pr 32664 runtime verification main: 6c9adfb2739205244b84e607736f6fd8b4611e69 pr: be6b3710073abc4e2b116c8995531e0d8d7251e9 linux x64, node v24.22.1, electron 44.10.1 method installed both checkouts with vp i. exercised the unmodified production entry point: cd apps/desktop && timeout 600 vp run ensure:electron no mocked subprocesses, generated zip, or fake provider. for the mismatch case only, replaced the installed dependency's linux-x64 checksum with 64 zeroes, keeping the real github download url and real archive bytes. restored the dependency checksum file after the rejection. main and pr both received the same archive sha256: 2be868b71b0aa71f30e6b5567a106a35a049385e963183c074aad1975ead5167 main mismatch: installer rejects, fallback installs anyway ~/apps/desktop$ node scripts/ensure-electron-runtime.mjs ⊘ cache disabled Error: Generated checksum for "electron-v44.10.1-linux-x64.zip" did not match expected checksum. at Hash. (/home/user/main/node_modules/.pnpm/sumchecker@3.0.1_supports-color@8.1.1/node_modules/sumchecker/index.js:133:20) at Hash.emit (node:events:514:28) at emitReadable_ (node:internal/streams/readable:855:12) at onEofChunk (node:internal/streams/readable:833:5) at readableAddChunkPushByteMode (node:internal/streams/readable:474:5) at Readable.push (node:internal/streams/readable:400:5) at node:internal/streams/transform:141:12 at Hash._flush (node:internal/crypto/hash:183:3) at Hash.final [as _final] (node:internal/streams/transform:128:10) at prefinish (node:internal/streams/writable:918:14) electron install.js failed with exit code 1, downloading with curl instead /home/user/main/node_modules/.pnpm/electron@44.10.1_supports-color@8.1.1/node_modules/electron/dist/electron exit=0 pr mismatch: installer and fallback both reject ~/apps/desktop$ node scripts/ensure-electron-runtime.mjs ⊘ cache disabled Error: Generated checksum for "electron-v44.10.1-linux-x64.zip" did not match expected checksum. at Hash. (/home/user/t3code/node_modules/.pnpm/sumchecker@3.0.1_supports-color@8.1.1/node_modules/sumchecker/index.js:133:20) at Hash.emit (node:events:514:28) at emitReadable_ (node:internal/streams/readable:855:12) at onEofChunk (node:internal/streams/readable:833:5) at readableAddChunkPushByteMode (node:internal/streams/readable:474:5) at Readable.push (node:internal/streams/readable:400:5) at node:internal/streams/transform:141:12 at Hash._flush (node:internal/crypto/hash:183:3) at Hash.final [as _final] (node:internal/streams/transform:128:10) at prefinish (node:internal/streams/writable:918:14) electron install.js failed with exit code 1, downloading with curl instead file:///home/user/t3code/apps/desktop/scripts/ensure-electron-runtime.mjs:146 throw new Error(`Checksum mismatch for ${fileName}: expected ${expected}, got ${actual}`); ^ Error: Checksum mismatch for electron-v44.10.1-linux-x64.zip: expected 0000000000000000000000000000000000000000000000000000000000000000, got 2be868b71b0aa71f30e6b5567a106a35a049385e963183c074aad1975ead5167 at verifyElectronZip (file:///home/user/t3code/apps/desktop/scripts/ensure-electron-runtime.mjs:146:11) at downloadElectronRuntime (file:///home/user/t3code/apps/desktop/scripts/ensure-electron-runtime.mjs:168:5) at ensureElectronRuntime (file:///home/user/t3code/apps/desktop/scripts/ensure-electron-runtime.mjs:207:7) at file:///home/user/t3code/apps/desktop/scripts/ensure-electron-runtime.mjs:231:24 at ModuleJob.run (node:internal/modules/esm/module_job:561:25) at async node:internal/modules/esm/loader:647:26 at async asyncRunEntryPointWithESMLoader (node:internal/modules/run_main:101:5) Node.js v24.22.1 exit=1 post-rejection filesystem check: dist exists = false valid fallback: restored checksums, removed dist, set ELECTRON_MIRROR=http://127.0.0.1:1/ and electron_config_cache=/tmp/pr32664-no-cache to make primary unavailable. real curl github download succeeds: ~/apps/desktop$ node scripts/ensure-electron-runtime.mjs ⊘ cache disabled TypeError: fetch failed electron install.js failed with exit code 1, downloading with curl instead /home/user/t3code/node_modules/.pnpm/electron@44.10.1_supports-color@8.1.1/node_modules/electron/dist/electron exit=0 existing installed runtime, no download needed: ~/apps/desktop$ node scripts/ensure-electron-runtime.mjs ⊘ cache disabled /home/user/t3code/node_modules/.pnpm/electron@44.10.1_supports-color@8.1.1/node_modules/electron/dist/electron exit=0 normal installer after removing dist and path.txt, original checksums, default mirror/cache: ~/apps/desktop$ node scripts/ensure-electron-runtime.mjs ⊘ cache disabled /home/user/t3code/node_modules/.pnpm/electron@44.10.1_supports-color@8.1.1/node_modules/electron/dist/electron exit=0 installed binary: electron --no-sandbox --version = v44.10.1 blacksmith-check: vp i && cd apps/desktop && vp test run scripts/ensure-electron-runtime.test.mjs 4 tests passed, 1 file passed real client/provider check started vp run dev in the background with isolated --home-dir /home/user/t3code/.t3 used repository Playwright and /usr/bin/google-chrome added /home/user/t3code through Add project > Local folder selected Codex GPT-6.1-Sol in the model picker and submitted a real turn provider ran git rev-parse HEAD and git status --short client rendered be6b3710073abc4e2b116c8995531e0d8d7251e9 and clean worktree this is a nearby app smoke check, not the proof of the bootstrap checksum gate limits macOS ditto, Windows extraction, packaged desktop and native mobile not exercised no actual malicious or corrupted upstream download: checksum expectation was changed locally