verification on 2026-11-01, Linux Boat VM, real Chrome and running dev servers

main: github/main at 8b74a69019
UI: Add project -> Git URL -> git@ssh.dev.azure.com:v3/Fabrikam/Project1/fab_repo -> /home/user/azure-main-repro
real ssh: Permission denied (password,publickey)
real automatic HTTPS retry: fatal: repository https://ssh.dev.azure.com/v3/Fabrikam/Project1/fab_repo/ not found

PR: 03e10e5d60d822da5637422ae7ffd32bb240fa6d
same UI and same SSH URL
real ssh: Permission denied (password,publickey)
real automatic HTTPS retry: could not read Username for https://dev.azure.com: terminal prompts disabled
GIT_TRACE from the server process confirms the exact commands below:
01:47:36.435816 git.c:463               trace: built-in: git clone --progress -- git@ssh.dev.azure.com:v3/Fabrikam/Project1/fab_repo azure-live-fallback
01:47:36.696721 git.c:463               trace: built-in: git clone --progress -- https://dev.azure.com/Fabrikam/Project1/_git/fab_repo azure-live-fallback

neighbor: ordinary HTTPS clone through Add project -> Git URL
https://github.com/octocat/Hello-World.git -> /home/user/github-neighbor-clone
actual checkout HEAD: 7fd1a60 Merge pull request #6 from Spaceghost/patch-1
actual origin: https://github.com/octocat/Hello-World.git

neighbor: synchronous sourceControl.cloneRepository RPC, protocol=ssh
real SSH authentication rejection; no HTTPS retry and no fallback text in the response.
GIT_TRACE confirms one clone command for this destination:
01:49:16.974102 git.c:463               trace: built-in: git clone --progress -- git@ssh.dev.azure.com:v3/Fabrikam/Project1/fab_repo azure-direct-explicit-ssh

provider: created azure-protocol-verification through New project with remote publishing unchecked.
Selected Codex GPT-6.1-Sol in the real web composer.
Sent: Read README.md and run git status --short in this repository. Reply with the project name and the exact status output. Do not change any files.
Completed in 7.6 seconds: project azure-protocol-verification; git status --short empty.

pre-existing adjacent issue: projectClone.start with protocol=ssh still falls back.
ProjectCloneTracker.ts passes only remoteUrl and destinationPath to cloneRepository.
The same code exists on github/main. No PR code was changed for this separate issue.

unverified: successful Azure clone and credential helper (no Azure credentials), cross-machine dialog (one environment), Electron shell, native mobile, macOS and Windows.

checks: blacksmith vp run check:changed b823dcf5c6dab2fe489bc7ac4d448436acc6fa39
passed format, lint, knip 1/2, knip 2/2, GraphQL, 33 package typechecks and 51 tests in 3 files.