| # Original connect admission and password gates | |
| RE-918. Reproduce with `python3 scripts/analyze_qvm_connect_admission.py`; focused validation: `cargo xtask test-group qvm-connect-admission`. [Machine report](qvm-connect-admission.json). | |
| 160 actual173979 prefix cases execute userinfo70503, address252643, unsigned36306 and case-folded69386. Native userinfo is fetched first; nonzero bot flag bypasses address/password checks. Banned rejection precedes password lookup. Empty server password or case-insensitive none disables the final case-sensitive check. Rejections occur before client clear; exact messages, lookup order and selector carry are verified. Filter scratch, engine userinfo/password and native admission remain explicit boundaries. | |
| Original executable/native runtime and complete Linux/macOS Rust/Bevy/Solari acceptance remain unverified. | |