diff --git a/files/ansible-playbooks/sot-updater-upgradecmd.yml b/files/ansible-playbooks/sot-updater-upgradecmd.yml
index d80a167..24d4ac1 100644
--- a/files/ansible-playbooks/sot-updater-upgradecmd.yml
+++ b/files/ansible-playbooks/sot-updater-upgradecmd.yml
@@ -238,6 +238,7 @@
         - nb_script.stat.exists
         - nb_ip_changed | default(false)
         - cloud_ok | default(true)
+        - (nb_preflight.rc | default(1)) == 0
       delegate_to: localhost
       uri:
         url: "http://{{ rmq_host }}:{{ rmq_port }}/api/exchanges/app/deviceconfig.delayed/publish"
@@ -266,6 +267,7 @@
         - nb_script.stat.exists
         - nb_ip_changed | default(false)
         - cloud_ok | default(true)
+        - (nb_preflight.rc | default(1)) == 0
       delegate_to: localhost
       ansible.builtin.debug:
         msg:
@@ -279,6 +281,7 @@
         - nb_script.stat.exists
         - nb_ip_changed | default(false)
         - cloud_ok | default(true)
+        - (nb_preflight.rc | default(1)) == 0
       meta: end_host
 
     # --- If IP did not change → optional 1s pause, then continue normally ---