runtime: publish SUPPORT-260923-SPB-TLS-BRIDGE-DIRECT-PROCESS-HELPER-RCA-9173R1

2026-09-23 04:13:18 +00:00
parent 3dfead0387
commit fc5d13740d
4 changed files with 180 additions and 60 deletions
@@ -0,0 +1,38 @@
+{
+  "schema_version": 1,
+  "channel": "homelab-runtime",
+  "command_id": "SUPPORT-260923-SPB-TLS-BRIDGE-DIRECT-PROCESS-HELPER-RCA-9173R1",
+  "status": "OK",
+  "rc": 0,
+  "host": "pve01",
+  "mode": "read-only",
+  "component": "spb-tls-bridge-direct-process-helper-rca",
+  "started_at_utc": "2026-09-23T04:13:17Z",
+  "finished_at_utc": "2026-09-23T04:13:17Z",
+  "reference_register_checked": true,
+  "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66",
+  "error_register_checked": true,
+  "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0",
+  "command_sha256": "e2fcb351133f6e24de671c61553874253ee3f6d3267fb5a2668d143780bba330",
+  "duplicate_failed_command_blocked": false,
+  "block_reason": null,
+  "execution_started": true,
+  "change_declared": false,
+  "result_contract_valid": true,
+  "result_contract_status": null,
+  "result_contract_error": null,
+  "command_rc": 0,
+  "changes_made": false,
+  "rollback_started": false,
+  "rollback_restored": null,
+  "mutation_outcome": "NO_MUTATION",
+  "sanitized": true,
+  "secrets_included": false,
+  "private_addresses_included": false,
+  "raw_evidence_retained_locally": true,
+  "raw_evidence_sha256": "bbb62535c4a8482f77a7d0e14f69a4d619aabd8924ab43350f4174f8b9e0b8a5",
+  "sanitized_output_sha256": "bbb62535c4a8482f77a7d0e14f69a4d619aabd8924ab43350f4174f8b9e0b8a5",
+  "output_truncated_in_json": false,
+  "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
+  "output": "DIRECT_PROCESS_HELPER_RCA_BEGIN=true\nPREDECESSOR=SUPPORT-260923-SPB-TLS-BRIDGE-DNS-DPAPI-HELPER-RCA-9172R1\nPREDECESSOR_STATUS=OK\nPREDECESSOR_CHANGES_MADE=false\n9172_DNS_A_CANDIDATE_COUNT=1\n9172_DPAPI_DECRYPTABLE_CANDIDATE_COUNT=1\n9172_PINNED_PROBE_WRAPPER_RC=125\n9172_WRAPPER_RCA=START_JOB_NO_RESULT_NOT_SPB_SSH_REJECTION\nROLLBACK_FORENSIC_9148R3=ROLLBACK_CLEAN_BASELINE_OK\nBRIDGE_AUTHORITY=SUPPORT-260923-SPB-TLS-BRIDGE-EXEC-9164R1\nBRIDGE_AUTHORITY_ROOT_ARRAY_SELECTED=true\nBRIDGE_AUTHORITY_GUEST_RC=1\nMUTATION_BOUNDARY=READ_ONLY_DIRECT_PROCESS_PINNED_SPB_DPAPI_SUDO_HELPER_SOURCE;NO_SPB_WRITE;NO_VM130_WRITE;NO_DNS_WRITE;NO_CERT_WRITE;NO_NGINX_WRITE\nPLINK_PRESENT=true\nDNS_A_CANDIDATE_COUNT=1\nDNS_A_CANDIDATE_SHA16=6d6149f42864ce03\nSPB_PROCESS_PROBE_01=HOST_SHA16:6d6149f42864ce03|RC:0|STDERR_SHA16:e3b0c44298fc1c14\nUNIQUE_PINNED_SPB_MATCH_COUNT=1\nPINNED_SPB_MATCH=HOST_SHA16:6d6149f42864ce03|UID:1000|USER:edgeadmin|REMOTE_HOST_SHA256:98c64870e2ea4be52f1b83daa86c1b318432c35247d251d81054881533c40eb1|SUDO_N_RC:1\nDPAPI_NAME_FILTER_FILE_COUNT=275\nDPAPI_DECRYPTABLE_CANDIDATE=PATH_SHA16:b8eafdb29540ea01|NAME_SHA16:46e753f93ecebd6d|METHOD:SECURESTRING_DPAPI\nDPAPI_DECRYPTABLE_CANDIDATE_COUNT=1\nDPAPI_SUDO_VALIDATION_RC=0\nDPAPI_SUDO_VALIDATION_STDERR_SHA16=01ba4719c80b6fe9\nSPB_HELPER_READ_RC=0\nSPB_HELPER_READ_STDERR_SHA16=01ba4719c80b6fe9\nSPB_HELPER_EVIDENCE=SPB_ROOT_UID=0\nSPB_HELPER_EVIDENCE=HELPER_FOUND=false\nDPAPI_SUDO_VALID_COUNT=1\nSPB_HELPER_READ_PERFORMED=true\nDIRECT_PROCESS_HELPER_RCA_DECISION=DIRECT_PROCESS_PINNED_SPB_DPAPI_HELPER_RCA_COMPLETE\nDIRECT_PROCESS_HELPER_RCA_COMPLETE=true\nCHANGES_MADE=NO\nTASK_COMPLETE=true\nTASK_RESULT=PASS_SPB_TLS_BRIDGE_DIRECT_PROCESS_HELPER_RCA\nDECISION=READ_EXACT_9173_THEN_FIX_ONLY_PROVEN_POSTGUARD_BLOCKER\nNEXT_GATE=EXACT_9173_HELPER_SOURCE_OR_PRECISE_BLOCKER\nHOMELAB_RESULT_CONTRACT={\"version\":1,\"command_id\":\"SUPPORT-260923-SPB-TLS-BRIDGE-DIRECT-PROCESS-HELPER-RCA-9173R1\",\"status\":\"OK\",\"changes_made\":false,\"rollback_started\":false,\"rollback_restored\":null}\n"
+}
@@ -0,0 +1,70 @@
+CHAT_OUTPUT_BEGIN
+COMMAND_ID=SUPPORT-260923-SPB-TLS-BRIDGE-DIRECT-PROCESS-HELPER-RCA-9173R1
+STATUS=OK
+RC=0
+HOST=pve01
+MODE=read-only
+COMPONENT=spb-tls-bridge-direct-process-helper-rca
+REFERENCE_REGISTER_CHECK=OK
+REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
+ERROR_REGISTER_CHECK=OK
+ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
+COMMAND_SHA256=e2fcb351133f6e24de671c61553874253ee3f6d3267fb5a2668d143780bba330
+DUPLICATE_FAILED_COMMAND_BLOCKED=false
+EXECUTION_STARTED=true
+CHANGE_DECLARED=false
+RESULT_CONTRACT_VALID=true
+RESULT_CONTRACT_STATUS=NOT_APPLICABLE
+RESULT_CONTRACT_ERROR=NONE
+COMMAND_RC=0
+CHANGES_MADE=false
+ROLLBACK_STARTED=false
+ROLLBACK_RESTORED=null
+MUTATION_OUTCOME=NO_MUTATION
+SANITIZED=yes
+SECRETS_INCLUDED=no
+PRIVATE_ADDRESSES_INCLUDED=no
+RAW_EVIDENCE_SHA256=bbb62535c4a8482f77a7d0e14f69a4d619aabd8924ab43350f4174f8b9e0b8a5
+SANITIZED_OUTPUT_SHA256=bbb62535c4a8482f77a7d0e14f69a4d619aabd8924ab43350f4174f8b9e0b8a5
+OUTPUT_BEGIN
+DIRECT_PROCESS_HELPER_RCA_BEGIN=true
+PREDECESSOR=SUPPORT-260923-SPB-TLS-BRIDGE-DNS-DPAPI-HELPER-RCA-9172R1
+PREDECESSOR_STATUS=OK
+PREDECESSOR_CHANGES_MADE=false
+9172_DNS_A_CANDIDATE_COUNT=1
+9172_DPAPI_DECRYPTABLE_CANDIDATE_COUNT=1
+9172_PINNED_PROBE_WRAPPER_RC=125
+9172_WRAPPER_RCA=START_JOB_NO_RESULT_NOT_SPB_SSH_REJECTION
+ROLLBACK_FORENSIC_9148R3=ROLLBACK_CLEAN_BASELINE_OK
+BRIDGE_AUTHORITY=SUPPORT-260923-SPB-TLS-BRIDGE-EXEC-9164R1
+BRIDGE_AUTHORITY_ROOT_ARRAY_SELECTED=true
+BRIDGE_AUTHORITY_GUEST_RC=1
+MUTATION_BOUNDARY=READ_ONLY_DIRECT_PROCESS_PINNED_SPB_DPAPI_SUDO_HELPER_SOURCE;NO_SPB_WRITE;NO_VM130_WRITE;NO_DNS_WRITE;NO_CERT_WRITE;NO_NGINX_WRITE
+PLINK_PRESENT=true
+DNS_A_CANDIDATE_COUNT=1
+DNS_A_CANDIDATE_SHA16=6d6149f42864ce03
+SPB_PROCESS_PROBE_01=HOST_SHA16:6d6149f42864ce03|RC:0|STDERR_SHA16:e3b0c44298fc1c14
+UNIQUE_PINNED_SPB_MATCH_COUNT=1
+PINNED_SPB_MATCH=HOST_SHA16:6d6149f42864ce03|UID:1000|USER:edgeadmin|REMOTE_HOST_SHA256:98c64870e2ea4be52f1b83daa86c1b318432c35247d251d81054881533c40eb1|SUDO_N_RC:1
+DPAPI_NAME_FILTER_FILE_COUNT=275
+DPAPI_DECRYPTABLE_CANDIDATE=PATH_SHA16:b8eafdb29540ea01|NAME_SHA16:46e753f93ecebd6d|METHOD:SECURESTRING_DPAPI
+DPAPI_DECRYPTABLE_CANDIDATE_COUNT=1
+DPAPI_SUDO_VALIDATION_RC=0
+DPAPI_SUDO_VALIDATION_STDERR_SHA16=01ba4719c80b6fe9
+SPB_HELPER_READ_RC=0
+SPB_HELPER_READ_STDERR_SHA16=01ba4719c80b6fe9
+SPB_HELPER_EVIDENCE=SPB_ROOT_UID=0
+SPB_HELPER_EVIDENCE=HELPER_FOUND=false
+DPAPI_SUDO_VALID_COUNT=1
+SPB_HELPER_READ_PERFORMED=true
+DIRECT_PROCESS_HELPER_RCA_DECISION=DIRECT_PROCESS_PINNED_SPB_DPAPI_HELPER_RCA_COMPLETE
+DIRECT_PROCESS_HELPER_RCA_COMPLETE=true
+CHANGES_MADE=NO
+TASK_COMPLETE=true
+TASK_RESULT=PASS_SPB_TLS_BRIDGE_DIRECT_PROCESS_HELPER_RCA
+DECISION=READ_EXACT_9173_THEN_FIX_ONLY_PROVEN_POSTGUARD_BLOCKER
+NEXT_GATE=EXACT_9173_HELPER_SOURCE_OR_PRECISE_BLOCKER
+HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"SUPPORT-260923-SPB-TLS-BRIDGE-DIRECT-PROCESS-HELPER-RCA-9173R1","status":"OK","changes_made":false,"rollback_started":false,"rollback_restored":null}
+
+OUTPUT_END
+CHAT_OUTPUT_END