From 19dc9670adcbdf9b3d8359c6447f92e363382d8b Mon Sep 17 00:00:00 2001
From: Jinwoo-H <jinwoo0825@gmail.com>
Date: Sun, 23 Aug 2026 21:54:12 -0400
Subject: [PATCH] fix(runtime): require fresh owning PTY presence

---
 src/main/runtime/orca-runtime.ts | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/src/main/runtime/orca-runtime.ts b/src/main/runtime/orca-runtime.ts
index ea24a7eef70..8ec0737c036 100644
--- a/src/main/runtime/orca-runtime.ts
+++ b/src/main/runtime/orca-runtime.ts
@@ -20704,6 +20704,9 @@ export class OrcaRuntimeService {
         if (!evidence || evidence.status !== 'live') {
           return result(evidence?.status ?? 'unverifiable')
         }
+        if (!this.inventoryProvesRestoredBindingPresent(freshPtyInventory, binding)) {
+          return result('unverifiable')
+        }
         if (binding.source === 'persisted') {
           return result('unverifiable')
         }
@@ -20748,6 +20751,7 @@ export class OrcaRuntimeService {
     if (
       encodedHost === 'foreign' ||
       (encodedHost !== null && encodedHost !== hook.hostKey) ||
+      (controllerIdentity?.wslDistro && !hook.hostKey.startsWith('wsl:')) ||
       (hook.hostKey.startsWith('wsl:') &&
         controllerIdentity?.wslDistro?.toLowerCase() !== hook.hostKey.slice(4))
     ) {