baseline: github/main 575579d68ac4bae09f8426a345d4a3eac1e90c67
777 root:root /opt/T3 Code (Beta)/t3code
666 root:root /opt/T3 Code (Beta)/resources.pak
group/other-writable regular files:
73
uid 10001 replaces installed executable:
uid 10002 launches it:
modified by uid 10001; running as uid 10002

pr head: 5210d93eb9f70f22145472b176b635b468753d70
755 root:root /opt/T3 Code (Beta)/t3code
644 root:root /opt/T3 Code (Beta)/resources.pak
755 root:root /opt/T3 Code (Beta)/chrome-sandbox
group/other-writable regular files:
1
uid 10001 repeats replacement:
sh: 1: cannot create /opt/T3 Code (Beta)/t3code: Permission denied
replacement exit status: 2
world-writable regular files after upgrade:
0
remaining group-write permission (root group only):
664 root:root /opt/T3 Code (Beta)/resources/apparmor-profile
extracted PR AppImage world-writable regular files:
0
sandboxed desktop launch: pid 48483; no --no-sandbox flag
renderer command line contains --enable-sandbox
baseline .deb world-writable regular files: 14

real client checks: packaged desktop and Chrome dev web client
provider: Codex gpt-6.1-sol, low reasoning
first turn in both clients: pwd; cat README.md
result: /home/user/permission-verification; permission verification repository
web follow-up: pwd; git status --short
result: working tree clean
packaged desktop reload: existing thread and response restored
blacksmith: focused linux-after-pack test passed
blacksmith: check:changed 15fe2832727893cbdd2214383f9f971474849695 passed format, lint, knip, typecheck 39 packages, 50 tests in 3 files