Baseline: 4040867bb46a90a8f41c687d7b454b5ece97a34f
Final: fa4f43f61f279921eb7b9803c01f812d0d779efa
Fresh runtime/test validation: 2026-10-22 UTC
before O1: 2 attempts, 2 prompts; original command exit 255 and expected stderr; returned prompt cancellation
after O1: 2 attempts, 0 prompts; original command exit 255 and expected stderr; returned SshCommandError with byte-identical stderr to command and baseline
before O2: 2 attempts, 2 prompts; original command exit 255 and expected stderr; returned prompt cancellation
after O2: 2 attempts, 0 prompts; original command exit 255 and expected stderr; returned SshCommandError with byte-identical stderr to command and baseline
before O3: 2 attempts, 2 prompts; original command exit 255 and expected stderr; returned prompt cancellation
after O3: 2 attempts, 0 prompts; original command exit 255 and expected stderr; returned SshCommandError with byte-identical stderr to command and baseline
Tests: baseline exactly 3 signing failures / 13 passes; final 16 passes, controls O4/O5/O6 pass in both.
Prior raw-SSH control: BatchMode=yes 255; BatchMode=no askpass authenticates and harmless printf exits 0. Not manager retry proof.