SSH fetch approval proof — local head 5c1a62e624422d5f865b7196e698723aa6bd1f45 Baseline: main49b0f9683c. Linux x86_64, OpenSSH9.6p1 Ubuntu, Git2.43. Real GitVcsDriverCore service, NodeServices process spawner, disposable loopback sshd, confirmation-constrained ssh-agent (ssh-add -c) and disposable SSH_ASKPASS helper. The helper holds approval, approves after5s, or approves immediately. No desktop GUI, 1Password, FIDO device, macOS, Windows, iOS, Android or Electron desktop verification. No live user keys/configuration or T3 database used. Before module source is loaded at its original module URL; after loads actual checkout source. No Git/fetch/SSH mocks. BEFORE — pending real agent confirmation: Fixture root /tmp/t3-ssh-approval-proof-6Ovz91; real OpenSSH sshd + confirmation-constrained ssh-agent. No desktop GUI approval claimed. (node:285266) ExperimentalWarning: stripTypeScriptTypes is an experimental feature and might change at any time (Use `node --trace-warnings ...` to show where the warning was created) {"outcome":"failure","tag":"GitCommandError","detail":"Git command timed out.","seconds":"30.15"} Observed milestones: real ssh-agent confirmation requested Stopped captured fixture agent and sshd PIDs. AFTER — same pending real agent confirmation: Fixture root /tmp/t3-ssh-approval-proof-NCx6Ak; real OpenSSH sshd + confirmation-constrained ssh-agent. No desktop GUI approval claimed. {"outcome":"failure","tag":"GitCommandError","detail":"SSH key authorization timed out. Approve or unlock the SSH key on the computer running T3 Code, then retry, or use an HTTPS remote.","seconds":"10.28"} Spawned Git processes still alive after scoped fetch: 0 Spawned SSH processes still alive after fetch: 0 Observed milestones: real ssh-agent confirmation requested Stopped captured fixture agent and sshd PIDs. AFTER — approve within5s: Fixture root /tmp/t3-ssh-approval-proof-lAr91O; real OpenSSH sshd + confirmation-constrained ssh-agent. No desktop GUI approval claimed. {"outcome":"success","seconds":"5.37"} Spawned Git processes still alive after scoped fetch: 0 Spawned SSH processes still alive after fetch: 0 Observed milestones: real ssh-agent confirmation requested; authenticated server command started Stopped captured fixture agent and sshd PIDs. AFTER — authenticated server delays15s: Fixture root /tmp/t3-ssh-approval-proof-kirC0Z; real OpenSSH sshd + confirmation-constrained ssh-agent. No desktop GUI approval claimed. {"outcome":"success","seconds":"15.39"} Spawned Git processes still alive after scoped fetch: 0 Spawned SSH processes still alive after fetch: 0 Observed milestones: real ssh-agent confirmation requested; authenticated server command started Stopped captured fixture agent and sshd PIDs. PRESERVATION — GIT_CONFIG hides configured core.sshCommand from preflight: Fixture root /tmp/t3-ssh-approval-proof-GTmirT; real OpenSSH sshd + confirmation-constrained ssh-agent. No desktop GUI approval claimed. {"outcome":"failure","tag":"GitCommandError","detail":"git fetch origin failed","seconds":"0.08"} Spawned Git processes still alive after scoped fetch: 0 Observed milestones: configured SSH command used; configured SSH command used Stopped captured fixture agent and sshd PIDs. PRESERVATION — recursive submodule has custom SSH command: Fixture root /tmp/t3-ssh-approval-proof-x5jBNT; real OpenSSH sshd + confirmation-constrained ssh-agent. No desktop GUI approval claimed. {"outcome":"failure","tag":"GitCommandError","detail":"git fetch origin failed","seconds":"0.12"} Spawned Git processes still alive after scoped fetch: 0 Observed milestones: configured submodule SSH used; configured submodule SSH used Stopped captured fixture agent and sshd PIDs. CALLER CANCELLATION — service scope cancelled after5s, before approval deadline: Fixture root /tmp/t3-ssh-approval-proof-PQuKJL; real OpenSSH sshd + confirmation-constrained ssh-agent. No desktop GUI approval claimed. {"outcome":"failure","tag":"TimeoutError","seconds":"5.06"} Spawned Git processes still alive after scoped fetch: 0 Spawned SSH processes still alive after fetch: 0 Observed milestones: real ssh-agent confirmation requested Stopped captured fixture agent and sshd PIDs.