PR 27756 live verification, 2026-10-31, Linux Boat VM
baseline github/main: 15fe283272
original PR head: fec8ad3ce0be2854146f59822dfb0c4c4d56041b
verified follow-up head: 805aaa2ea8a09d6f5e382235ae61cbcdb3f1ea31

main: vp i; background vp run dev, isolated /home/user/main/.t3
client: repo Playwright 1.60.0 + /usr/bin/google-chrome, 1440x1000
created a local-folder project pointing to /home/user/t3code using the app.
configured a 1Password provider using Settings > Secrets (no authenticated vault available).
Settings > Source control > GitHub: only a pasted token field, no source selector.
Codex gpt-6.1-sol real web-client turn ran git commands: repository /home/user/t3code; clean.
main server stopped before PR server started.

PR: vp i; background vp run dev --home-dir /home/user/t3code/.t3
copied only this task's app-created state from main; no fixtures/mocks/demo data.
Settings > Source control > GitHub: selected Verification vault, entered op://Verification/GitHub/token, saved.
Reload preserved the reference. Another host's real literal token remained masked and saved.
Remove returned the field to Not set. Saving the real GH_TOKEN as a literal authenticated GitHub via its API.
Replacing the literal with an unreadable reference fell back to the real GH_TOKEN.
Original head incorrectly labeled fallback as 'Using the token saved in Settings'.
Expanded existing discovery test: unreadable case failed for that exact source description.
Follow-up uses resolved settings in discovery; same test passed.
Restarted app; saved reference + authenticated GH_TOKEN fallback label verified again.
Codex gpt-6.1-sol real web-client turn on final head:
  git rev-parse HEAD -> 805aaa2ea8a09d6f5e382235ae61cbcdb3f1ea31
  git status --short -> no output; clean

Blacksmith checks:
vp test run apps/server/src/sourceControl/sourceControlHostSecrets.test.ts apps/server/src/serverSettings.test.ts apps/server/src/provider/ProviderInstanceRegistry.test.ts packages/source-control-github/src/server/gitHubDiscovery.test.ts
  4 files, 83 tests passed on original PR head.
vp run check:changed HEAD (follow-up files against original PR head)
  format, lint, knip, GraphQL, typecheck (11 packages), 44 tests passed.
Default check:changed lacked a merge base in Blacksmith's source snapshot; explicit HEAD used to scope the follow-up.

Not verified: successful 1Password reads/cache refresh/rotation (op CLI and authenticated vault unavailable), app sign-in fallback (no app session), native desktop/iOS/Android, other OSes, Enterprise server and other external forges. No performance claim.