{
  "schema_version": 1,
  "channel": "homelab-runtime",
  "command_id": "NEWFI-260908-A-STAGINGEDGE-EXTERNALTLS-RCA41",
  "status": "OK",
  "rc": 0,
  "host": "pve01",
  "mode": "read-only",
  "component": "newfi-stagingedge-certset-collector-rca-v5",
  "started_at_utc": "2026-09-08T17:58:26Z",
  "finished_at_utc": "2026-09-08T17:58:29Z",
  "reference_register_checked": true,
  "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66",
  "error_register_checked": true,
  "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0",
  "command_sha256": "2e772b629d122fdb15caf7959e5984282e2ebf61276c17abbc413e565351d67f",
  "duplicate_failed_command_blocked": false,
  "block_reason": null,
  "execution_started": true,
  "change_declared": false,
  "result_contract_valid": true,
  "result_contract_status": null,
  "result_contract_error": null,
  "command_rc": 0,
  "changes_made": false,
  "rollback_started": false,
  "rollback_restored": null,
  "mutation_outcome": "NO_MUTATION",
  "sanitized": true,
  "secrets_included": false,
  "private_addresses_included": false,
  "raw_evidence_retained_locally": true,
  "raw_evidence_sha256": "5143a47507dc7a21f07db8a7e8f12a6df970a9ec65f684f7a29204d4b06b7a9d",
  "sanitized_output_sha256": "5143a47507dc7a21f07db8a7e8f12a6df970a9ec65f684f7a29204d4b06b7a9d",
  "output_truncated_in_json": false,
  "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
  "output": "ERROR_REGISTER_CHECK=OK\nREFERENCE_CHECK=OK\nAUTHORITY_CHECK_SCOPE=READABILITY_ONLY_INCIDENTS_NOT_CLOSED\nNEWFI41_RUNNER_SHA256=b248a4c32c9cc64e5747e7dce6c7fc0a23f5124a77c71ce72e27a81aceae9d2d\nNEWFI41_TRUST_FILE_PRESENT=true\nNEWFI41_TRUST_FILE_SHA256=5ff80132df401240519f48091ed62c139183c325000ef7dd253e7f676a539b2c\nNEWFI41_TRUSTED_NETBIRD_IDENTITY_MARKER_PRESENT=true\nNEWFI41_PUBLIC_VPS_REJECTED_MARKER_PRESENT=false\nNEWFI41_KNOWN_HOSTS_SHA256_BEFORE=ab01de61ca5030ad158f1aef377364100531473de1e10a529089174f6890d735\nNEWFI41_NETBIRD_JSON_RC=0\nNEWFI41_NETBIRD_JSON_EDGE_IPV4_COUNT=0\nNEWFI41_NETBIRD_DETAIL_RC=0\nNEWFI41_NETBIRD_DETAIL_EDGE_IPV4_COUNT=1\nNEWFI41_GETENT_EDGEVM_RC=0\nNEWFI41_GETENT_EDGEVM_IPV4_COUNT=1\nNEWFI41_SSH_G_EDGEVM_RC=0\nNEWFI41_SSH_G_EDGEVM_IPV4_COUNT=0\nNEWFI41_EDGE_CANDIDATE_IPV4_COUNT=4\nNEWFI41_LIVE_ED25519_MATCHES_EXISTING_KNOWN_HOST_COUNT=4\nNEWFI41_EDGE_SSH_SUCCESS_COUNT=1\nNEWFI41_TRUSTED_NETBIRD_IDENTITY=edge-vm\nNEWFI41_EDGE_SSH_SERVER_IP_SHA256=5649415146501fa3dc7b2e08f469ef80b6b04e46b86079acd21229eb875e9440\nNEWFI41_EDGE_SSH_HOSTNAME_SHA256=ebb24cf2960c2243b155740605cba8127cedb6e016de2d44b914019d3fdbe085\nNEWFI41_EDGE_SSH_HOSTNAME_EDGEVM=true\nNEWFI41_EDGE_SSH_TRUST=PASS\nNEWFI41_EDGE_SSH_USER=debian\nNEWFI41_VM211_QGA_SCOPE=DEFERRED_TO_FINAL_CLOSURE_ALREADY_PROVEN_BY_APPLY34_AND_PREFLIGHT20\nNEWFI41_EDGE_IMAGE_RAW_SHA256=d16df105013397a10fa5200e967d82c9e9144b1e81737fe30f91165f65a35402\nNEWFI41_EDGE_IMAGE_EQUIVALENT=true\nNEWFI41_EDGE_HEALTH=healthy\nNEWFI41_NGINX_TEST_RC=0\nNEWFI41_PROD_ROUTE_SHA256=dd443098bf4452f629597e9dd5cf26f844b2a6a64e6882ee401bb6925a6281b0\nNEWFI41_STAGE_ROUTE_SHA256=5d893ac76690ef5916403fd40d512c4aa49771f238bdbcbf93099c87e294e392\nNEWFI41_ACTIVE_STAGE_SERVER_NAME_COUNT=2\nNEWFI41_ACTIVE_STAGE_CERT_REF=true\nNEWFI41_STAGE_ROUTE_SERVER_NAME=true\nNEWFI41_STAGE_ROUTE_PROD_RESIDUE=false\nNEWFI41_STAGE_ROUTE_CERT_REF=true\nNEWFI41_STAGE_ROUTE_KEY_REF=true\nNEWFI41_STAGE_CERT_CN=newfi-staging.gram1.ru\nNEWFI41_STAGE_CERT_SAN_OK=true\nNEWFI41_STAGE_CERT_FP=DC4C504F85E7CD803996BDC84CA2276E1AAE6C0A8FF6E7029CEB589C53FE2394\nNEWFI41_LOOPBACK_STAGE_CN=newfi-staging.gram1.ru\nNEWFI41_LOOPBACK_STAGE_FP=DC4C504F85E7CD803996BDC84CA2276E1AAE6C0A8FF6E7029CEB589C53FE2394\nNEWFI41_LOOPBACK_STAGE_FP_MATCH_FILE=true\nNEWFI41_LOOPBACK_STAGE_HTTP_RC=0\nNEWFI41_LOOPBACK_STAGE_HTTP=503\nNEWFI41_LOOPBACK_CHAT_CN=chat.gram1.ru\nNEWFI41_LOOPBACK_CHAT_FP=17C9572BF00B99ED6EDE780A0A0AA9E3D74A6211066B47C9A4D4811A4573E4B3\nNEWFI41_LOOPBACK_GIT_CN=git.gram1.ru\nNEWFI41_LOOPBACK_GIT_FP=707ED656033C03C4B42FDED83F9700C10CEFFD2D2E2D98A756C8B19CDF1DAB63\nNEWFI41_INTERFACE_STAGE_TLS_COUNT=12\nNEWFI41_TRUSTED_EDGE_INTERNAL_STAGE_OK=true\nNEWFI41_PUBLIC_HAIRPIN_FORENSIC_ONLY=true\nNEWFI41_PUBLIC_STAGE_TLS_OK=true\nNEWFI41_PUBLIC_STAGE_TLS_RC=0\nNEWFI41_PUBLIC_STAGE_CN=chat.gram1.ru\nNEWFI41_PUBLIC_STAGE_FP=2AE225ABE13B04C25C2CBA36332F4DE326AEC5600552C2ACAA2F1D857B4AF074\nNEWFI41_PUBLIC_STAGE_SAN_OK=false\nNEWFI41_PUBLIC_STAGE_HTTP_RC=0\nNEWFI41_PUBLIC_STAGE_HTTP=503\nNEWFI41_PUBLIC_CHAT_TLS_OK=true\nNEWFI41_PUBLIC_CHAT_TLS_RC=0\nNEWFI41_PUBLIC_CHAT_CN=chat.gram1.ru\nNEWFI41_PUBLIC_CHAT_FP=2AE225ABE13B04C25C2CBA36332F4DE326AEC5600552C2ACAA2F1D857B4AF074\nNEWFI41_PUBLIC_CHAT_HTTP_RC=0\nNEWFI41_PUBLIC_CHAT_HTTP=302\nNEWFI41_PUBLIC_GIT_TLS_OK=true\nNEWFI41_PUBLIC_GIT_TLS_RC=0\nNEWFI41_PUBLIC_GIT_CN=git.gram1.ru\nNEWFI41_PUBLIC_GIT_FP=ECB69D0FA839FED04DC23EE243F9F8673CBFCD0A0088BFD3EF7D8B943314D6CB\nNEWFI41_PUBLIC_GIT_HTTP_RC=0\nNEWFI41_PUBLIC_GIT_HTTP=200\nNEWFI41_PRODUCTION_HTTPS_RC=0\nNEWFI41_PRODUCTION_HTTPS_HTTP=200\nNEWFI41_KNOWN_HOSTS_SHA256_AFTER=ab01de61ca5030ad158f1aef377364100531473de1e10a529089174f6890d735\nNEWFI41_KNOWN_HOSTS_UNCHANGED=true\nNEWFI41_TRUSTED_EDGE_STAGE_SELF_CONSISTENT=true\nNEWFI41_PUBLIC_STAGE_CERT_MATCHES_TRUSTED_STAGE=false\nNEWFI41_PUBLIC_STAGE_CERT_EQUALS_PUBLIC_CHAT=true\nNEWFI41_PUBLIC_STAGE_CERT_EQUALS_TRUSTED_EDGE_CHAT=false\nNEWFI41_PUBLIC_CHAT_CERT_MATCHES_TRUSTED_EDGE_CHAT=false\nNEWFI41_PUBLIC_GIT_CERT_MATCHES_TRUSTED_EDGE_GIT=false\nNEWFI41_PUBLIC_STAGE_CN=chat.gram1.ru\nNEWFI41_PUBLIC_CHAT_CN=chat.gram1.ru\nNEWFI41_PUBLIC_GIT_CN=git.gram1.ru\nNEWFI41_EXTERNAL_WEB_EVIDENCE_CONTEXT=INDEPENDENT_TLS_CHECK_REPORTED_CHAT_CN_MISMATCH_AND_MULTI_NODE_HTTP_503\nNEWFI41_DECISION=HOLD_PUBLIC_INGRESS_CERT_SET_DIFFERS_FROM_TRUSTED_EDGE_STAGING_NOT_DEPLOYED_THERE\nNEWFI41_CHANGES_MADE=false\nNEWFI41_MUTATION_SCOPE=NONE_READ_ONLY\nNEWFI41_RCA_EXECUTION=PASS\n"
}