PR #30018 live verification, 2026-11-03, Linux Boat VM
main: cefb544af3c98224874419198c0359b652ca3c94
PR: 4f81d7e8be6413e862aef544c5e9abed09f39440

Started vp run dev in the background with isolated T3 state.
Added a real local git project through the UI and submitted a Codex
 gpt-6.1-sol prompt on both revisions:
  Reply with exactly: desktop preview verification ready. Do not use tools or change files.
Both completed with: desktop preview verification ready.

Stopped the web-only backend before launching the matching desktop build
with the Vite renderer and one Electron-owned backend. Desktop/server bundles
were built through blacksmith-check, downloaded, and run locally.
Playwright from the repo dependencies drove /usr/bin/google-chrome for web
and the real Electron renderer through CDP for the desktop preview UI.
No mocked responses, demo data, virtual authenticators, or UA overrides.

Clicked Browser, entered https://login.microsoftonline.com/, opened Sign-in options.
main: Continue with GitHub; Sign in to a work or school account.
PR: Face, fingerprint, PIN or security key; Continue with GitHub;
    Sign in to a work or school account.
Passkey option description on PR: Use your device to sign in with a passkey.

Network.requestWillBeSentExtraInfo captured actual outgoing headers.
Native UA:
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) T3CodeDev/0.0 Chrome/152.0.7977.169 Electron/44.10.0 Safari/537.36
main Microsoft sign-in request UA retains Electron/44.10.0.
PR login.microsoftonline.com, login.microsoft.com and login.live.com:
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) T3CodeDev/0.0 Chrome/152.0.7977.169 Safari/537.36
Both revisions: navigator.userAgent retains Electron/44.10.0.
Both revisions: https://httpbin.org/user-agent echoes native UA including Electron/44.10.0.
PR: www.office.com redirects, Microsoft CDN, telemetry and fpt.live.com
requests retain native UA. Microsoft sign-in pages load normally.
Preview Back and Forward worked and restored sign-in state.

blacksmith-check: vp test run apps/desktop/src/preview/BrowserSession.test.ts
1 file passed; 10 tests passed.
Existing CI: 30 successful, 0 failing, 0 pending at inspected head.

Not verified: completing sign-in with a registered passkey, Windows Hello,
Windows 1Password, macOS authenticators, native mobile, full Cloudflare
Turnstile challenge. No enrolled account or physical authenticator is available;
PublicKeyCredential.isUserVerifyingPlatformAuthenticatorAvailable() is false.