Build each commit with vp i and vp run build:desktop. Install Electron from apps/desktop with node node_modules/electron/install.js. Run Electron under headless-desktop with --no-sandbox --disable-gpu and a remote debugging port. Use independent HOME, XDG_CONFIG_HOME, XDG_DATA_HOME, T3CODE_HOME and T3CODE_DEV_SEED=0. Serve that commit’s web renderer on loopback; configure VITE_DEV_SERVER_URL, T3CODE_PORT and T3CODE_DEV_REMOTE_T3_SERVER_ENTRY_PATH to its built server.

Synthetic fixture: isolated OpenSSH server on loopback, separate unprivileged account proofssh24449 with its home in PROOF_ROOT/remote, generated temporary host/client Ed25519 keys, public-key authentication only. SSH alias proof-vm starts with HostName 127.0.0.1, User proofssh24449, Port 22441. A wrapper invokes the real /usr/bin/ssh -F PROOF_ROOT/client/.ssh/config. The driver restarts only this sshd using its captured PID and updates Port to 22442 then 22443. Set PROOF_ROOT and CDP_PORT for each driver invocation; install playwright-core for its import. Run public-prove-desktop.mjs <side> for manual entry or <side> picker for discovered alias. Remove the saved environment in the UI and reset the endpoint before each run. public-prove-overrides.mjs checks explicit overrides against conflicting config.

No mocks of desktop IPC, provisioning, SSH resolution, tunnels, persistence or reconnect were used. The remote T3 process ran from the respective built commit. The endpoint was restarted on a different port rather than rebooting a VM. Recordings are timestamped real-renderer screenshots encoded with ffmpeg. Stills require matching screenshots 500 ms apart. Gray rectangles redact machine labels.