"has_default_wt0\":false,\"sha\":null}},\"status\":\"FAIL\",\"changes_made\":false,\"rollback_started\":true,\"rollback_restored\":true,\"rollback\":{\"started\":true,\"select\":{\"edge-exit-relay-moldova\":{\"rc\":0,\"stderr_sha\":null}},\"restored\":true,\"table7120\":{\"rc\":0,\"has_default_wt0\":true,\"sha\":\"47caf134646621d5\"}}}\nTASK_COMPLETE=true\nTASK_RESULT=FAIL_SPB_VM130_NETBIRD_EXIT_DESELECT\nDECISION=HOLD_SPB_ON_AND_READ_EXACT_ROLLBACK\nHOMELAB_RESULT_CONTRACT={\"version\":1,\"command_id\":\"SUPPORT-260922-SPB-VM130-NETBIRD-EXIT-DESELECT-9130R1\",\"status\":\"FAIL\",\"changes_made\":false,\"rollback_started\":true,\"rollback_restored\":true}\n"
+  "output": "COMMAND_EXECUTION_BLOCKED=yes\nREASON=EXACT_FAILED_COMMAND_REPEAT\nPREVIOUS_RC=76\nCOMMAND_SHA256=ad6946b8ec8ec121652ef576f21296a5f5828f6647c3e2eb85171d41252d478d\n\nSet HOMELAB_ALLOW_REPEAT=1 only after reviewing the previous failure.\n"
 }
diff --git a/runtime/history/SUPPORT-260922-SPB-VM130-NETBIRD-EXIT-DESELECT-9130R1.txt b/runtime/history/SUPPORT-260922-SPB-VM130-NETBIRD-EXIT-DESELECT-9130R1.txt
index 87da2691..2d06e3f8 100644
--- a/runtime/history/SUPPORT-260922-SPB-VM130-NETBIRD-EXIT-DESELECT-9130R1.txt
+++ b/runtime/history/SUPPORT-260922-SPB-VM130-NETBIRD-EXIT-DESELECT-9130R1.txt
@@ -1,7 +1,7 @@
 CHAT_OUTPUT_BEGIN
 COMMAND_ID=SUPPORT-260922-SPB-VM130-NETBIRD-EXIT-DESELECT-9130R1
-STATUS=FAIL
-RC=76
+STATUS=BLOCKED
+RC=73
 HOST=pve01
 MODE=change
 COMPONENT=spb-vm130-netbird-exit-deselect
@@ -10,28 +10,29 @@ REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d6
 ERROR_REGISTER_CHECK=OK
 ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
 COMMAND_SHA256=ad6946b8ec8ec121652ef576f21296a5f5828f6647c3e2eb85171d41252d478d
-DUPLICATE_FAILED_COMMAND_BLOCKED=false
-EXECUTION_STARTED=true
+DUPLICATE_FAILED_COMMAND_BLOCKED=true
+EXECUTION_STARTED=false
 CHANGE_DECLARED=true
-RESULT_CONTRACT_VALID=false
-RESULT_CONTRACT_STATUS=UNKNOWN
-RESULT_CONTRACT_ERROR=INVALID_CONTRACT:ValueError
-COMMAND_RC=46
-CHANGES_MADE=unknown
-ROLLBACK_STARTED=unknown
+RESULT_CONTRACT_VALID=true
+RESULT_CONTRACT_STATUS=BLOCKED
+RESULT_CONTRACT_ERROR=RUNNER_PREEXECUTION_BLOCK
+COMMAND_RC=
+CHANGES_MADE=false
+ROLLBACK_STARTED=false
 ROLLBACK_RESTORED=null
-MUTATION_OUTCOME=UNKNOWN
+MUTATION_OUTCOME=NO_MUTATION
 SANITIZED=yes
 SECRETS_INCLUDED=no
 PRIVATE_ADDRESSES_INCLUDED=no
-RAW_EVIDENCE_SHA256=9c8ba11ec214d042a71bb25d186a6216ad2b3b968986c144a6e269ee4f09aead
-SANITIZED_OUTPUT_SHA256=9c8ba11ec214d042a71bb25d186a6216ad2b3b968986c144a6e269ee4f09aead
+RAW_EVIDENCE_SHA256=687482d91887acad2dbfc46a5910089087a1a645fdd24335424d3a0d6f03d8d2
+SANITIZED_OUTPUT_SHA256=687482d91887acad2dbfc46a5910089087a1a645fdd24335424d3a0d6f03d8d2
 OUTPUT_BEGIN
-SPB9130_CHANGE={"preflight":{"netbird_active":true,"netbird_version":"0.73.2","networks_list_rc":0,"networks_list_sha":"95a17530163d7fc0","present_ids":["edge-exit-relay-moldova"],"before_route_dev":"wt0","before_table7120":{"rc":0,"has_default_wt0":true,"sha":"47caf134646621d5"},"baseline_connected":3,"baseline_management_connected":false},"change":{"edge-exit-relay-moldova":{"rc":0,"stderr_sha":null}},"verify":{"route_1_1_1_1":{"rc":0,"dev":"eth0","line_hash":"c7b4d700c999f849"},"route_letsencrypt":{"rc":1,"dev":null,"stderr_sha":"bc3a564baee1d4c0"},"tcp_1_1_1_1_443":true,"tcp_letsencrypt_443":true,"tcp_cloudflare_443":true,"wt0_exists":true,"netbird":{"rc":0,"connected":3,"management_connected":false,"daemon_status":"Connected"},"table7120":{"rc":0,"has_default_wt0":false,"sha":null}},"status":"FAIL","changes_made":false,"rollback_started":true,"rollback_restored":true,"rollback":{"started":true,"select":{"edge-exit-relay-moldova":{"rc":0,"stderr_sha":null}},"restored":true,"table7120":{"rc":0,"has_default_wt0":true,"sha":"47caf134646621d5"}}}
-TASK_COMPLETE=true
-TASK_RESULT=FAIL_SPB_VM130_NETBIRD_EXIT_DESELECT
-DECISION=HOLD_SPB_ON_AND_READ_EXACT_ROLLBACK
-HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"SUPPORT-260922-SPB-VM130-NETBIRD-EXIT-DESELECT-9130R1","status":"FAIL","changes_made":false,"rollback_started":true,"rollback_restored":true}
+COMMAND_EXECUTION_BLOCKED=yes
+REASON=EXACT_FAILED_COMMAND_REPEAT
+PREVIOUS_RC=76
+COMMAND_SHA256=ad6946b8ec8ec121652ef576f21296a5f5828f6647c3e2eb85171d41252d478d
+
+Set HOMELAB_ALLOW_REPEAT=1 only after reviewing the previous failure.
 
 OUTPUT_END
 CHAT_OUTPUT_END
diff --git a/runtime/latest.json b/runtime/latest.json
index 8bc0f353..5ecd1067 100644
--- a/runtime/latest.json
+++ b/runtime/latest.json
@@ -2,37 +2,37 @@
   "schema_version": 1,
   "channel": "homelab-runtime",
   "command_id": "SUPPORT-260922-SPB-VM130-NETBIRD-EXIT-DESELECT-9130R1",
-  "status": "FAIL",
-  "rc": 76,
+  "status": "BLOCKED",
+  "rc": 73,
   "host": "pve01",
   "mode": "change",
   "component": "spb-vm130-netbird-exit-deselect",
-  "started_at_utc": "2026-09-22T17:21:40Z",
-  "finished_at_utc": "2026-09-22T17:22:00Z",
+  "started_at_utc": "2026-09-22T17:24:05Z",
+  "finished_at_utc": "2026-09-22T17:24:05Z",
   "reference_register_checked": true,
   "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66",
   "error_register_checked": true,
   "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0",
   "command_sha256": "ad6946b8ec8ec121652ef576f21296a5f5828f6647c3e2eb85171d41252d478d",
-  "duplicate_failed_command_blocked": false,
-  "block_reason": null,
-  "execution_started": true,
+  "duplicate_failed_command_blocked": true,
+  "block_reason": "EXACT_FAILED_COMMAND_REPEAT",
+  "execution_started": false,
   "change_declared": true,
-  "result_contract_valid": false,
-  "result_contract_status": null,
-  "result_contract_error": "INVALID_CONTRACT:ValueError",
-  "command_rc": 46,
-  "changes_made": null,
-  "rollback_started": null,
+  "result_contract_valid": true,
+  "result_contract_status": "BLOCKED",
+  "result_contract_error": "RUNNER_PREEXECUTION_BLOCK",
+  "command_rc": null,
+  "changes_made": false,
+  "rollback_started": false,
   "rollback_restored": null,
-  "mutation_outcome": "UNKNOWN",
+  "mutation_outcome": "NO_MUTATION",
   "sanitized": true,
   "secrets_included": false,
   "private_addresses_included": false,
   "raw_evidence_retained_locally": true,
-  "raw_evidence_sha256": "9c8ba11ec214d042a71bb25d186a6216ad2b3b968986c144a6e269ee4f09aead",
-  "sanitized_output_sha256": "9c8ba11ec214d042a71bb25d186a6216ad2b3b968986c144a6e269ee4f09aead",
+  "raw_evidence_sha256": "687482d91887acad2dbfc46a5910089087a1a645fdd24335424d3a0d6f03d8d2",
+  "sanitized_output_sha256": "687482d91887acad2dbfc46a5910089087a1a645fdd24335424d3a0d6f03d8d2",
   "output_truncated_in_json": false,
   "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
-  "output": "SPB9130_CHANGE={\"preflight\":{\"netbird_active\":true,\"netbird_version\":\"0.73.2\",\"networks_list_rc\":0,\"networks_list_sha\":\"95a17530163d7fc0\",\"present_ids\":[\"edge-exit-relay-moldova\"],\"before_route_dev\":\"wt0\",\"before_table7120\":{\"rc\":0,\"has_default_wt0\":true,\"sha\":\"47caf134646621d5\"},\"baseline_connected\":3,\"baseline_management_connected\":false},\"change\":{\"edge-exit-relay-moldova\":{\"rc\":0,\"stderr_sha\":null}},\"verify\":{\"route_1_1_1_1\":{\"rc\":0,\"dev\":\"eth0\",\"line_hash\":\"c7b4d700c999f849\"},\"route_letsencrypt\":{\"rc\":1,\"dev\":null,\"stderr_sha\":\"bc3a564baee1d4c0\"},\"tcp_1_1_1_1_443\":true,\"tcp_letsencrypt_443\":true,\"tcp_cloudflare_443\":true,\"wt0_exists\":true,\"netbird\":{\"rc\":0,\"connected\":3,\"management_connected\":false,\"daemon_status\":\"Connected\"},\"table7120\":{\"rc\":0,\"has_default_wt0\":false,\"sha\":null}},\"status\":\"FAIL\",\"changes_made\":false,\"rollback_started\":true,\"rollback_restored\":true,\"rollback\":{\"started\":true,\"select\":{\"edge-exit-relay-moldova\":{\"rc\":0,\"stderr_sha\":null}},\"restored\":true,\"table7120\":{\"rc\":0,\"has_default_wt0\":true,\"sha\":\"47caf134646621d5\"}}}\nTASK_COMPLETE=true\nTASK_RESULT=FAIL_SPB_VM130_NETBIRD_EXIT_DESELECT\nDECISION=HOLD_SPB_ON_AND_READ_EXACT_ROLLBACK\nHOMELAB_RESULT_CONTRACT={\"version\":1,\"command_id\":\"SUPPORT-260922-SPB-VM130-NETBIRD-EXIT-DESELECT-9130R1\",\"status\":\"FAIL\",\"changes_made\":false,\"rollback_started\":true,\"rollback_restored\":true}\n"
+  "output": "COMMAND_EXECUTION_BLOCKED=yes\nREASON=EXACT_FAILED_COMMAND_REPEAT\nPREVIOUS_RC=76\nCOMMAND_SHA256=ad6946b8ec8ec121652ef576f21296a5f5828f6647c3e2eb85171d41252d478d\n\nSet HOMELAB_ALLOW_REPEAT=1 only after reviewing the previous failure.\n"
 }
diff --git a/runtime/latest.txt b/runtime/latest.txt
index 87da2691..2d06e3f8 100644
--- a/runtime/latest.txt
+++ b/runtime/latest.txt
@@ -1,7 +1,7 @@
 CHAT_OUTPUT_BEGIN
 COMMAND_ID=SUPPORT-260922-SPB-VM130-NETBIRD-EXIT-DESELECT-9130R1
-STATUS=FAIL
-RC=76
+STATUS=BLOCKED
+RC=73
 HOST=pve01
 MODE=change
 COMPONENT=spb-vm130-netbird-exit-deselect
@@ -10,28 +10,29 @@ REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d6
 ERROR_REGISTER_CHECK=OK
 ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
 COMMAND_SHA256=ad6946b8ec8ec121652ef576f21296a5f5828f6647c3e2eb85171d41252d478d
-DUPLICATE_FAILED_COMMAND_BLOCKED=false
-EXECUTION_STARTED=true
+DUPLICATE_FAILED_COMMAND_BLOCKED=true
+EXECUTION_STARTED=false
 CHANGE_DECLARED=true
-RESULT_CONTRACT_VALID=false
-RESULT_CONTRACT_STATUS=UNKNOWN
-RESULT_CONTRACT_ERROR=INVALID_CONTRACT:ValueError
-COMMAND_RC=46
-CHANGES_MADE=unknown
-ROLLBACK_STARTED=unknown
+RESULT_CONTRACT_VALID=true
+RESULT_CONTRACT_STATUS=BLOCKED
+RESULT_CONTRACT_ERROR=RUNNER_PREEXECUTION_BLOCK
+COMMAND_RC=
+CHANGES_MADE=false
+ROLLBACK_STARTED=false
 ROLLBACK_RESTORED=null
-MUTATION_OUTCOME=UNKNOWN
+MUTATION_OUTCOME=NO_MUTATION
 SANITIZED=yes
 SECRETS_INCLUDED=no
 PRIVATE_ADDRESSES_INCLUDED=no
-RAW_EVIDENCE_SHA256=9c8ba11ec214d042a71bb25d186a6216ad2b3b968986c144a6e269ee4f09aead
-SANITIZED_OUTPUT_SHA256=9c8ba11ec214d042a71bb25d186a6216ad2b3b968986c144a6e269ee4f09aead
+RAW_EVIDENCE_SHA256=687482d91887acad2dbfc46a5910089087a1a645fdd24335424d3a0d6f03d8d2
+SANITIZED_OUTPUT_SHA256=687482d91887acad2dbfc46a5910089087a1a645fdd24335424d3a0d6f03d8d2
 OUTPUT_BEGIN
-SPB9130_CHANGE={"preflight":{"netbird_active":true,"netbird_version":"0.73.2","networks_list_rc":0,"networks_list_sha":"95a17530163d7fc0","present_ids":["edge-exit-relay-moldova"],"before_route_dev":"wt0","before_table7120":{"rc":0,"has_default_wt0":true,"sha":"47caf134646621d5"},"baseline_connected":3,"baseline_management_connected":false},"change":{"edge-exit-relay-moldova":{"rc":0,"stderr_sha":null}},"verify":{"route_1_1_1_1":{"rc":0,"dev":"eth0","line_hash":"c7b4d700c999f849"},"route_letsencrypt":{"rc":1,"dev":null,"stderr_sha":"bc3a564baee1d4c0"},"tcp_1_1_1_1_443":true,"tcp_letsencrypt_443":true,"tcp_cloudflare_443":true,"wt0_exists":true,"netbird":{"rc":0,"connected":3,"management_connected":false,"daemon_status":"Connected"},"table7120":{"rc":0,"has_default_wt0":false,"sha":null}},"status":"FAIL","changes_made":false,"rollback_started":true,"rollback_restored":true,"rollback":{"started":true,"select":{"edge-exit-relay-moldova":{"rc":0,"stderr_sha":null}},"restored":true,"table7120":{"rc":0,"has_default_wt0":true,"sha":"47caf134646621d5"}}}
-TASK_COMPLETE=true
-TASK_RESULT=FAIL_SPB_VM130_NETBIRD_EXIT_DESELECT
-DECISION=HOLD_SPB_ON_AND_READ_EXACT_ROLLBACK
-HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"SUPPORT-260922-SPB-VM130-NETBIRD-EXIT-DESELECT-9130R1","status":"FAIL","changes_made":false,"rollback_started":true,"rollback_restored":true}
+COMMAND_EXECUTION_BLOCKED=yes
+REASON=EXACT_FAILED_COMMAND_REPEAT
+PREVIOUS_RC=76
+COMMAND_SHA256=ad6946b8ec8ec121652ef576f21296a5f5828f6647c3e2eb85171d41252d478d
+
+Set HOMELAB_ALLOW_REPEAT=1 only after reviewing the previous failure.
 
 OUTPUT_END
 CHAT_OUTPUT_END