PR: https://git.cafe/pingdotgg/t3code/pulls/28292
main: 575579d68a
PR head: 2602632166c0b0b455580316869bb5bc79e6aa99
Browser: repository Playwright 1.60.0, /usr/bin/google-chrome, 1440x1000.
One dev server at a time: main 16733/8693, stopped; PR 13773/5733.
Project created via Add project > Local folder > /home/user/t3code.
Real Codex gpt-6.1-sol turn produced "Workspace save verification" proposed plan.
Data copied into PR's isolated .t3 only after main stopped.
Restricted pairing scopes: orchestration:read, orchestration:operate, filesystem:read, access:read, diagnostics:read.
No mocks, fixture records, session atom writes, or generated fake plans.

Browser evaluated the app's actual projectEnvironment.writeFile command and permissionAtom
using its existing appAtomRegistry, catalog and authenticated connection. No state was mocked.

main restricted connection:
  session authenticated=true; permissions do not include filesystem:write
  writeFile.permissionAtom = true
  writeFile.run -> EnvironmentAuthorizationError:
    "The authenticated token is missing required scope: filesystem:write."
  WebSocket projects.writeFile requests = 1
  web Save to workspace menu item aria-disabled = true (existing independent web guard)

PR restricted connection:
  writeFile.permissionAtom = false
  writeFile.run -> EnvironmentAuthorizationError:
    "This connection requires filesystem:write."
  WebSocket projects.writeFile requests = 0
  web Save to workspace menu item aria-disabled = true
  bypassing client guard via live RpcSession.client["projects.writeFile"] -> server error:
    "The authenticated token is missing required scope: filesystem:write."
  denied files absent on disk

main and PR full-access connection:
  permissionAtom = true
  click Plan actions > Save to workspace; enter .t3/verification-plan.md > Save
  observed "Plan saved to workspace"; actual file matches the generated plan

PR neighboring behavior:
  restricted connection Download as markdown works, contents match saved plan
  restricted connection real Codex gpt-6.1-sol follow-up returned "plan remains readable."

Blacksmith focused existing checks:
  vp test run packages/client-runtime/src/state/commandPermissions.test.ts packages/client-runtime/src/state/projectCommands.test.ts apps/server/src/auth/RpcAuthorization.test.ts
  3 files passed; 40 tests passed (19 + 4 + 17).
GitHub CI: all reported non-skipped checks pass at the tested head.

Not verified: native iOS/Android button rendering and taps; no attached device or emulator.
Not verified: desktop shell, other providers, relay/tunnel and multi-environment copy.