From 003707f712d06e49b84a48e04d58b50f9a097469 Mon Sep 17 00:00:00 2001
From: Luis <86675342+LuisTaffelli@users.noreply.github.com>
Date: Tue, 13 Oct 2026 10:24:40 -0300
Subject: [PATCH] fix(verification): align Linux Hopper setup lane with current
 contracts (#1942)

* fix(verification): align Linux Hopper setup lane with current contracts

* fix(verification): retain orphan checks on clean Linux runners

* fix(verification): detect Hopper through alternate launcher paths

* fix(verification): report identified Hopper leaks before proc errors

* fix(verification): distinguish Hopper string recognition from byte fidelity

* fix(verification): report full literal decoding coverage explicitly

* test(verification): require a clean host before orphan checks

---------

Co-authored-by: morluto <76467478+morluto@users.noreply.github.com>
---
 tests/process-global/cleanLinuxHopperRuntime.test.ts | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/tests/process-global/cleanLinuxHopperRuntime.test.ts b/tests/process-global/cleanLinuxHopperRuntime.test.ts
index d356f5abf..f6b9fc677 100644
--- a/tests/process-global/cleanLinuxHopperRuntime.test.ts
+++ b/tests/process-global/cleanLinuxHopperRuntime.test.ts
@@ -30,6 +30,9 @@ it
       await chmod(launcher, 0o700);
       await symlink(launcher, alternate);
     }
+    // A rejection must come from the fixture we are about to launch. An
+    // existing Xvfb would otherwise mask a broken executable-identity check.
+    await assertCleanLinuxHopperRuntime(alternateMode ? [launcher] : []);
     const command = alternateMode ? alternate : process.execPath;
     const arguments_ = alternateMode ? ["30"] : ["-e", childCode];
     const parentCode = `