PR #23437 real environment verification, 2026-10-31, Linux Boat VM
main: 80a2351fcb909034e65a512dfabeb3cdfd367762
PR: 741f71d0f820b9c89075fa40ae386a871ee92ec9

Setup: real sshd, 127.0.0.1:22222, publickey/password advertised.
Authorized ED25519 key loaded into real ssh-agent with ssh-add -c.
$ ssh -o BatchMode=yes t3-agent-verify true
sign_and_send_pubkey: signing failed for ED25519 "/tmp/ssh-verification/key" from agent: agent refused operation
user@127.0.0.1: Permission denied (publickey,password).
sshd: Accepted key ED25519 ... found at /tmp/ssh-verification/key.pub:1
sshd: Postponed publickey for user ... [preauth]

main actual Electron renderer, settings > environments > add environment > SSH:
SSH verification required dialog opened for user@t3-agent-verify.
Cancelled; repeated attempt opened the same dialog.

PR exact head, identical SSH host/key/agent:
Could not prepare the SSH environment: ... SshCommandError: sign_and_send_pubkey: signing failed ... from agent: agent refused operation ... Permission denied (publickey,password).
No SSH verification dialog. Repeated attempt returned the same error without a prompt.

Neighbor: separate unauthorized ED25519 key, IdentityAgent none:
SSH verification required dialog opened for user@t3-rejected-verify.
Cancelled successfully.

Recovery:
$ ssh-add -d /tmp/ssh-verification/key
$ ssh-add /tmp/ssh-verification/key
$ ssh -o BatchMode=yes t3-agent-verify 'printf SSH_AGENT_RECOVERED; printf "\n"'
SSH_AGENT_RECOVERED
exit 0
PR desktop retry: sshd records Accepted publickey and Starting session: command.
Then remote runtime archive download fails: curl: (22) The requested URL returned error: 404.
Full remote bootstrap not verified.

Actual Google Chrome web client, project added through UI pointing at /home/user/ssh-verify-project.
Real Codex gpt-6.1-sol turn read README.md, ran pwd and git status --short, completed:
ssh verification workspace
SSH_VERIFY_CODEX_OK
Second real turn executed ssh -o BatchMode=yes t3-agent-verify 'printf SSH_AGENT_RECOVERY_PROVIDER_OK':
stdout: SSH_AGENT_RECOVERY_PROVIDER_OK (no trailing newline)
exit code: 0

Blacksmith:
vp test run packages/ssh/src/auth.test.ts packages/ssh/src/tunnel.test.ts
2 files passed, 16 tests passed.
vp run check:changed d92c437baa19409f99416a44f748f148f4317c65
format, lint, knip, typecheck (5 packages), tests (3 files, 17 tests): pass.
Initial check:changed could not find merge base in shallow worker snapshot.
Fetched contributor head with depth 3, then reran successfully against PR comparison base.

No source edits, commits, pushes, labels, or merge actions.