PR #22835 runtime verification, 2026-10-28, Linux Boat VM
Target: https://git.cafe/pingdotgg/t3code/pulls/22835
Head: e1ea6752659d932f460138cbc239eb76e7e70d71
Result: changed desktop permission behavior UNVERIFIED. No source changes.

Preflight:
cafe pr list --repo pingdotgg/t3code --state open --head fix/preview-loopback-permission
  git.cafe #22835; open; afrojun:fix/preview-loopback-permission
GitHub PR API confirms OPEN and the same head.
PR commits authored by afrojun and maria-rcks; none by juliusmarminge or t3dotgg.
Read description, diff, comments, and reviews.

Main baseline:
git worktree add ../main github/main
  HEAD 36aea583bb
vp i
  successful
setsid nohup timeout 5400 vp run dev > /tmp/main-dev.log 2>&1 &
  captured PID 33521
  [dev-runner] mode=dev source=worktree /home/user/main serverPort=16733 webPort=8693 baseDir=/home/user/main/.t3
  Listening on http://127.0.0.1:16733

Repo Playwright, /usr/bin/google-chrome:
Paired through startup URL.
Added /home/user/main through Add project -> Local folder.
Selected GPT-6.1-Sol in the composer.
Submitted: Run git status --short and git rev-parse --short HEAD in this project. Do not modify files. Report the commit and whether the working tree is clean.
Observed completed response in real client:
  commit: 36aea583bb
  working tree is clean.
  Worked for 14s
This proves main's web/client/provider path only, not the changed permission behavior.

Desktop attempt:
Started actual desktop bundle watcher and actual Electron 44.9.3 / Chromium 152.0.7977.167.
Installed missing libsecret-1-dev build dependency.
Set localEnvironmentEnabled=false in isolated desktop settings to avoid starting a second backend.
Initial startup opened a new-keyring password prompt. Did not enter a password or create a keyring.
Restarted task-owned desktop process with unavailable session-bus address to avoid keyring access.
Desktop main window opened and automation connected.
Add environment using http://127.0.0.1:16733 failed:
  Could not register connection: ConnectionTransientError: Could not save the local connection catalog: Desktop secure storage is unavailable in this system context.
Stopped main web/server before trying standard desktop development mode.

setsid nohup timeout 5400 env DBUS_SESSION_BUS_ADDRESS=unix:path=/tmp/t3-no-session-bus T3CODE_DESKTOP_REMOTE_DEBUGGING_PORT=9223 vp run dev:desktop > /tmp/main-desktop-dev.log 2>&1 &
  captured PID 55037
  [dev-runner] mode=dev:desktop source=worktree /home/user/main serverPort=16733 webPort=8693 baseDir=/home/user/main/.t3
  ~/apps/web$ vp build
  ~/apps/web$ vp dev
  VITE+ ready in 1304 ms
  transforming...
Build did not reach a usable desktop environment before timeout. Later log output:
  JavaScript callbacks ran for 197.3s of this 3908.9s build (5%).
  JavaScript callbacks ran for 435.4s of this 3364.1s build (13%).
Startup exceeded the brief's 10-minute stall threshold. No permission queries, loopback requests, or neighboring desktop permissions were exercised.

PR checkout:
git switch -c maria/verify-pr-22835 e1ea6752659d932f460138cbc239eb76e7e70d71
vp i
  successful
No PR-head dev server or PR-head provider turn was reached within the task budget.

Checks:
Stored PR CI: 24 successful, 0 pending, 0 failing.
New focused test attempt through blacksmith-check did not reach test execution: source synchronization/transport timed out. No new test pass is claimed.

Not verified:
- main reproduction of the permission bug
- PR permission query change and loopback fetch
- neighboring LAN/legacy permission denials and clipboard behavior
- PR-head web/provider flow
- Okta FastPass/Okta Verify authentication (no tenant/helper available)
- macOS, Windows, iOS, Android

No source changes, commits, pushes, labels, merges, closes, rebases, or force-pushes.